Files
elixforms-web-services/public/index.php
T

61 lines
2.0 KiB
PHP

<?php
$container = require __DIR__ . '/../bootstrap.php';
use Api\Auth\ApiTokenAuthenticator;
use Api\Core\Router;
use Api\Core\Request;
use Api\Core\Response;
use Api\Core\RateLimiter\RateLimiterInterface;
use Psr\Log\LoggerInterface;
$logger = $container->make(LoggerInterface::class);
set_exception_handler(function (\Throwable $e) use ($logger) {
$logger->error('Uncaught Exception: ' . $e->getMessage(), [
'exception' => $e,
'trace' => $e->getTraceAsString()
]);
http_response_code(500);
header('Content-Type: application/json');
echo json_encode([
'error' => 'Internal Server Error',
'message' => 'An unexpected error occurred.'
]);
exit;
});
$limiter = $container->make(RateLimiterInterface::class);
$router = new Router($container); // vedi nota: router può ricevere container
$request = new Request();
$response = new Response();
// Autenticazione separata per le API esterne
if (strpos($request->path(), '/api/') === 0) {
try {
$authenticator = $container->make(ApiTokenAuthenticator::class);
$authenticator->authenticate($request);
} catch (\Throwable $e) {
$logger->warning('External API auth failed', ['path' => $request->path(), 'error' => $e->getMessage()]);
$response->json(['error' => 'Unauthorized'], 401);
}
}
// register routes (path without version prefix)
$router->get('/users/index', 'UsersController@index');
$router->post('/users/create', 'UsersController@create');
$router->get('/example/test', 'ExampleController@test');
// Rate limiting by IP address
$key = $_SERVER['REMOTE_ADDR'] ?? 'unknown';
if (!$limiter->allow($key)) {
$retry = $limiter->getRetryAfter($key);
header('Retry-After: ' . $retry);
$logger->warning('Rate limit exceeded', ['ip' => $key]);
$response->json(['error' => 'Too Many Requests'], 429);
}
$logger->info('Dispatching request', ['path' => $request->path(), 'method' => $request->method()]);
$router->dispatch($request, $response);