subscriber-login.php — Jetpack – WP Security, Backup, Speed, & Growth 16.1-a.1

jetpack / extensions / blocks / subscriber-login / subscriber-login.php

jetpack / extensions / blocks / subscriber-login Last commit date

class-jetpack-subscription-site.php 1 year ago subscriber-login.php 5 days ago

subscriber-login.php

166 lines

1	<?php
2	/**
3	* Subscriber Login Block.
4	*
5	* @since 13.1
6	*
7	* @package automattic/jetpack
8	*/
9
10	namespace Automattic\Jetpack\Extensions\Subscriber_Login;
11
12	use Automattic\Jetpack\Blocks;
13	use Automattic\Jetpack\Extensions\Premium_Content\Subscription_Service\Abstract_Token_Subscription_Service;
14	use Automattic\Jetpack\Status\Host;
15	use Automattic\Jetpack\Status\Request;
16	use Jetpack;
17	use Jetpack_Gutenberg;
18	use Jetpack_Memberships;
19	use Jetpack_Options;
20
21	if ( ! defined( 'ABSPATH' ) ) {
22	exit( 0 );
23	}
24
25	require_once __DIR__ . '/class-jetpack-subscription-site.php';
26
27	/**
28	* Registers the block for use in Gutenberg
29	* This is done via an action so that we can disable
30	* registration if we need to.
31	*/
32	function register_block() {
33	if (
34	! Jetpack::is_module_active( 'subscriptions' ) \|\|
35	! class_exists( 'Jetpack_Memberships' ) \|\|
36	! class_exists( 'Automattic\Jetpack\Extensions\Premium_Content\Subscription_Service\Abstract_Token_Subscription_Service' )
37	) {
38	return;
39	}
40
41	Blocks::jetpack_register_block(
42	__DIR__,
43	array( 'render_callback' => __NAMESPACE__ . '\render_block' )
44	);
45
46	add_filter(
47	'jetpack_options_whitelist',
48	function ( $options ) {
49	$options[] = 'jetpack_subscriptions_login_navigation_enabled';
50
51	return $options;
52	}
53	);
54
55	// If called via REST API, we need to register later in the lifecycle
56	if ( ( new Host() )->is_wpcom_platform() && ! Request::is_frontend() ) {
57	add_action(
58	'restapi_theme_init',
59	function () {
60	Jetpack_Subscription_Site::init()->handle_subscriber_login_block_placements();
61	}
62	);
63	} else {
64	Jetpack_Subscription_Site::init()->handle_subscriber_login_block_placements();
65	}
66	}
67	add_action( 'init', __NAMESPACE__ . '\register_block' );
68
69	/**
70	* Returns current URL.
71	*
72	* @return string
73	*/
74	function get_current_url() {
75	if ( ! isset( $_SERVER['HTTP_HOST'] ) \|\| ! isset( $_SERVER['REQUEST_URI'] ) ) {
76	return '';
77	}
78
79	return ( is_ssl() ? 'https://' : 'http://' ) . wp_unslash( $_SERVER['HTTP_HOST'] ) . wp_unslash( $_SERVER['REQUEST_URI'] ); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
80	}
81
82	/**
83	* Returns subscriber log in URL.
84	*
85	* @param string $redirect Path to redirect to on login.
86	*
87	* @return string
88	*/
89	function get_subscriber_login_url( $redirect ) {
90	$redirect = ! empty( $redirect ) ? $redirect : get_site_url();
91
92	if ( ( new Host() )->is_wpcom_simple() ) {
93	// On WPCOM we will redirect immediately
94	return wpcom_logmein_redirect_url( $redirect, false, null, 'link', get_current_blog_id() );
95	}
96
97	// On self-hosted we will save and hide the token.
98	// rawurlencode the redirect before nesting it: it is already percent-encoded
99	// (e.g. an emoji or non-ASCII slug comes through as %F0%9F%8C%91), and add_query_arg
100	// does not encode the values it inserts. Without this extra layer the value is
101	// over-decoded to raw bytes by the time it reaches the subscribers/auth endpoint,
102	// which strips it and 404s. See NL-273.
103	$redirect_url = get_site_url() . '/wp-json/jetpack/v4/subscribers/auth';
104	$redirect_url = add_query_arg( 'redirect_url', rawurlencode( $redirect ), $redirect_url );
105
106	return add_query_arg(
107	array(
108	'site_id' => intval( Jetpack_Options::get_option( 'id' ) ),
109	'redirect_url' => rawurlencode( $redirect_url ),
110	),
111	'https://subscribe.wordpress.com/memberships/jwt/'
112	);
113	}
114
115	/**
116	* Determines whether the current visitor is a logged in user or a subscriber.
117	*
118	* @return bool
119	*/
120	function is_subscriber_logged_in() {
121	return is_user_logged_in() \|\| Abstract_Token_Subscription_Service::has_token_from_cookie();
122	}
123
124	/**
125	* Renders Subscriber Login block.
126	*
127	* @param array $attributes The block attributes.
128	*
129	* @return string
130	*/
131	function render_block( $attributes ) {
132	Jetpack_Gutenberg::load_assets_as_required( __DIR__ );
133
134	$block_template = '<div %1$s><a href="%2$s">%3$s</a></div>';
135	$redirect_url = ! empty( $attributes['redirectToCurrent'] ) ? get_current_url() : get_site_url();
136	$log_in_label = ! empty( $attributes['logInLabel'] ) ? sanitize_text_field( $attributes['logInLabel'] ) : esc_html__( 'Log in', 'jetpack' );
137	$log_out_label = ! empty( $attributes['logOutLabel'] ) ? sanitize_text_field( $attributes['logOutLabel'] ) : esc_html__( 'Log out', 'jetpack' );
138	$show_manage_link = ! empty( $attributes['showManageSubscriptionsLink'] );
139	$manage_subscriptions_label = ! empty( $attributes['manageSubscriptionsLabel'] ) ? sanitize_text_field( $attributes['manageSubscriptionsLabel'] ) : esc_html__( 'Manage subscription', 'jetpack' );
140
141	if ( ! is_subscriber_logged_in() ) {
142	return sprintf(
143	$block_template,
144	get_block_wrapper_attributes(),
145	get_subscriber_login_url( $redirect_url ),
146	$log_in_label
147	);
148	}
149
150	if ( $show_manage_link && Jetpack_Memberships::is_current_user_subscribed() ) {
151	return sprintf(
152	$block_template,
153	get_block_wrapper_attributes(),
154	'https://wordpress.com/reader/site/subscription/' . Jetpack_Memberships::get_blog_id(),
155	$manage_subscriptions_label
156	);
157	}
158
159	return sprintf(
160	$block_template,
161	get_block_wrapper_attributes(),
162	wp_logout_url( $redirect_url ),
163	$log_out_label
164	);
165	}
166