dan/origo
1
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

Adding so many things.

Browse Source
This commit is contained in:
dan612
2026-03-22 13:23:31 -04:00
parent 7d5904e925
commit b9e362497a
10 changed files with 95 additions and 41 deletions
Download Patch File Download Diff File Expand all files Collapse all files

45
src/Controller/ApiWebhookController.php
View File

@@ -30,30 +30,49 @@ class ApiWebhookController extends ControllerBase implements ControllerInterface
* The response.
*/
public function getResponse(): string {
header('Access-Control-Allow-Origin: *'); // Allow all origins.
header('Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS');
header('Access-Control-Allow-Headers: Content-Type, Authorization');
// @todo: Create Enum.
$allowed_origins = [
'http://127.0.0.1:8088',
'http://localhost:8088',
'https://yourproduction-site.com',
'https://another-client-site.io'
];
$origin = $_SERVER['HTTP_ORIGIN'] ?? '';
// Check if the requester is in our whitelist
if (in_array($origin, $allowed_origins)) {
header("Access-Control-Allow-Origin: $origin");
header("Access-Control-Allow-Credentials: true");
header("Access-Control-Allow-Methods: GET, POST, OPTIONS");
header("Access-Control-Allow-Headers: Content-Type, Authorization");
}
// Handle preflight OPTIONS request
if ($_SERVER['REQUEST_METHOD'] === 'OPTIONS') {
http_response_code(200);
exit(); // Stop here - don't process the request
}
// Make sure we have a path and account before proceeding.
$path = $this->request->post('path');
$account_id = $this->request->post('account');
if (
!$path ||
!$account_id
) {
$raw_input = file_get_contents('php://input');
$json_data = json_decode($raw_input, true) ?? [];
$path = $json_data['path'] ?? $this->request->post('path');
$account_id = $json_data['account'] ?? $this->request->post('account');
if (!$path || !$account_id) {
// Log what actually arrived to help debugging
error_log("Missing Data - Path: $path, Account: $account_id. Raw: $raw_input");
header("HTTP/1.1 422 Unprocessable Entity");
die();
die("Missing required fields");
}
// @todo: validate the account id.
$entry = [
'page' => $path,
'account_id' => $account_id,
'user_agent' => $this->request->post('user_agent'),
'referrer' => $this->request->post('referrer'),
'title' => $json_data['title'] ?? null,
'user_agent' => $json_data['user_agent'] ?? null,
'screen_res' => $json_data['screen_res'] ?? null,
'language' => $json_data['lang'] ?? null,
'timestamp' => $json_data['ts'] ?? null,
'referrer' => $json_data['referrer'] ?? null,
'ip' => $this->request->ip(),
];
$clean_entry = array_filter($entry);