ivyforms / backend / src / Routes / Confirmation / Confirmation.php

Confirmation.php in The Innovative Form Builder – IvyForms 1.5, at backend/src/Routes/Confirmation/Confirmation.php

108 lines 3.9 KB

Raw Download Zip

1	<?php
2
3	namespace IvyForms\Routes\Confirmation;
4
5	use IvyForms\Vendor\DI\Container;
6	use IvyForms\Vendor\DI\DependencyException;
7	use IvyForms\Vendor\DI\NotFoundException;
8	use IvyForms\Controllers\Confirmation\AddConfirmationController;
9	use IvyForms\Controllers\Confirmation\GetConfirmationsController;
10	use IvyForms\Controllers\Confirmation\GetConformationController;
11	use IvyForms\Controllers\Confirmation\UpdateConfirmationController;
12	use IvyForms\Infrastructure\WP\REST\RestRouteParamReader;
13	use IvyForms\Services\Permissions\PermissionResourceResolver;
14	use IvyForms\Services\Permissions\RoutePermissionService;
15	use WP_REST_Server;
16
17	class Confirmation
18	{
19	/**
20	* @throws DependencyException
21	* @throws NotFoundException
22	*/
23	public static function registerRoutes(Container $container, string $routeNamespace): void
24	{
25	$routePermissionService = $container->get(RoutePermissionService::class);
26	$permissionResourceResolver = $container->get(PermissionResourceResolver::class);
27
28	register_rest_route(
29	$routeNamespace,
30	'/confirmation/(?P<id>\d+)',
31	[
32	'methods' => WP_REST_Server::READABLE,
33	'callback' => $container->get(GetConformationController::class),
34	'permission_callback' => self::permissionForConfirmationForm(
35	$permissionResourceResolver,
36	$routePermissionService
37	),
38	]
39	);
40
41	register_rest_route(
42	$routeNamespace,
43	'/confirmations/(?P<id>\d+)',
44	[
45	'methods' => WP_REST_Server::READABLE,
46	'callback' => $container->get(GetConfirmationsController::class),
47	'permission_callback' => static function ($request) use ($routePermissionService) {
48	$formId = RestRouteParamReader::getPositiveIntParam($request);
49	return $routePermissionService->canEditForms($formId);
50	},
51	]
52	);
53
54	register_rest_route(
55	$routeNamespace,
56	'/confirmation/add/',
57	[
58	'methods' => WP_REST_Server::CREATABLE,
59	'callback' => $container->get(AddConfirmationController::class),
60	'permission_callback' => static function ($request) use ($routePermissionService) {
61	$formId = RestRouteParamReader::getPositiveIntParam($request, 'formId');
62	return $routePermissionService->canEditForms($formId);
63	}
64	]
65	);
66
67	register_rest_route(
68	$routeNamespace,
69	'/confirmation/update/(?P<id>\d+)',
70	[
71	'methods' => WP_REST_Server::CREATABLE,
72	'callback' => $container->get(UpdateConfirmationController::class),
73	'permission_callback' => self::permissionForConfirmationForm(
74	$permissionResourceResolver,
75	$routePermissionService
76	),
77	]
78	);
79	}
80
81	/**
82	* Authorize against the confirmation's owning form, not a client-supplied formId.
83	*
84	* @return callable
85	*/
86	private static function permissionForConfirmationForm(
87	PermissionResourceResolver $permissionResourceResolver,
88	RoutePermissionService $routePermissionService
89	): callable {
90	return static function ($request) use (
91	$permissionResourceResolver,
92	$routePermissionService
93	): bool {
94	$confirmationId = RestRouteParamReader::getPositiveIntParam($request);
95	if ($confirmationId === null) {
96	return false;
97	}
98
99	$formId = $permissionResourceResolver->formIdFromConfirmationId($confirmationId);
100	if ($formId === null) {
101	return false;
102	}
103
104	return $routePermissionService->canEditForms($formId);
105	};
106	}
107	}
108