PHP with Laravel

<!-- resources/views/rollout.blade.php -->
@extends('layouts.app')

@section('content')
    <h1>Your Application</h1>
    <div id="rollout-container"></div>
@endsection

@section('scripts')
    <script src="{{ mix('js/rollout.js') }}"></script>
@endsection

// resources/js/rollout.js
document.addEventListener('DOMContentLoaded', function() {
    const container = document.getElementById('rollout-container');
    const csrfToken = document.querySelector('meta[name="csrf-token"]').content;

    fetch('/rollout-token', {
        headers: {
            'Content-Type': 'application/json',
            'X-CSRF-TOKEN': csrfToken
        }
    })
    .then(response => response.json())
    .then(data => {
        const token = data.token;
        
        // Add required styles
        const styleLink = document.createElement('link');
        styleLink.rel = 'stylesheet';
        styleLink.href = 'https://esm.sh/@rollout/link-react@latest/dist/style.css';
        document.body.appendChild(styleLink);

        // Dynamically load Rollout bundle
        import(/* webpackIgnore: true */ 'https://esm.sh/@rollout/link-react@latest?bundle=all').then(
            ({ RolloutLinkProvider, CredentialsManager, createElement, createRoot }) => {
                const root = createRoot(container);
                
                root.render(
                    createElement(
                        RolloutLinkProvider,
                        { token },
                        createElement(CredentialsManager, {
                          entitiesToSync: { notes: true, tasks: true }
                        })
                    )
                );
            }
        );
    });
});

// routes/web.php
use App\Http\Controllers\RolloutController;

Route::get('/rollout-token', [RolloutController::class, 'generateToken']);
Route::post('/credential-webhook', [RolloutController::class, 'handleWebhook']);

// app/Http/Controllers/RolloutController.php
namespace App\Http\Controllers;

use Illuminate\Http\Request;
use Firebase\JWT\JWT;

class RolloutController extends Controller
{
    public function generateToken(Request $request)
    {
        $now = time();

        $payload = [
            'iss' => getenv('ROLLOUT_CLIENT_ID'),
            'sub' => $userId,
            'iat' => $now,
            'exp' => $now + 900 // 15 minutes
        ];

        $token = JWT::encode(
            $payload,
            config('services.rollout.client_secret'),
            'HS512'
        );

        return response()->json(['token' => $token]);
    }

    public function handleWebhook(Request $request)
    {
        $validated = $request->validate([
            'id' => 'required|string',
            'appKey' => 'required|string'
        ]);

        // Store credential logic
        \Log::info('New credential added:', $validated);
        
        return response()->json(['status' => 'success']);
    }
}

// Update the import block
.then(({ RolloutLinkProvider, CredentialsManager, createElement, createRoot }) => {
    const handleCredentialAdded = ({ id, appKey }) => {
        fetch('/credential-webhook', {
            method: 'POST',
            headers: {
                'Content-Type': 'application/json',
                'X-CSRF-TOKEN': csrfToken
            },
            body: JSON.stringify({
                id,
                appKey
            })
        });
    };

    const root = createRoot(container);
    root.render(
        createElement(
            RolloutLinkProvider,
            { token },
            createElement(CredentialsManager, {
              entitiesToSync: { notes: true, tasks: true },
                onCredentialAdded: handleCredentialAdded
            })
        )
    );
});

'rollout' => [
    'client_secret' => env('ROLLOUT_CLIENT_SECRET'),
],

public function handle($request, Closure $next)
{
    $response = $next($request);
    
    $response->header('Content-Security-Policy', 
        "style-src 'self' https://esm.sh; " .
        "script-src 'self' https://esm.sh; " .
        "connect-src 'self' https://universal.rollout.com"
    );

    return $response;
}