class-license-admin-post.php — Advanced Ads – Ad Manager & AdSense 2.0.26

advanced-ads / includes / admin / class-license-admin-post.php

advanced-ads / includes / admin Last commit date

class-license-admin-post.php

247 lines

1	<?php
2	/**
3	* Admin-post handler for shop token exchange.
4	*
5	* @package AdvancedAds
6	* @author Advanced Ads <info@wpadvancedads.com>
7	*/
8
9	namespace AdvancedAds\Admin;
10
11	use AdvancedAds\Framework\Interfaces\Integration_Interface;
12	use AdvancedAds\Framework\Utilities\Params;
13	use AdvancedAds\License\License;
14	use AdvancedAds\License\License_Shop_Client;
15	use AdvancedAds\License\License_Utils;
16	use AdvancedAds\Utilities\Conditional;
17	use WP_Error;
18
19	defined( 'ABSPATH' ) \|\| exit;
20
21	/**
22	* Exchanges one-time shop tokens server-side after connect or checkout.
23	*/
24	class License_Admin_Post implements Integration_Interface {
25
26	public const ACTION = 'advanced-ads-license';
27
28	/**
29	* Register WordPress hooks.
30	*
31	* @return void
32	*/
33	public function hooks(): void {
34	add_action( 'admin_post_' . self::ACTION, [ $this, 'handle' ] );
35	}
36
37	/**
38	* Exchange token, optionally activate on shop, save licenses, redirect.
39	*
40	* @return void
41	*/
42	public function handle(): void {
43	if ( ! Conditional::user_can( 'advanced_ads_manage_options' ) ) {
44	wp_die( esc_html__( 'Forbidden.', 'advanced-ads' ), '', [ 'response' => 403 ] );
45	}
46
47	$token = sanitize_text_field( (string) Params::request( 'token', '' ) );
48	$license_id = absint( Params::request( 'license_id', 0, FILTER_VALIDATE_INT ) );
49	$purchase_id = absint( Params::request( 'purchase_id', 0, FILTER_VALIDATE_INT ) );
50	$checkout_intent = sanitize_key( (string) Params::request( 'checkout_intent', '' ) );
51
52	if ( '' === $token ) {
53	$this->redirect_with_error( 'invalid_token' );
54	}
55
56	$rows = License_Shop_Client::exchange(
57	[
58	'token' => $token,
59	'site' => License::get_site_hostname(),
60	]
61	);
62	if ( is_wp_error( $rows ) ) {
63	$this->redirect_with_error( $this->map_error_code( $rows ) );
64	}
65	if ( empty( $rows ) ) {
66	$this->redirect_with_error( 'no_licenses' );
67	}
68
69	$activating_key = $this->resolve_checkout_activating_key( $rows, $license_id );
70
71	$saved = License::save_licenses(
72	$rows,
73	[
74	'activate_new' => '' !== $activating_key,
75	'activating_license_key' => $activating_key,
76	'preserve_legacy_map' => true,
77	]
78	);
79
80	if ( is_wp_error( $saved ) ) {
81	$this->redirect_with_activation_error( $saved );
82	}
83
84	$args = [];
85	if ( $purchase_id > 0 ) {
86	$args['purchase_id'] = $purchase_id;
87	}
88	if ( in_array( $checkout_intent, [ 'buy', 'upgrade', 'renew' ], true ) ) {
89	$args['checkout_intent'] = $checkout_intent;
90	}
91	if ( $license_id > 0 ) {
92	$args['license_id'] = $license_id;
93	}
94
95	wp_safe_redirect( $this->license_admin_url( $args ) );
96	exit;
97	}
98
99	/**
100	* License key to activate after checkout when this site is not on the shop row yet.
101	*
102	* @param array<int, array<string, mixed>> $rows Exchange rows.
103	* @param int $license_id EDD SL license post ID from redirect.
104	* @return string License key or empty.
105	*/
106	private function resolve_checkout_activating_key( array $rows, int $license_id ): string {
107	if ( $license_id < 1 ) {
108	return '';
109	}
110
111	$row = $this->resolve_checkout_row( $rows, $license_id );
112	if ( null === $row ) {
113	return '';
114	}
115
116	$key = (string) ( $row['licenseKey'] ?? '' );
117	if ( '' === $key \|\| $this->is_site_active_on_row( $row ) ) {
118	return '';
119	}
120
121	return $key;
122	}
123
124	/**
