Add site health check to detect blocked REST API and short-circuit optimization when unavailable

plugins/optimization-detective/includes/site-health/load.php

@@ -0,0 +1,15 @@
+<?php
+/**
+ * Site Health checks loader.
+ *
+ * @package optimization-detective
+ * @since n.e.x.t
+ */
+
+if ( ! defined( 'ABSPATH' ) ) {
+	exit; // Exit if accessed directly.
+}
+
+// REST API site health check.
+require_once __DIR__ . '/rest-api/helper.php';
+require_once __DIR__ . '/rest-api/hooks.php';

plugins/optimization-detective/includes/site-health/rest-api/helper.php

@@ -0,0 +1,133 @@
+<?php
+/**
+ * Helper functions for the Optimization Detective REST API health check.
+ *
+ * @package optimization-detective
+ * @since n.e.x.t
+ */
+
+if ( ! defined( 'ABSPATH' ) ) {
+	exit; // Exit if accessed directly.
+}
+
+/**
+ * Tests availability of the Optimization Detective REST API endpoint.
+ *
+ * @since n.e.x.t
+ *
+ * @return array{label: string, status: string, badge: array{label: string, color: string}, description: string, actions: string, test: string} Result.
+ */
+function od_optimization_detective_rest_api_test(): array {
+	$result = array(
+		'label'       => __( 'Your site has functional Optimization Detective REST API endpoint', 'optimization-detective' ),
+		'status'      => 'good',
+		'badge'       => array(
+			'label' => __( 'Optimization Detective', 'optimization-detective' ),
+			'color' => 'blue',
+		),
+		'description' => sprintf(
+			'<p>%s</p>',
+			__( 'Optimization Detective can send and store URL metrics via REST API endpoint', 'optimization-detective' )
+		),
+		'actions'     => '',
+		'test'        => 'optimization_detective_rest_api',
+	);
+
+	$rest_url = get_rest_url( null, OD_REST_API_NAMESPACE . OD_URL_METRICS_ROUTE );
+	$response = wp_remote_post(
+		$rest_url,
+		array(
+			'headers'   => array( 'Content-Type' => 'application/json' ),
+			'sslverify' => false,
+		)
+	);
+
+	if ( is_wp_error( $response ) ) {
+		$result['status']      = 'recommended';
+		$result['label']       = __( 'Your site encountered error accessing Optimization Detective REST API endpoint', 'optimization-detective' );
+		$result['description'] = sprintf(
+			'<p>%s</p>',
+			esc_html__( 'The Optimization Detective endpoint could not be reached. This might mean the REST API is disabled or blocked.', 'optimization-detective' )
+		);
+		update_option(
+			'od_rest_api_info',
+			array(
+				'status'    => 'error',
+				'available' => false,
+			)
+		);
+		return $result;
+	}
+
+	$status_code     = wp_remote_retrieve_response_code( $response );
+	$data            = json_decode( wp_remote_retrieve_body( $response ), true );
+	$expected_params = array( 'slug', 'current_etag', 'hmac', 'url', 'viewport', 'elements' );
+	if (
+		400 === $status_code
+		&& isset( $data['data']['params'] )
+		&& is_array( $data['data']['params'] )
+		&& count( $expected_params ) === count( array_intersect( $data['data']['params'], $expected_params ) )
+	) {
+		// The REST API endpoint is available.
+		update_option(
+			'od_rest_api_info',
+			array(
+				'status'    => 'ok',
+				'available' => true,
+			)
+		);
+		return $result;
+	} elseif ( 401 === $status_code ) {
+		$result['status']      = 'recommended';
+		$result['label']       = __( 'Your site encountered unauthorized error for Optimization Detective REST API endpoint', 'optimization-detective' );
+		$result['description'] = sprintf(
+			'<p>%s</p>',
+			esc_html__( 'The REST API endpoint requires authentication. Ensure proper credentials are provided.', 'optimization-detective' )
+		);
+		update_option(
+			'od_rest_api_info',
+			array(
+				'status'    => 'unauthorized',
+				'available' => false,
+			)
+		);
+	} elseif ( 403 === $status_code ) {
+		$result['status']      = 'recommended';
+		$result['label']       = __( 'Your site encountered forbidden error for Optimization Detective REST API endpoint', 'optimization-detective' );
+		$result['description'] = sprintf(
+			'<p>%s</p>',
+			esc_html__( 'The REST API endpoint is blocked check server or security settings.', 'optimization-detective' )
+		);
+		update_option(
+			'od_rest_api_info',
+			array(
+				'status'    => 'forbidden',
+				'available' => false,
+			)
+		);
+	}
+
+	return $result;
+}
+
+/**
+ * Periodically runs the Optimization Detective REST API health check.
+ *
+ * @since n.e.x.t
+ */
+function od_schedule_rest_api_health_check(): void {
+	if ( ! (bool) wp_next_scheduled( 'od_rest_api_health_check_event' ) ) {
+		wp_schedule_event( time(), 'hourly', 'od_rest_api_health_check_event' );
+	}
+}
+add_action( 'wp', 'od_schedule_rest_api_health_check' );
+
+/**
+ * Hook for the scheduled REST API health check.
+ *
+ * @since n.e.x.t
+ */
+function od_run_scheduled_rest_api_health_check(): void {
+	od_optimization_detective_rest_api_test();
+}
+add_action( 'od_rest_api_health_check_event', 'od_run_scheduled_rest_api_health_check' );

