appwrite/src/Appwrite/Utopia/Request.php

<?php

namespace Appwrite\Utopia;

use Appwrite\SDK\Method;
use Appwrite\Utopia\Database\Documents\User;
use Appwrite\Utopia\Request\Filter;
use Swoole\Http\Request as SwooleRequest;
use Utopia\Database\Validator\Authorization;
use Utopia\Http\Adapter\Swoole\Request as UtopiaRequest;
use Utopia\Http\Route;
use Utopia\System\System;

class Request extends UtopiaRequest
{
    /**
     * @var array<Filter>
     */
    private array $filters = [];
    private static ?Route $route = null;

    public function __construct(SwooleRequest $request)
    {
        $trustedHeaders = System::getEnv('_APP_TRUSTED_HEADERS', 'x-forwarded-for');
        $this->setTrustedIpHeaders(explode(',', $trustedHeaders));

        parent::__construct($request);
    }

    /**
     * @inheritdoc
     */
    public function getParams(): array
    {
        $parameters = parent::getParams();

        if (!$this->hasFilters() || !self::hasRoute()) {
            return $parameters;
        }

        $methods = self::getRoute()->getLabel('sdk', null);

        if (empty($methods)) {
            return $parameters;
        }

        if (!\is_array($methods)) {
            $id = $methods->getNamespace() . '.' . $methods->getMethodName();
            foreach ($this->getFilters() as $filter) {
                $parameters = $filter->parse($parameters, $id);
            }
            return $parameters;
        }

        $matched = null;
        foreach ($methods as $method) {
            /** @var Method|null $method */
            if ($method === null) {
                continue;
            }

            // Find the method that matches the parameters passed
            $methodParamNames = \array_map(fn ($param) => $param->getName(), $method->getParameters());
            $invalidParams = \array_diff(\array_keys($parameters), $methodParamNames);

            // No params defined, or all params are valid
            if (empty($methodParamNames) || empty($invalidParams)) {
                $matched = $method;
                break;
            }
        }

        $id = $matched !== null
            ? $matched->getNamespace() . '.' . $matched->getMethodName()
            : 'unknown.unknown';

        // Apply filters
        foreach ($this->getFilters() as $filter) {
            $parameters = $filter->parse($parameters, $id);
        }

        return $parameters;
    }

    /**
     * Function to add a response filter, the order of filters are first in - first out.
     *
     * @param Filter $filter the response filter to set
     *
     * @return void
     */
    public function addFilter(Filter $filter): void
    {
        $this->filters[] = $filter;
    }

    /**
     * Return the currently set filter
     *
     * @return array<Filter>
     */
    public function getFilters(): array
    {
        return $this->filters;
    }

    /**
     * Reset filters
     *
     * @return void
     */
    public function resetFilters(): void
    {
        $this->filters = [];
    }

    /**
     * Check if a filter has been set
     *
     * @return bool
     */
    public function hasFilters(): bool
    {
        return !empty($this->filters);
    }

    /**
     * Function to set a request route
     *
     * @param Route|null $route the request route to set
     *
     * @return void
     */
    public static function setRoute(?Route $route): void
    {
        self::$route = $route;
    }

    /**
     * Return the current route
     *
     * @return Route|null
     */
    public static function getRoute(): ?Route
    {
        return self::$route;
    }

    /**
     * Check if a route has been set
     *
     * @return bool
     */
    public static function hasRoute(): bool
    {
        return self::$route !== null;
    }

    /**
     * Get headers
     *
     * Method for getting all HTTP header parameters, including cookies.
     *
     * @return array<string,mixed>
     */
    public function getHeaders(): array
    {
        try {
            $headers = $this->generateHeaders();
        } catch (\Throwable) {
            $headers = [];
        }

        if (empty($this->swoole->cookie)) {
            return $headers;
        }

        $cookieHeaders = [];
        foreach ($this->swoole->cookie as $key => $value) {
            $cookieHeaders[] = "{$key}={$value}";
        }

        if (!empty($cookieHeaders)) {
            $headers['cookie'] = \implode('; ', $cookieHeaders);
        }

        return $headers;
    }

    /**
     * Get header
     *
     * Method for querying HTTP header parameters. If $key is not found $default value will be returned.
     *
     * @param  string  $key
     * @param  string  $default
     * @return string
     */
    public function getHeader(string $key, string $default = ''): string
    {
        $headers = $this->getHeaders();
        return $headers[$key] ?? $default;
    }

    /**
     * Get User Agent
     *
     * Method for getting User Agent. Preferring forwarded agent for privileged users; otherwise returns default.
     *
     * @param  string  $default
     * @return string
     */
    public function getUserAgent(string $default = ''): string
    {
        $forwardedUserAgent = $this->getHeader('x-forwarded-user-agent');
        if (!empty($forwardedUserAgent)) {
            $roles = $this->authorization->getRoles();
            $isAppUser = $this->user?->isApp($roles) ?? false;

            if ($isAppUser) {
                return $forwardedUserAgent;
            }
        }

        return UtopiaRequest::getUserAgent($default);
    }

    /**
     * Creates a unique stable cache identifier for this GET request.
     * Stable-sorts query params, use `serialize` to ensure key&value are part of cache keys.
     *
     * @return string
     */
    public function cacheIdentifier(): string
    {
        $params = $this->getParams();
        ksort($params);
        return md5($this->getURI() . '*' . serialize($params) . '*' . APP_CACHE_BUSTER);
    }

    private ?Authorization $authorization = null;
    private ?User $user = null;

    public function setAuthorization(Authorization $authorization): void
    {
        $this->authorization = $authorization;
    }

    public function setUser(User $user): void
    {
        $this->user = $user;
    }
}