125	* Pick license row for post-checkout activation.
126	*
127	* @param array<int, array<string, mixed>> $rows Exchange rows.
128	* @param int $license_id EDD SL license post ID.
129	* @return array<string, mixed>\|null
130	*/
131	private function resolve_checkout_row( array $rows, int $license_id ): ?array {
132	foreach ( $rows as $row ) {
133	if ( (int) ( $row['licenseId'] ?? 0 ) === $license_id ) {
134	return $row;
135	}
136	}
137
138	return $rows[0] ?? null;
139	}
140
141	/**
142	* Whether this site is already activated on the license row.
143	*
144	* @param array<string, mixed> $row License exchange row.
145	* @return bool
146	*/
147	private function is_site_active_on_row( array $row ): bool {
148	$host = wp_parse_url( home_url(), PHP_URL_HOST );
149	$host = is_string( $host ) ? preg_replace( '/^www\./', '', strtolower( $host ) ) : '';
150	$sites = isset( $row['sitesActivated'] ) && is_array( $row['sitesActivated'] ) ? $row['sitesActivated'] : [];
151
152	foreach ( $sites as $site ) {
153	$domain = is_array( $site ) ? (string) ( $site['domain'] ?? '' ) : '';
154	$parsed = wp_parse_url( $domain, PHP_URL_HOST ) ?? $domain;
155	$parsed = preg_replace( '/^www\./', '', strtolower( (string) $parsed ) );
156	if ( $parsed === $host ) {
157	return true;
158	}
159	}
160
161	return false;
162	}
163
164	/**
165	* Map exchange WP_Error to redirect error code.
166	*
167	* @param WP_Error $error Exchange error.
168	* @return string
169	*/
170	private function map_error_code( WP_Error $error ): string {
171	$error_code = $error->get_error_code();
172
173	if ( 'not_found' === $error_code ) {
174	return 'no_licenses';
175	}
176
177	if ( 'invalid_token' === $error_code ) {
178	return 'invalid_token';
179	}
180
181	$data = $error->get_error_data();
182	$status = is_array( $data ) ? (int) ( $data['status'] ?? 0 ) : 0;
183
184	if ( 403 === $status ) {
185	$message = strtolower( $error->get_error_message() );
186	if (
187	false !== strpos( $message, 'no license' )
188	\|\| false !== strpos( $message, 'any licenses' )
189	) {
190	return 'no_licenses';
191	}
192
193	return 'invalid_token';
194	}
195
196	return 'network';
197	}
198
199	/**
200	* Redirect to license screen with exchange error query arg.
201	*
202	* @param string $code Error code slug.
203	* @return void
204	*/
205	private function redirect_with_error( string $code ): void {
206	wp_safe_redirect(
207	$this->license_admin_url( [ 'advads_exchange_error' => $code ] )
208	);
209	exit;
210	}
211
212	/**
213	* Redirect to license screen when shop activation failed during save.
214	*
215	* @param WP_Error $error Save or sync activation error.
216	* @return void
217	*/
218	private function redirect_with_activation_error( WP_Error $error ): void {
219	$data = $error->get_error_data();
220	$status = is_array( $data ) ? (int) ( $data['status'] ?? 0 ) : 0;
221	$code = 'activate_failed';
222
223	if ( 0 === $status && in_array( $error->get_error_code(), [ 'http_request_failed' ], true ) ) {
224	$code = 'network';
225	}
226
227	$args = [ 'advads_activation_error' => $code ];
228	$message = sanitize_text_field( $error->get_error_message() );
229	if ( '' !== $message ) {
230	$args['advads_activation_message'] = substr( $message, 0, 200 );
231	}
232
233	wp_safe_redirect( $this->license_admin_url( $args ) );
234	exit;
235	}
236
237	/**
238	* License admin screen URL with optional query args.
239	*
240	* @param array<string, int\|string> $query_args Query arguments.
241	* @return string
242	*/
243	private function license_admin_url( array $query_args = [] ): string {
244	return License_Utils::admin_screen_url( $query_args );
245	}
246	}
247