inphinit/proxy

Lib for create web proxy with CORS

2.0.0-beta2 2025-05-11 16:52 UTC

This package is auto-updated.

Last update: 2025-05-12 03:19:16 UTC


README

Until version 1.x, this project primarily served as a proxy solution for the html2canvas library. Version 2.0 marked a significant expansion, introducing extensive configuration and adaptation options that enable its use for a wide variety of needs and objectives.

Although developed as part of the Inphinit framework, the project operates completely independently. This means you can readily use it with any PHP framework or in a stand-alone application. While the project is modular, consider adopting the Inphinit framework itself for your new projects. For more details: https://inphinit.github.io

Proxies for other scripting languages

You do not use PHP, but need html2canvas working with proxy, see other proxies:

Installing

To install it you must have at least PHP 5.4, but it is recommended that you use PHP 8 due to PHP support issues, read:

You can install via composer:

composer require inphinit/proxy

Then add this to your script or controller:

use Inphinit\Proxy\Proxy;
use Inphinit\Proxy\Drivers\CurlDriver;
use Inphinit\Proxy\Drivers\StreamDriver;

$proxy = new Proxy();

// Set drivers used for download
$proxy->setDrivers([
    CurlDriver::class,
    StreamDriver::class
]);

// Set temporary location
$proxy->setTemporary('php://temp');

// Execute download
$proxy->download($_GET['url']);

// Display raw output
$proxy->response();

If you are not using web frameworks, you can download the release from https://github.com/inphinit/inphinit-php-proxy/releases, then extract the contents and move it to the web server and rename the folder, like this (optional):

mv inphinit-php-proxy-2.0.0 proxy

Configure html2canvas

If you are using a web framework, simply point to the address of the route you configured to use the proxy, for example:

html2canvas(document.getElementById('container'), {
    logging: true,
    proxy: '/proxy'
}).then((canvas) => {
    canvas.toBlob((blob) => { });
});

If you have manually downloaded it to use on your server, you can use the proxy.php script, a example:

html2canvas(document.getElementById('container'), {
    logging: true,
    proxy: '/proxy/proxy.php'
}).then((canvas) => {
    canvas.toBlob((blob) => { });
});

Setup proxy

Method Description
setDrivers(array $drivers): void Set drivers used to download the resource
setOptions(string $key, mixed $value): void Set generic options
getOptions([string $key]): mixed Get generic options
setAllowUrls(array $urls): void Set allowed URLs
addAllowType(string $type, bool $binary): void Add content-type to the allowed list
removeAllowType(string $type): void Remove content-type from the allowed list
setTemporary(string $path): void Sets temporary handle path, eg.: /mnt/storage/, php://temp, php://memory
getTemporary(): resource Get temporary stream
download(string $url[, bool $ignoreDownloadError]): void Perform download
setResponseCacheTime(int $seconds): void Enable or disable cache for Proxy::respose() or Proxy::jsonp()
response(): void Dump response to output
jsonp(string $callback): void Output JSONP callback with URL or data URI content
getContents([int $length[, int $offset]]): string If last download was successful, contents will be returned
getContentType(): string If last download was successful, content-type will be returned
getHttpStatus(): int If last download was successful, HTTP status will be returned
getLastErrorCode(): int If last download was failed, error code will be returned
getLastErrorMessage(): string If last download was failed, error message will be returned
reset(): void Reset last download

Generic options

Usage Description
setOptions('max_redirs', int $value) Set the redirect limit
setOptions('timeout', int $value) Set timeout for connections
setOptions('user_agent', string $value) Set Browser User-Agent
setOptions('referer', string $value) Set request header contains the absolute or partial address from which a resource has been requested
setOptions('curl', array $value) Options for CurlDriver. See: https://www.php.net/manual/en/curl.constants.php
setOptions('stream', array $value) Options for StreamDriver. See: https://www.php.net/manual/en/context.php

Setup cURL driver use generic options with 'curl' in first param, eg.: $proxy->setOptions('curl', [ ... ]);, a sample for change SSL version:

$proxy->setOptions('curl', [
    CURLOPT_SSLVERSION => CURL_SSLVERSION_TLSv1_3
]);

A example for disable SSL verify (for local tests):

$proxy->setOptions('curl', [
    CURLOPT_SSL_VERIFYHOST => 0,
    CURLOPT_SSL_VERIFYPEER => false
]);

For more constants options for use with $proxy->setOptions('curl', [ ... ]), see: https://www.php.net/manual/en/curl.constants.php

For setup Stream driver use generic options with 'stream' in first param, eg.: $proxy->setOptions('stream', [ ... ]), a sample for set HTTP protocol version:

$proxy->setOptions('stream', [
    'http' => [
        'protocol_version' => 1.0,
    ]
]);

An example SSL configuration:

$proxy->setOptions('stream', [
    'ssl' => [
        'verify_peer'   => true,
        'cafile'        => '/foo/bar/baz/cacert.pem',
        'verify_depth'  => 5,
        'CN_match'      => 'secure.example.com'
    ]
]);

Allow Content-Type

When executing the download() method a content-type validation will be performed, by default the following Content-Types are allowed:

Content-Type Proxy::jsonp()
image/apng base64
image/png base64
image/avif base64
image/webp base64
image/gif base64
image/jpeg base64
image/svg+xml URL-encoded
image/svg-xml URL-encoded

You can define another allowed content-type, example:

$proxy->addAllowType('image/x-icon', true);
$proxy->addAllowType('image/vnd.microsoft.icon', true);

Second parameter of the method specifies whether the Proxy::jsonp() should use URL encoding or Base64 encoding in the data URI scheme.

