Switch to proxy URL to handle API requests to demo, #PG-5029

app/helpers/DemoProxy.php

@@ -0,0 +1,85 @@
+<?php
+/**
+ * Piwik - Open source web analytics
+ *
+ * @link http://piwik.org
+ * @license http://www.gnu.org/licenses/gpl-3.0.html GPL v3 or later
+ */
+
+namespace helpers;
+
+/**
+ * Proxy for demo.matomo.cloud, allows us to make single origin requests by doing them through this class
+ */
+class DemoProxy
+{
+
+    public const MATOMO_SWAGGER_PROXY_TARGET = 'https://demo.matomo.cloud';
+
+    /**
+     * Fetches a demo API GET response and returns the body and status code.
+     *
+     * @param string $url Demo API URL to request.
+     * @param string $authorizationHeader Optional Authorization header value to forward.
+     * @return array{body: string, statusCode: int}
+     */
+    public static function get(string $url, string $authorizationHeader = ''): array
+    {
+        $context = self::createContext($authorizationHeader);
+        $proxiedResponse = self::fetchResponse($url, $context);
+        $statusCode = self::parseStatusCode($proxiedResponse['responseHeaders']);
+
+        return [
+            'body' => $proxiedResponse['body'],
+            'statusCode' => $statusCode,
+        ];
+    }
+
+    private static function createContext(string $authorizationHeader)
+    {
+        return stream_context_create([
+            'http' => [
+                'method' => 'GET',
+                'header' => self::buildHeaders($authorizationHeader),
+                'ignore_errors' => true,
+                'timeout' => 30,
+            ],
+        ]);
+    }
+
+    private static function buildHeaders(string $authorizationHeader): string
+    {
+        if ($authorizationHeader === '') {
+            return '';
+        }
+
+        return 'Authorization: ' . $authorizationHeader;
+    }
+
+    /**
+     * @return array{body: string, responseHeaders: array}
+     */
+    private static function fetchResponse(string $url, $context): array
+    {
+        $body = @file_get_contents($url, false, $context);
+        if ($body === false) {
+            throw new \RuntimeException('Could not proxy HTTP request');
+        }
+
+        return [
+            'body' => $body,
+            'responseHeaders' => $http_response_header ?? [],
+        ];
+    }
+
+    private static function parseStatusCode(array $responseHeaders): int
+    {
+        $statusLine = $responseHeaders[0] ?? '';
+
+        if (preg_match('#^HTTP/\S+\s+(\d{3})#', $statusLine, $matches)) {
+            return (int) $matches[1];
+        }
+
+        return 200;
+    }
+}

app/routes/page.php

@@ -20,6 +20,7 @@
 use helpers\Content\Category\TracTicketArchiveCategory;
 use helpers\Content\Guide;
 use helpers\Content\PhpDoc;
+use helpers\DemoProxy;
 use helpers\DocumentNotExistException;
 use helpers\Environment;
 use helpers\OpenApiSpecRegistry;
@@ -31,6 +32,7 @@
 use Slim\Exception\HttpNotFoundException;
 
 
+
 function renderGuide(Slim\Views\Twig $view, Response $response, Psr\Http\Message\UriInterface $uri, Guide $guide, Category $category, string $template = 'guide.twig')
 {
     return $view->render($response, $template, [
@@ -265,6 +267,20 @@ function renderGuide(Slim\Views\Twig $view, Response $response, Psr\Http\Message
         ->withStatus(200);
 });
 
+$app->get('/demo-proxy/{path:.*}', function (Request $request, Response $response, $args) {
+    $path = ltrim($args['path'] ?? '', '/');
+    $targetUrl = rtrim(DemoProxy::MATOMO_SWAGGER_PROXY_TARGET, '/') . '/' . $path;
+    $query = $request->getUri()->getQuery();
+    if ($query !== '') {
+        $targetUrl .= '?' . $query;
+    }
+
+    $proxiedResponse = DemoProxy::get($targetUrl, $request->getHeaderLine('Authorization'));
+
+    $response->getBody()->write($proxiedResponse['body']);
+    return $response->withStatus($proxiedResponse['statusCode']);
+});
+
 $app->post('/receive-commit-hook', function (Request $request, Response $response, $args) {
     $params = $request->getQueryParams();
     if (empty($params["token"]) || !password_verify($params["token"], WEBHOOK_TOKEN)) {

app/templates/api-swagger.twig

@@ -19,7 +19,8 @@
     <script src="/vendor/swagger-ui/swagger-ui-bundle.js?{{ revision|e('html_attr') }}"></script>
     <script type="text/javascript">
     window.onload = function () {
-        let pluginSpec = {{ pluginSpecJson|raw }};
+        let pluginSpecJson = {{ pluginSpecJson|raw }};
+        let proxyBaseUrl = window.location.origin + '/demo-proxy';
         let summaryPrefix = '/index.php?module=API&method=';
 
         function clonePluginSpec(spec) {
@@ -50,10 +51,15 @@
         }
 
         if (typeof SwaggerUIBundle === 'function') {
+            let pluginSpec = clonePluginSpec(pluginSpecJson);
+
+            // CORs on demo not allowing authorization: Bearer anonymous in preflight, so we need a proxy into demo
+            pluginSpec.servers = [{ url: proxyBaseUrl }];
+
             SwaggerUIBundle({
                 dom_id: '#swagger-ui',
                 url: null,
-                spec: clonePluginSpec(pluginSpec),
+                spec: pluginSpec,
                 docExpansion: 'list',
                 tagsSorter: 'alpha',
                 presets: [