plugins/optimization-detective/includes/site-health/rest-api/hooks.php

@@ -0,0 +1,29 @@
+<?php
+/**
+ * Hook callbacks used for the Optimization Detective REST API health check.
+ *
+ * @package optimization-detective
+ * @since n.e.x.t
+ */
+
+if ( ! defined( 'ABSPATH' ) ) {
+	exit; // Exit if accessed directly.
+}
+
+/**
+ * Adds the Optimization Detective REST API check to site health tests.
+ *
+ * @since n.e.x.t
+ *
+ * @param array{direct: array<string, array{label: string, test: string}>} $tests Site Health Tests.
+ * @return array{direct: array<string, array{label: string, test: string}>} Amended tests.
+ */
+function od_optimization_detective_add_rest_api_test( array $tests ): array {
+	$tests['direct']['optimization_detective_rest_api'] = array(
+		'label' => __( 'Optimization Detective REST API Endpoint Availability', 'optimization-detective' ),
+		'test'  => 'od_optimization_detective_rest_api_test',
+	);
+
+	return $tests;
+}
+add_filter( 'site_status_tests', 'od_optimization_detective_add_rest_api_test' );

plugins/optimization-detective/load.php

@@ -127,5 +127,8 @@ class_alias( OD_URL_Metric_Group_Collection::class, 'OD_URL_Metrics_Group_Collec
 
 		// Add hooks for the above requires.
 		require_once __DIR__ . '/hooks.php';
+
+		// Load site health checks.
+		require_once __DIR__ . '/includes/site-health/load.php';
 	}
 );

plugins/optimization-detective/optimization.php

@@ -226,6 +226,12 @@ function od_optimize_template_output_buffer( string $buffer ): string {
 	// Whether we need to add the data-od-xpath attribute to elements and whether the detection script should be injected.
 	$needs_detection = ! $group_collection->is_every_group_complete();
 
+	// Disable detection if the REST API is disabled.
+	$od_rest_api_info = get_option( 'od_rest_api_info' );
+	if ( is_array( $od_rest_api_info ) && isset( $od_rest_api_info['available'] ) ) {
+		$needs_detection = (bool) $od_rest_api_info['available'];
+	}
+
 	do {
 		$tracked_in_url_metrics = false;
 		$processor->set_bookmark( $current_tag_bookmark ); // TODO: Should we break if this returns false?

plugins/optimization-detective/tests/test-optimization-detective-rest-api-site-health-check.php

