initial

wp-content/plugins/jetpack/modules/shortcodes/twitter.php

@@ -0,0 +1,86 @@
+<?php
+/**
+ * Twitter/X oEmbed proxy functionality.
+ *
+ * This file handles proxying Twitter/X oEmbed requests through Automattic's infrastructure
+ * to minimize issues with rate limiting with 404 responses from Twitter/X.
+ *
+ * Unlike tweet.php which handles the [tweet] shortcode, this file provides core oEmbed support
+ * and is force-loaded via module-extras.php regardless of module status.
+ *
+ * @package automattic/jetpack
+ * @since 14.5
+ */
+
+use Automattic\Jetpack\Connection\Client;
+use Automattic\Jetpack\Constants;
+use Automattic\Jetpack\Status;
+
+if ( ! defined( 'ABSPATH' ) ) {
+	exit( 0 );
+}
+
+/**
+ * Update Twitter providers to use Automattic's Twitter/X oEmbed proxy.
+ *
+ * See paFLeq-3QD-p2.
+ *
+ * @param string $provider The URL of the oEmbed provider.
+ *
+ * @return string The modified URL of the oEmbed provider.
+ */
+function jetpack_proxy_twitter_oembed_provider( $provider ) {
+	if ( ! wp_startswith( $provider, 'https://publish.twitter.com/oembed' ) ) {
+		return $provider;
+	}
+
+	// Allow other plugins to override the proxy URL. This constant should be set on the WordPress.com side
+	// to handle proxying after we're authenticated the request with the Jetpack token.
+	$oembed_proxy_url = Constants::is_defined( 'JETPACK__TWITTER_OEMBED_PROXY_URL' )
+		? Constants::get_constant( 'JETPACK__TWITTER_OEMBED_PROXY_URL' )
+		: '';
+
+	// If we don't have a proxy URL, then we'll try to proxy through the WordPress.com.
+	// To that end, we need to make sure that we're connected to WP.com and that we're not in offline mode.
+	if ( empty( $oembed_proxy_url ) ) {
+		if ( ! Jetpack::is_connection_ready() || ( new Status() )->is_offline_mode() ) {
+			return $provider;
+		}
+
+		$oembed_proxy_url = esc_url_raw(
+			sprintf(
+				'%s/wpcom/v2/oembed-proxy',
+				JETPACK__WPCOM_JSON_API_BASE,
+				Jetpack_Options::get_option( 'id' )
+			)
+		);
+
+		add_filter( 'oembed_remote_get_args', 'jetpack_twitter_oembed_remote_get_args', 10, 2 );
+	}
+
+	return str_replace( 'https://publish.twitter.com/oembed', $oembed_proxy_url, $provider );
+}
+add_filter( 'oembed_fetch_url', 'jetpack_proxy_twitter_oembed_provider', 10 );
+
+/**
+ * Add JP auth headers if we're proxying through WP.com.
+ *
+ * @param array  $args oEmbed remote get arguments.
+ * @param string $url  URL to be inspected.
+ */
+function jetpack_twitter_oembed_remote_get_args( $args, $url ) {
+	if ( ! wp_startswith( $url, Constants::get_constant( 'JETPACK__WPCOM_JSON_API_BASE' ) ) ) {
+		return $args;
+	}
+
+	$method         = 'GET';
+	$signed_request = Client::build_signed_request(
+		compact( 'url', 'method' )
+	);
+
+	if ( is_wp_error( $signed_request ) ) {
+		return $args;
+	}
+
+	return $signed_request['request'];
+}