To remove an allowed Content-Type use the Proxy::removeAllowType() method, example:

$proxy->removeAllowType('image/apng');

How to use

To return the download response directly to the browser, use the Proxy::response() method:

use Inphinit\Proxy\Proxy;
use Inphinit\Proxy\Drivers\CurlDriver;
use Inphinit\Proxy\Drivers\StreamDriver;

$proxy = new Proxy();

$proxy->setDrivers([
    CurlDriver::class,
    StreamDriver::class
]);

$proxy->setTemporary('php://temp');
$proxy->download($url);

$proxy->response();

If you want to use the JSONP format, replace the Proxy::response method with Proxy::jsonp. In this example, the callback will return and receive the content in DATA URI format:

use Inphinit\Proxy\Proxy;
use Inphinit\Proxy\Drivers\CurlDriver;
use Inphinit\Proxy\Drivers\StreamDriver;

if (empty($_GET['callback'])) {
    die('Missing callback');
}

$proxy = new Proxy();

$proxy->setDrivers([
    CurlDriver::class,
    StreamDriver::class
]);

$proxy->setTemporary('php://temp');

try {
    $proxy->download($url);
    $proxy->jsonp($_GET['callback']);
} catch (Exception $ee) {
}

If you need to handle content or errors manually, you can use the Proxy::getContents, Proxy::getContentType, Proxy::getHttpStatus, Proxy::getLastErrorCode, Proxy::getLastErrorMessage methods:

use Inphinit\Proxy\Proxy;
use Inphinit\Proxy\Drivers\CurlDriver;
use Inphinit\Proxy\Drivers\StreamDriver;

if (empty($_GET['callback'])) {
    die('Missing callback');
}

$proxy = new Proxy();

$proxy->setDrivers([
    CurlDriver::class,
    StreamDriver::class
]);

$proxy->setTemporary('php://temp');
$proxy->download($url, true);

$errcode = $proxy->getLastErrorCode();
$httpStatus = $proxy->getHttpStatus();

if ($errcode) {
    echo $code, ': ', $proxy->getLastErrorCode();
} elseif ($httpStatus < 200 && $httpStatus > 299) {
    echo 'HTTP request failed:', $httpStatus;
} else {
    // Sucesss
    $type = $proxy->getContentType();
    $contents = $proxy->getContents();

    ...
}

In the examples so far, CurlDriver takes priority, and uses StreamDriver as a fallback, but you can change this, in a hypothetical example, if you only want to use StreamDriver:

$proxy->setDrivers([
    StreamDriver::class
]);

You can also limit the URLs that the proxy can access:

$proxy->urls([
    'https://domain1.com/',        // Allow request in all paths from https://domain1.com
    'https://domain2.com/images/', // Allow requests in /images/ from https://domain2.com
    'https://*.mainsite.io/',      // Allow requests in mainsite.com subdomain
    'https://foo.io:8000/',        // Allow requests in other.io with port 8000
    '*://other.io/',               // Allow HTTP or HTTPS requests in other.io
]);

$proxy->setTemporary('php://temp');
$proxy->download($url);

Writing your own driver

The following methods are required to write an Inphinit\Proxy compatible driver

Method Description
__construct(Proxy $proxy) It will receive the Proxy instance
available(): bool It will inform if the server has support
exec(string $url, int &$httpStatus, string &$contentType, int &$errorCode, string &$errorMessage): void It will execute the driver and fill in the references

Optionally you can use InterfaceDriver to avoid errors when writing:

use Inphinit\Proxy\Drivers\InterfaceDriver;
use Inphinit\Proxy\Proxy;

class CustomDriver implements InterfaceDriver
{
    public function __construct(Proxy $proxy)
    {
        ...
    }

    public function available()
    {
        ...
    }

    public function exec($url, &$httpStatus, &$contentType, &$errorCode, &$errorMessage)
    {
        ...
    }
}

Once created you can use it like this:

$proxy->setDrivers([
    CustomDriver::class
]);

Common issues and solutions

When adding an image that belongs to another domain in <canvas> and after that try to export the canvas for a new image, a security error occurs (actually occurs is a security lock), which can return the error:

SecurityError: DOM Exception 18

Error: An attempt was made to break through the security policy of the user agent.

If using Google Maps (or google maps static) you can get this error in console:

Google Maps API error: MissingKeyMapError

You need get a API Key in: https://developers.google.com/maps/documentation/javascript/get-api-key

If you get this error:

Access to Image at 'file:///...' from origin 'null' has been blocked by CORS policy: Invalid response. Origin 'null' is therefore not allowed access.

Means that you are not using an HTTP server, html2canvas does not work over the file:/// protocol, use Apache, Nginx or IIS with PHP for work.

Debuging with Web Console from DevTools

If you have any issue is recommend to analyze the log with the Web Console tab and requests with Network tab from your browser, see documentations:

An alternative is to debug issues by accessing the link directly:

http://[DOMAIN]/[PATH]/proxy?url=http%3A%2F%2Fmaps.googleapis.com%2Fmaps%2Fapi%2Fstaticmap%3Fcenter%3D40.714728%2C-73.998672%26zoom%3D12%26size%3D800x600%26maptype%3Droadmap%26sensor%3Dfalse%261&callback=html2canvas_0

Replace [DOMAIN] by your domain (eg. 127.0.0.1) and replace [PATH] by your project folder (eg.: project-1/test), something like:

http://localhost/project-1/test/proxy?url=http%3A%2F%2Fmaps.googleapis.com%2Fmaps%2Fapi%2Fstaticmap%3Fcenter%3D40.714728%2C-73.998672%26zoom%3D12%26size%3D800x600%26maptype%3Droadmap%26sensor%3Dfalse%261&callback=html2canvas_0