@@ -0,0 +1,131 @@
+<?php
+/**
+ * Tests for Optimization Detective REST API site health check.
+ *
+ * @package optimization-detective
+ */
+
+class Test_OD_REST_API_Site_Health_Check extends WP_UnitTestCase {
+
+	/**
+	 * Holds mocked response headers for different test scenarios.
+	 *
+	 * @var array<string, array<string, mixed>>
+	 */
+	protected $mocked_responses = array();
+
+	/**
+	 * Setup each test.
+	 */
+	public function setUp(): void {
+		parent::setUp();
+
+		// Clear any filters or mocks.
+		remove_all_filters( 'pre_http_request' );
+
+		// Add the filter to mock HTTP requests.
+		add_filter( 'pre_http_request', array( $this, 'mock_http_requests' ), 10, 3 );
+	}
+
+	/**
+	 * Test that the site health check is `good` when the REST API is available.
+	 */
+	public function test_rest_api_available(): void {
+		$this->mocked_responses = array(
+			get_rest_url( null, OD_REST_API_NAMESPACE . OD_URL_METRICS_ROUTE ) => $this->build_mock_response(
+				400,
+				'Bad Request',
+				array(
+					'data' => array(
+						'params' => array( 'slug', 'current_etag', 'hmac', 'url', 'viewport', 'elements' ),
+					),
+				)
+			),
+		);
+
+		$result           = od_optimization_detective_rest_api_test();
+		$od_rest_api_info = get_option( 'od_rest_api_info', array() );
+
+		$this->assertSame( 'good', $result['status'] );
+		$this->assertSame( 'ok', isset( $od_rest_api_info['status'] ) ? $od_rest_api_info['status'] : '' );
+		$this->assertTrue( isset( $od_rest_api_info['available'] ) ? $od_rest_api_info['available'] : false );
+	}
+
+	/**
+	 * Test behavior when REST API returns an unauthorized error.
+	 */
+	public function test_rest_api_unauthorized(): void {
+		$this->mocked_responses = array(
+			get_rest_url( null, OD_REST_API_NAMESPACE . OD_URL_METRICS_ROUTE ) => $this->build_mock_response(
+				401,
+				'Unauthorized'
+			),
+		);
+
+		$result           = od_optimization_detective_rest_api_test();
+		$od_rest_api_info = get_option( 'od_rest_api_info', array() );
+
+		$this->assertSame( 'recommended', $result['status'] );
+		$this->assertSame( 'unauthorized', isset( $od_rest_api_info['status'] ) ? $od_rest_api_info['status'] : '' );
+		$this->assertFalse( isset( $od_rest_api_info['available'] ) ? $od_rest_api_info['available'] : true );
+	}
+
+	/**
+	 * Test behavior when REST API returns an forbidden error.
+	 */
+	public function test_rest_api_forbidden(): void {
+		$this->mocked_responses = array(
+			get_rest_url( null, OD_REST_API_NAMESPACE . OD_URL_METRICS_ROUTE ) => $this->build_mock_response(
+				403,
+				'Forbidden'
+			),
+		);
+
+		$result           = od_optimization_detective_rest_api_test();
+		$od_rest_api_info = get_option( 'od_rest_api_info', array() );
+
+		$this->assertSame( 'recommended', $result['status'] );
+		$this->assertSame( 'forbidden', isset( $od_rest_api_info['status'] ) ? $od_rest_api_info['status'] : '' );
+		$this->assertFalse( isset( $od_rest_api_info['available'] ) ? $od_rest_api_info['available'] : true );
+	}
+
+	/**
+	 * Mock HTTP requests for assets to simulate different responses.
+	 *
+	 * @param bool                 $response A preemptive return value of an HTTP request. Default false.
+	 * @param array<string, mixed> $args     Request arguments.
+	 * @param string               $url      The request URL.
+	 * @return array<string, mixed> Mocked response.
+	 */
+	public function mock_http_requests( bool $response, array $args, string $url ): array {
+		if ( isset( $this->mocked_responses[ $url ] ) ) {
+			return $this->mocked_responses[ $url ];
+		}
+
+		// If no specific mock set, default to a generic success response.
+		return array(
+			'response' => array(
+				'code'    => 200,
+				'message' => 'OK',
+			),
+		);
+	}
+
+	/**
+	 * Build a mock response.
+	 *
+	 * @param int                  $status_code HTTP status code.
+	 * @param string               $message     HTTP status message.
+	 * @param array<string, mixed> $body        Response body.
+	 * @return array<string, mixed> Mocked response.
+	 */
+	protected function build_mock_response( int $status_code, string $message, array $body = array() ): array {
+		return array(
+			'response' => array(
+				'code'    => $status_code,
+				'message' => $message,
+			),
+			'body'     => wp_json_encode( $body ),
+		);
+	}
+}