Merge pull request #31 from carlsimpson-magento/feature/webhook-sync

Add webhook endpoint for GitHub docs sync

Author: carl-simpson

app/Http/Controllers/WebhookController.php

@@ -0,0 +1,100 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Artisan;
+use Illuminate\Support\Facades\Log;
+use Symfony\Component\Process\Process;
+
+class WebhookController extends Controller
+{
+    /**
+     * Handle GitHub webhook to sync documentation.
+     */
+    public function syncDocs(Request $request)
+    {
+        // Verify webhook secret
+        $secret = config('services.github.webhook_secret');
+
+        if (!$secret) {
+            Log::error('Webhook secret not configured');
+            return response()->json(['error' => 'Webhook not configured'], 500);
+        }
+
+        // Verify GitHub signature
+        $signature = $request->header('X-Hub-Signature-256');
+        if (!$signature) {
+            Log::warning('Webhook request missing signature');
+            return response()->json(['error' => 'Missing signature'], 401);
+        }
+
+        $payload = $request->getContent();
+        $expectedSignature = 'sha256=' . hash_hmac('sha256', $payload, $secret);
+
+        if (!hash_equals($expectedSignature, $signature)) {
+            Log::warning('Webhook signature mismatch');
+            return response()->json(['error' => 'Invalid signature'], 401);
+        }
+
+        // Only process push events to main branch
+        $event = $request->header('X-GitHub-Event');
+        if ($event !== 'push') {
+            return response()->json(['message' => 'Event ignored', 'event' => $event]);
+        }
+
+        $payload = json_decode($request->getContent(), true);
+        $ref = $payload['ref'] ?? '';
+
+        if ($ref !== 'refs/heads/main') {
+            return response()->json(['message' => 'Branch ignored', 'ref' => $ref]);
+        }
+
+        Log::info('Starting docs sync from webhook');
+
+        try {
+            // Pull latest docs
+            $docsPath = resource_path('docs/main');
+
+            $fetchProcess = new Process(['git', 'fetch', 'origin', 'main'], $docsPath);
+            $fetchProcess->run();
+
+            if (!$fetchProcess->isSuccessful()) {
+                throw new \RuntimeException('Git fetch failed: ' . $fetchProcess->getErrorOutput());
+            }
+
+            $resetProcess = new Process(['git', 'reset', '--hard', 'origin/main'], $docsPath);
+            $resetProcess->run();
+
+            if (!$resetProcess->isSuccessful()) {
+                throw new \RuntimeException('Git reset failed: ' . $resetProcess->getErrorOutput());
+            }
+
+            // Clear Laravel caches
+            Artisan::call('cache:clear');
+            Artisan::call('view:clear');
+            Artisan::call('config:clear');
+            Artisan::call('route:clear');
+
+            // Rebuild caches
+            Artisan::call('config:cache');
+            Artisan::call('route:cache');
+            Artisan::call('view:cache');
+
+            Log::info('Docs sync completed successfully');
+
+            return response()->json([
+                'success' => true,
+                'message' => 'Documentation synced successfully',
+            ]);
+
+        } catch (\Exception $e) {
+            Log::error('Docs sync failed: ' . $e->getMessage());
+
+            return response()->json([
+                'error' => 'Sync failed',
+                'message' => $e->getMessage(),
+            ], 500);
+        }
+    }
+}

app/Http/Middleware/VerifyCsrfToken.php

@@ -12,6 +12,6 @@ class VerifyCsrfToken extends Middleware
      * @var array
      */
     protected $except = [
-        //
+        'webhook/*',
     ];
 }

config/services.php

@@ -34,6 +34,7 @@
         'token' => env('GITHUB_TOKEN'),
         'owner' => env('GITHUB_REPO_OWNER', 'magentoopensource'),
         'repo' => env('GITHUB_REPO_NAME', 'docs'),
+        'webhook_secret' => env('GITHUB_WEBHOOK_SECRET'),
     ],
 
 ];

routes/web.php

@@ -3,6 +3,7 @@
 use Illuminate\Support\Facades\Route;
 use App\Http\Controllers\DocsController;
 use App\Http\Controllers\TeamController;
+use App\Http\Controllers\WebhookController;
 
 // Apply rate limiting to all routes to prevent abuse
 // 120 requests per minute per IP (reasonable for a documentation site)
@@ -21,3 +22,8 @@
 
     Route::get("team", [TeamController::class, "index"])->name("team");
 });
+
+// GitHub webhook for docs sync (excluded from throttling)
+Route::post('/webhook/sync-docs', [WebhookController::class, 'syncDocs'])
+    ->middleware('throttle:10,1')
+    ->name('webhook.sync-docs');