refactor widget api design

this passes all widget API calls through the backend, with a pluggable design and reusable API handlers

src/utils/proxies/credentialed.js

@@ -0,0 +1,28 @@
+import { getServiceWidget } from "utils/service-helpers";
+import { formatApiCall } from "utils/api-helpers";
+import { httpProxy } from "utils/http";
+
+export default async function credentialedProxyHandler(req, res) {
+  const { group, service, endpoint } = req.query;
+
+  if (group && service) {
+    const widget = await getServiceWidget(group, service);
+
+    if (widget) {
+      const url = new URL(formatApiCall(widget.type, { endpoint, ...widget }));
+      const [status, contentType, data] = await httpProxy(url, {
+        withCredentials: true,
+        credentials: "include",
+        headers: {
+          "X-API-Key": `${widget.key}`,
+          "Content-Type": "application/json",
+        },
+      });
+
+      res.setHeader("Content-Type", contentType);
+      return res.status(status).send(data);
+    }
+  }
+
+  return res.status(400).json({ error: "Invalid proxy service type" });
+}