INT-192: Secure proxy endpoint

Author: Rayn93

CHANGELOG.md

@@ -1,4 +1,8 @@
 # Changelog
+## Unreleased
+### Fix
+- Secure proxy endpoint
+
 ## [v5.4.0] - 2025.03.05
 ### Add
 - Add possibility to disable Web Components integration per sales channel

src/Storefront/Controller/ProxyController.php

@@ -15,6 +15,7 @@
 use Symfony\Component\HttpFoundation\JsonResponse;
 use Symfony\Component\HttpFoundation\Request;
 use Symfony\Component\HttpFoundation\Response;
+use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
 use Symfony\Component\Routing\Annotation\Route;
 
 /**
@@ -46,6 +47,20 @@ public function execute(
         ClientBuilder $clientBuilder,
         EventDispatcherInterface $eventDispatcher,
     ): Response {
+        if (!$this->config->isProxyEnabled()) {
+            throw new NotFoundHttpException('Proxy is disabled.');
+        }
+
+//        $ffo = $request->headers->get('_ffo');
+//        $fft = $request->headers->get('_fft');
+//
+//        if (!$ffo || !$fft) {
+//            return new JsonResponse(
+//                ['message' => 'UNAUTHORIZED'],
+//                Response::HTTP_UNAUTHORIZED
+//            );
+//        }
+
         $client = $clientBuilder
             ->withServerUrl($this->config->getServerUrl())
             ->withCredentials(new Credentials(...$this->config->getCredentials()))