VENDOR_ACCESS_TOKEN="xyz"
VENDOR_FEED_PRODUCT_PATH="/path/to/file.json"

<?php

/*
 * Copyright (C) 2022  Wikimedia Foundation
 * 
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Author: sbassett@wikimedia.org
 */

/* load .env */
$dotenv = [];
$dotenv = file( __DIR__ . "/.env" );
foreach ( $dotenv as $v ) {
	$kvpairs = preg_split( "/\=/", $v );
	if ( sizeof( $kvpairs ) == 2 ) {
		define( $kvpairs[0],
			trim( str_replace( '"', "", $kvpairs[1] ) ) );
	}
}

/* check header Token */
if ( ! function_exists( 'apache_request_headers' ) ) {
	$msg = 'Invalid HTTP Request!';
	echo $msg;
	throw new \UnexpectedValueException( $msg );
}

if ( apache_request_headers()['Token'] != VENDOR_ACCESS_TOKEN ) {
	$msg = 'Invalid Access Token!';
	echo $msg;
	throw new \UnexpectedValueException( $msg );
}

/* display protected vendor file data */
if ( is_file( VENDOR_FEED_PRODUCT_PATH ) ) {
	readfile( VENDOR_FEED_PRODUCT_PATH );
	exit;
}
else {
	$msg = 'Invalid Vendor File Configuration!';
	echo $msg;
	throw new \UnexpectedValueException( $msg );
}