<?php
/**
* Cloud service cls
*
* @package LiteSpeed
* @since 3.0
*/
namespace LiteSpeed;
defined( 'WPINC' ) || exit();
/**
* Class Cloud
*
* Handles QUIC.cloud communication, node detection, activation, and related utilities.
*/
class Cloud extends Base {
use Cloud_Auth;
use Cloud_Request;
use Cloud_Node;
use Cloud_Misc;
const LOG_TAG = '❄️';
/**
* Base API server URL.
*
* @var string
*/
private $_cloud_server = 'https://api.quic.cloud';
/**
* Cloud dashboard URL.
*
* @var string
*/
private $_cloud_server_dash = 'https://my.quic.cloud';
/**
* Cloud WP API server URL.
*
* @var string
*/
protected $_cloud_server_wp = 'https://wpapi.quic.cloud';
const SVC_D_ACTIVATE = 'd/activate';
const SVC_U_ACTIVATE = 'u/wp3/activate';
const SVC_D_ENABLE_CDN = 'd/enable_cdn';
const SVC_D_LINK = 'd/link';
const SVC_D_API = 'd/api';
const SVC_D_DASH = 'd/dash';
const SVC_D_V3UPGRADE = 'd/v3upgrade';
const SVC_U_LINK = 'u/wp3/link';
const SVC_U_ENABLE_CDN = 'u/wp3/enablecdn';
const SVC_D_STATUS_CDN_CLI = 'd/status/cdn_cli';
const SVC_D_NODES = 'd/nodes';
const SVC_D_SYNC_CONF = 'd/sync_conf';
const SVC_D_USAGE = 'd/usage';
const SVC_D_SETUP_TOKEN = 'd/get_token';
const SVC_D_DEL_CDN_DNS = 'd/del_cdn_dns';
const SVC_PAGE_OPTM = 'page_optm';
const SVC_CCSS = 'ccss';
const SVC_UCSS = 'ucss';
const SVC_VPI = 'vpi';
const SVC_LQIP = 'lqip';
const SVC_QUEUE = 'queue';
const SVC_IMG_OPTM = 'img_optm';
const SVC_HEALTH = 'health';
const SVC_CDN = 'cdn';
const SVC_OPTIMAX = 'optimax';
const IMG_OPTM_DEFAULT_GROUP = 200;
const IMGOPTM_TAKEN = 'img_optm-taken';
const TTL_NODE = 3; // Days before node expired
const EXPIRATION_REQ = 300; // Seconds of min interval between two unfinished requests
const API_REPORT = 'wp/report';
const API_NEWS = 'news';
const API_VER = 'ver_check';
const API_BETA_TEST = 'beta_test';
const API_REST_ECHO = 'tool/wp_rest_echo';
const SIGN_VERSION = 1;
const SIGN_MAX_AGE = 300;
const SIGN_NONCE_MAX = 512;
const SIGN_BODY_MAX_BYTES = 1048576;
const SIGN_MAX_ITEMS = 200;
const SIGN_ACTION_NOTIFY_IMG = 'notify_img';
const SIGN_ACTION_CDN_STATUS = 'cdn_status';
const SIGN_ACTION_ERR_DOMAINS = 'err_domains';
const SIGN_ACTION_IP_VALIDATE = 'ip_validate';
const SIGN_ACTION_PING = 'ping';
const CALLBACK_ERR_REQUEST = 'litespeed_callback_request';
const CALLBACK_ERR_ENVELOPE = 'litespeed_callback_envelope';
const CALLBACK_ERR_ACTION = 'litespeed_callback_action';
const CALLBACK_ERR_SITE = 'litespeed_callback_site';
const CALLBACK_ERR_METADATA = 'litespeed_callback_metadata';
const CALLBACK_ERR_TIMESTAMP = 'litespeed_callback_timestamp';
const CALLBACK_ERR_SIGNATURE = 'litespeed_callback_signature';
const CALLBACK_ERR_REPLAY = 'litespeed_callback_replay';
const CALLBACK_ERR_STORAGE = 'litespeed_callback_storage';
const CALLBACK_ERR_CAPACITY = 'litespeed_callback_capacity';
/** Maximum callback admin-notice length. */
const CALLBACK_MSG_MAX_BYTES = 65536;
const ITEM_SIGN_NONCE = 'sign_nonce.';
/**
* Trusted callback keys, isolated by environment. Add the next key before rotation and remove revoked keys in an update.
*/
const SERVER_SIGN_KEYS = [
'prod' => [
'qc' => [
'qc-2025-01' => '1a8mxBAOPQ4SsyCncktY2O/CcN0hfv891qCYth7ay2I=',
],
'wpapi' => [
'wpapi-2025-01' => 'g9hiXo+P/fX4FbOnZu5dDKpEQXpwuDSkuCkCaX3ZSpk=',
],
],
'preview' => [
'qc' => [
'qc-2025-01' => 'm13AJlqQ5ir1ro1WMSK8h7Hjz0OAl4t6kepSAjqsMTY=',
],
'wpapi' => [
'wpapi-2025-01' => 'g9hiXo+P/fX4FbOnZu5dDKpEQXpwuDSkuCkCaX3ZSpk=',
],
],
];
/**
* Center services hosted at the central API server.
