fix: [bending] Canvas 편집기용 이미지 프록시 라우트 추가 (R2 CORS 우회)

app/Http/Controllers/FileViewController.php

@@ -54,4 +54,58 @@ public function show(int $id)
 
         return redirect($url);
     }
+
+    /**
+     * 이미지 프록시 (Canvas 편집기용)
+     *
+     * R2에서 이미지를 서버 사이드로 다운로드하여 같은 도메인에서 스트리밍.
+     * crossOrigin 요청 없이 Canvas에서 taint 없이 사용 가능.
+     */
+    public function proxy(int $id)
+    {
+        $cacheKey = "file_presigned_url:{$id}";
+
+        $url = Cache::remember($cacheKey, now()->addMinutes(5), function () use ($id) {
+            $baseUrl = config('services.api.base_url', 'https://api.sam.kr');
+            $internalUrl = config('services.api.internal_url');
+            $apiKey = config('services.api.key');
+            $token = session('api_access_token', '');
+
+            $headers = [
+                'X-API-KEY' => $apiKey,
+                'X-TENANT-ID' => session('selected_tenant_id', 1),
+            ];
+
+            if ($internalUrl) {
+                $headers['Host'] = parse_url($baseUrl, PHP_URL_HOST) ?: 'api.sam.kr';
+                $baseUrl = $internalUrl;
+            }
+
+            $response = Http::baseUrl($baseUrl)
+                ->withoutVerifying()
+                ->withHeaders($headers)
+                ->withToken($token)
+                ->timeout(10)
+                ->get("/api/v1/files/{$id}/presigned-url");
+
+            return $response->successful() ? $response->json('data.url') : null;
+        });
+
+        if (! $url) {
+            Cache::forget($cacheKey);
+            abort(404);
+        }
+
+        $imageResponse = Http::withoutVerifying()->timeout(15)->get($url);
+
+        if (! $imageResponse->successful()) {
+            abort(404);
+        }
+
+        $contentType = $imageResponse->header('Content-Type') ?: 'image/png';
+
+        return response($imageResponse->body(), 200)
+            ->header('Content-Type', $contentType)
+            ->header('Cache-Control', 'public, max-age=300');
+    }
 }

resources/views/bending/base/form.blade.php

@@ -247,7 +247,7 @@ class="w-full border border-gray-300 rounded px-3 py-1.5 text-sm {{ $isView ? 'b
                     <h2 class="text-sm font-bold text-gray-700 mb-3 border-b pb-2">형상 이미지</h2>
                     <div class="border-2 border-dashed border-gray-300 rounded-lg p-3 text-center min-h-[200px] flex items-center justify-center" id="imageContainer">
                         @if(!empty($imageFile))
-                            <img src="{{ $item['image_url'] ?? route('files.view', $imageFile['id']) }}" alt="전개도" class="max-w-full rounded" id="currentImage" data-proxy-url="{{ route('files.view', $imageFile['id']) }}">
+                            <img src="{{ $item['image_url'] ?? route('files.view', $imageFile['id']) }}" alt="전개도" class="max-w-full rounded" id="currentImage" data-proxy-url="{{ route('files.proxy', $imageFile['id']) }}">
                         @else
                             <span class="text-gray-400 text-sm" id="noImageText">이미지 없음</span>
                         @endif

resources/views/bending/products/form.blade.php

@@ -436,7 +436,7 @@ class="w-full border border-gray-300 rounded px-3 py-1.5 text-sm {{ $isView ? 'b
                     <h2 class="text-sm font-bold text-gray-700 mb-3 border-b pb-2">결합형태 이미지</h2>
                     <div class="border-2 border-dashed border-gray-300 rounded-lg p-3 text-center min-h-[200px] flex items-center justify-center" id="imageContainer">
                         @if(!empty($imageFile))
-                            <img src="{{ $item['image_url'] ?? route('files.view', $imageFile['id']) }}" alt="결합형태" class="max-w-full rounded" id="currentImage" data-proxy-url="{{ route('files.view', $imageFile['id']) }}">
+                            <img src="{{ $item['image_url'] ?? route('files.view', $imageFile['id']) }}" alt="결합형태" class="max-w-full rounded" id="currentImage" data-proxy-url="{{ route('files.proxy', $imageFile['id']) }}">
                         @else
                             <span class="text-gray-400 text-sm" id="noImageText">이미지 없음</span>
                         @endif

routes/web.php

@@ -498,6 +498,7 @@
 
     // 파일 뷰어 (API R2 이미지 프록시)
     Route::get('/files/{id}/view', [\App\Http\Controllers\FileViewController::class, 'show'])->whereNumber('id')->name('files.view');
+    Route::get('/files/{id}/proxy', [\App\Http\Controllers\FileViewController::class, 'proxy'])->whereNumber('id')->name('files.proxy');
 
     // 절곡품 기초관리
     Route::prefix('bending')->name('bending.')->group(function () {