class.wpcom-json-api-autosave-post-v1-1-endpoint.php — Jetpack – WP Security, Backup, Speed, & Growth 13.9.2

jetpack / json-endpoints / class.wpcom-json-api-autosave-post-v1-1-endpoint.php

jetpack / json-endpoints Last commit date

class.wpcom-json-api-autosave-post-v1-1-endpoint.php

136 lines

1	<?php // phpcs:ignore WordPress.Files.FileName.InvalidClassFileName
2	/**
3	* WPCOM_JSON_API_Autosave_Post_v1_1_Endpoint
4	*
5	* @package automattic/jetpack
6	*/
7
8	new WPCOM_JSON_API_Autosave_Post_v1_1_Endpoint(
9	array(
10	'description' => 'Create a post autosave.',
11	'group' => '__do_not_document',
12	'stat' => 'posts:autosave',
13	'min_version' => '1.1',
14	'method' => 'POST',
15	'path' => '/sites/%s/posts/%d/autosave',
16	'path_labels' => array(
17	'$site' => '(int\|string) Site ID or domain',
18	'$post_ID' => '(int) The post ID',
19	),
20	'request_format' => array(
21	'content' => '(HTML) The post content.',
22	'title' => '(HTML) The post title.',
23	'excerpt' => '(HTML) The post excerpt.',
24	),
25	'response_format' => array(
26	'ID' => '(int) autodraft post ID',
27	'post_ID' => '(int) post ID',
28	'preview_URL' => '(string) preview URL for the post',
29	'modified' => '(ISO 8601 datetime) modified time',
30	),
31
32	'example_request' => 'https://public-api.wordpress.com/rest/v1.1/sites/82974409/posts/1/autosave',
33
34	'example_request_data' => array(
35	'headers' => array(
36	'authorization' => 'Bearer YOUR_API_TOKEN',
37	),
38
39	'body' => array(
40	'title' => 'Howdy',
41	'content' => 'Hello. I am a test post. I was created by the API',
42	),
43	),
44	)
45	);
46
47	// phpcs:disable PEAR.NamingConventions.ValidClassName.Invalid
48
49	/**
50	* Class WPCOM_JSON_API_Autosave_Post_v1_1_Endpoint
51	*/
52	class WPCOM_JSON_API_Autosave_Post_v1_1_Endpoint extends WPCOM_JSON_API_Post_v1_1_Endpoint {
53
54	/**
55	* Autosave Post callback.
56	* /sites/%s/posts/%d/autosave -> $blog_id, $post_id
57	*
58	* @param string $path Path.
59	* @param int $blog_id Blog ID.
60	* @param int $post_id Post ID.
61	*/
62	public function callback( $path = '', $blog_id = 0, $post_id = 0 ) {
63	if ( ! defined( 'DOING_AUTOSAVE' ) ) {
64	define( 'DOING_AUTOSAVE', true );
65	}
66
67	$blog_id = $this->api->switch_to_blog_and_validate_user( $this->api->get_blog_id( $blog_id ) );
68	if ( is_wp_error( $blog_id ) ) {
69	return $blog_id;
70	}
71
72	$input = $this->input( false );
73
74	if ( ! is_array( $input ) \|\| ! $input ) {
75	return new WP_Error( 'invalid_input', 'Invalid request input', 400 );
76	}
77
78	if ( defined( 'IS_WPCOM' ) && IS_WPCOM ) {
79	// Make sure Custom Post Types, etc. get registered.
80	$this->load_theme_functions();
81	}
82
83	$post = get_post( $post_id );
84
85	if ( ! $post \|\| is_wp_error( $post ) ) {
86	return new WP_Error( 'unknown_post', 'Unknown post', 404 );
87	}
88
89	if ( ! current_user_can( 'edit_post', $post->ID ) ) {
90	return new WP_Error( 'unauthorized', 'User cannot edit post', 403 );
91	}
92
93	$post_data = array(
94	'post_ID' => $post_id,
95	'post_type' => $post->post_type,
96	'post_title' => $input['title'],
97	'post_content' => $input['content'],
98	'post_excerpt' => $input['excerpt'],
99	);
100
101	$preview_url = add_query_arg( 'preview', 'true', get_permalink( $post->ID ) );
102
103	if ( ! wp_check_post_lock( $post->ID ) &&
104	get_current_user_id() === (int) $post->post_author &&
105	( 'auto-draft' === $post->post_status \|\| 'draft' === $post->post_status )
106	) {
107	// Drafts and auto-drafts are just overwritten by autosave for the same user if the post is not locked.
108	$auto_id = edit_post( wp_slash( $post_data ) );
109	} else {
110	// Non drafts or other users drafts are not overwritten. The autosave is stored in a special post revision for each user.
111	$auto_id = wp_create_post_autosave( wp_slash( $post_data ) );
112	$nonce = wp_create_nonce( 'post_preview_' . $post->ID );
113	$preview_url = add_query_arg(
114	array(
115	'preview_id' => $post->ID,
116	'preview_nonce' => $nonce,
117	),
118	$preview_url
119	);
120	}
121
122	$updated_post = get_post( $auto_id );
123
124	if ( $updated_post && $updated_post->ID && $updated_post->post_modified ) {
125	return array(
126	'ID' => $auto_id,
127	'post_ID' => $post->ID,
128	'modified' => $this->format_date( $updated_post->post_modified_gmt, $updated_post->post_modified ),
129	'preview_URL' => $preview_url,
130	);
131	} else {
132	return new WP_Error( 'autosave_error', __( 'Autosave encountered an unexpected error', 'jetpack' ), 500 );
133	}
134	}
135	}
136