Fix/813

[victorperezc]

Description

Fixing Bugs in Issue #813 #803 .

The global middleware is like a barrier between the actual endpoints logic and the wgsi application. It executes some logic in the middle and decides whether continue with the user request or throw an error. In this case, checks whether there exists an Initial Setup configured to continue with the user request. Otherwise, if the request is done on another resource other than POST /setup he is not allowed to access and the app raises 401 Not Allowed. This way the app is like 'sleeping' until it's configured through POST /setup and all other api calls are blocked

Flow and expected behaviour

1. Spin up a domain.
2. Call any API endpoint except POST /setup. You should get 401 and the following message "error": "This app is in sleep mode. Please undergo the initial setup first"
3. Call POST /setup to configure the domain and create the owner account. Once you get a 200, the domain has been successfully configured. For your request to go through you'd need to add the setup verification token 9G9MJ06OQH via POST parameters. For now, this is hardcoded in the environment for development purposes.

POST /setup
{
    "email": "owner@openmined.org",
    "password": "12345",
    "domain_name": "Openmined",
    "token":"9G9MJ06OQH"
}

How has this been tested?

Locally tested

Checklist

• I have followed the Contribution Guidelines and Code of Conduct
• I have commented my code following the OpenMined Styleguide
• I have labeled this PR with the relevant Type labels
• My changes are covered by tests

[IonesioJunior]

LGTM, thank you @victorperezc!