*
* @var string[]
*/
private static $center_svc_set = [
self::SVC_D_ACTIVATE,
self::SVC_U_ACTIVATE,
self::SVC_D_ENABLE_CDN,
self::SVC_D_LINK,
self::SVC_D_NODES,
self::SVC_D_SYNC_CONF,
self::SVC_D_USAGE,
self::SVC_D_API,
self::SVC_D_V3UPGRADE,
self::SVC_D_DASH,
self::SVC_D_STATUS_CDN_CLI,
// self::API_NEWS,
self::API_REPORT,
// self::API_VER,
// self::API_BETA_TEST,
self::SVC_D_SETUP_TOKEN,
self::SVC_D_DEL_CDN_DNS,
];
/**
* Services hosted on the WP API server.
*
* @var string[]
*/
private static $wp_svc_set = [ self::API_NEWS, self::API_VER, self::API_BETA_TEST, self::API_REST_ECHO ];
/**
* Public services that do not require an API key.
*
* @var string[]
*/
private static $_pub_svc_set = [ self::API_NEWS, self::API_REPORT, self::API_VER, self::API_BETA_TEST, self::API_REST_ECHO, self::SVC_D_V3UPGRADE, self::SVC_D_DASH ];
/**
* Services that should go through the queue.
*
* @var string[]
*/
private static $_queue_svc_set = [ self::SVC_CCSS, self::SVC_UCSS, self::SVC_VPI ];
/**
* Services that need load check.
*
* @var string[]
*/
public static $services_load_check = [
// self::SVC_CCSS,
// self::SVC_UCSS,
// self::SVC_VPI,
self::SVC_LQIP,
self::SVC_HEALTH,
];
/**
* All supported services.
*
* @var string[]
*/
public static $services = [
self::SVC_IMG_OPTM,
self::SVC_PAGE_OPTM,
self::SVC_CCSS,
self::SVC_UCSS,
self::SVC_VPI,
self::SVC_LQIP,
self::SVC_CDN,
self::SVC_HEALTH,
self::SVC_OPTIMAX,
// self::SVC_QUEUE,
];
const TYPE_CLEAR_PROMO = 'clear_promo';
const TYPE_REDETECT_CLOUD = 'redetect_cloud';
const TYPE_CLEAR_CLOUD = 'clear_cloud';
const TYPE_ACTIVATE = 'activate';
const TYPE_LINK = 'link';
const TYPE_ENABLE_CDN = 'enablecdn';
const TYPE_API = 'api';
const TYPE_SYNC_USAGE = 'sync_usage';
const TYPE_RESET = 'reset';
const TYPE_SYNC_STATUS = 'sync_status';
/**
* Init
*
* @since 3.0
*/
public function __construct() {
$allowed_hosts = [ 'wpapi.quic.cloud' ];
if ( defined( 'LITESPEED_DEV' ) && constant( 'LITESPEED_DEV' ) ) {
$allowed_hosts[] = 'my.preview.quic.cloud';
$allowed_hosts[] = 'api.preview.quic.cloud';
$this->_cloud_server = 'https://api.preview.quic.cloud';
$this->_cloud_server_dash = 'https://my.preview.quic.cloud';
$this->_cloud_server_wp = 'https://wpapi.quic.cloud';
} else {
$allowed_hosts[] = 'my.quic.cloud';
$allowed_hosts[] = 'api.quic.cloud';
}
add_filter( 'allowed_redirect_hosts', function( $hosts ) use ( $allowed_hosts ) {
if ( ! is_array ( $hosts ) ) {
$hosts = [];
}
return array_merge( $hosts, $allowed_hosts );
} );
$this->_summary = self::get_summary();
}
/**
* Return succeeded response
*
* @since 3.0
*
* @param array $data Additional data.
* @return array
*/
public static function ok( $data = [] ) {
$data['_res'] = 'ok';
return $data;
}
/**
* Return error
*
* @since 3.0
*
* @param string $code Error code.
* @return array
*/
public static function err( $code ) {
self::debug( '❌ Error response code: ' . $code );
return [
'_res' => 'err',
'_msg' => $code,
];
}
/**
* Handle all request actions from main cls
*
* @since 3.0
* @access public
*/
public function handler() {
$type = Router::verify_type();
switch ( $type ) {
case self::TYPE_CLEAR_CLOUD:
$this->clear_cloud();
break;
case self::TYPE_REDETECT_CLOUD:
// phpcs:ignore WordPress.Security.NonceVerification.Recommended
$svc = ! empty( $_GET['svc'] ) ? sanitize_text_field( wp_unslash( $_GET['svc'] ) ) : '';
if ( $svc ) {
$this->detect_cloud( $svc, true );
}
break;
case self::TYPE_CLEAR_PROMO:
$this->_clear_promo();
break;
case self::TYPE_RESET:
$this->reset_qc();
break;
case self::TYPE_ACTIVATE:
$this->init_qc();
break;
case self::TYPE_LINK:
$this->link_qc();
break;
case self::TYPE_ENABLE_CDN:
$this->enable_cdn();
break;
case self::TYPE_API:
// phpcs:ignore WordPress.Security.NonceVerification.Recommended
$action2 = ! empty( $_GET['action2'] ) ? sanitize_text_field( wp_unslash( $_GET['action2'] ) ) : '';
if ( $action2 ) {
$this->api_link_call( $action2 );
}
break;
case self::TYPE_SYNC_STATUS:
$this->load_qc_status_for_dash( 'cdn_dash', true );
$msg = __( 'Sync QUIC.cloud status successfully.', 'litespeed-cache' );
Admin_Display::success( $msg );
break;
case self::TYPE_SYNC_USAGE:
$this->sync_usage();
$msg = __( 'Sync credit allowance with Cloud Server successfully.', 'litespeed-cache' );
Admin_Display::success( $msg );
break;
default:
break;
}
Admin::redirect();
}
}