| 1 |
<?php // phpcs:ignore WordPress.Files.FileName.InvalidClassFileName |
| 2 |
/** |
| 3 |
* WPCOM_JSON_API_Autosave_Post_v1_1_Endpoint |
| 4 |
* |
| 5 |
* @package automattic/jetpack |
| 6 |
*/ |
| 7 |
|
| 8 |
if ( ! defined( 'ABSPATH' ) ) { |
| 9 |
exit( 0 ); |
| 10 |
} |
| 11 |
|
| 12 |
new WPCOM_JSON_API_Autosave_Post_v1_1_Endpoint( |
| 13 |
array( |
| 14 |
'description' => 'Create a post autosave.', |
| 15 |
'group' => '__do_not_document', |
| 16 |
'stat' => 'posts:autosave', |
| 17 |
'min_version' => '1.1', |
| 18 |
'method' => 'POST', |
| 19 |
'path' => '/sites/%s/posts/%d/autosave', |
| 20 |
'path_labels' => array( |
| 21 |
'$site' => '(int|string) Site ID or domain', |
| 22 |
'$post_ID' => '(int) The post ID', |
| 23 |
), |
| 24 |
'request_format' => array( |
| 25 |
'content' => '(HTML) The post content.', |
| 26 |
'title' => '(HTML) The post title.', |
| 27 |
'excerpt' => '(HTML) The post excerpt.', |
| 28 |
), |
| 29 |
'response_format' => array( |
| 30 |
'ID' => '(int) autodraft post ID', |
| 31 |
'post_ID' => '(int) post ID', |
| 32 |
'preview_URL' => '(string) preview URL for the post', |
| 33 |
'modified' => '(ISO 8601 datetime) modified time', |
| 34 |
), |
| 35 |
|
| 36 |
'example_request' => 'https://public-api.wordpress.com/rest/v1.1/sites/82974409/posts/1/autosave', |
| 37 |
|
| 38 |
'example_request_data' => array( |
| 39 |
'headers' => array( |
| 40 |
'authorization' => 'Bearer YOUR_API_TOKEN', |
| 41 |
), |
| 42 |
|
| 43 |
'body' => array( |
| 44 |
'title' => 'Howdy', |
| 45 |
'content' => 'Hello. I am a test post. I was created by the API', |
| 46 |
), |
| 47 |
), |
| 48 |
) |
| 49 |
); |
| 50 |
|
| 51 |
// phpcs:disable PEAR.NamingConventions.ValidClassName.Invalid |
| 52 |
|
| 53 |
/** |
| 54 |
* Class WPCOM_JSON_API_Autosave_Post_v1_1_Endpoint |
| 55 |
* |
| 56 |
* @phan-constructor-used-for-side-effects |
| 57 |
*/ |
| 58 |
class WPCOM_JSON_API_Autosave_Post_v1_1_Endpoint extends WPCOM_JSON_API_Post_v1_1_Endpoint { |
| 59 |
|
| 60 |
/** |
| 61 |
* Autosave Post callback. |
| 62 |
* /sites/%s/posts/%d/autosave -> $blog_id, $post_id |
| 63 |
* |
| 64 |
* @param string $path Path. |
| 65 |
* @param int $blog_id Blog ID. |
| 66 |
* @param int $post_id Post ID. |
| 67 |
*/ |
| 68 |
public function callback( $path = '', $blog_id = 0, $post_id = 0 ) { |
| 69 |
if ( ! defined( 'DOING_AUTOSAVE' ) ) { |
| 70 |
define( 'DOING_AUTOSAVE', true ); |
| 71 |
} |
| 72 |
|
| 73 |
$blog_id = $this->api->switch_to_blog_and_validate_user( $this->api->get_blog_id( $blog_id ) ); |
| 74 |
if ( is_wp_error( $blog_id ) ) { |
| 75 |
return $blog_id; |
| 76 |
} |
| 77 |
|
| 78 |
$input = $this->input( false ); |
| 79 |
|
| 80 |
if ( ! is_array( $input ) || ! $input ) { |
| 81 |
return new WP_Error( 'invalid_input', 'Invalid request input', 400 ); |
| 82 |
} |
| 83 |
|
| 84 |
if ( defined( 'IS_WPCOM' ) && IS_WPCOM ) { |
| 85 |
// Make sure Custom Post Types, etc. get registered. |
| 86 |
$this->load_theme_functions(); |
| 87 |
} |
| 88 |
|
| 89 |
$post = get_post( $post_id ); |
| 90 |
|
| 91 |
if ( ! $post || is_wp_error( $post ) ) { |
| 92 |
return new WP_Error( 'unknown_post', 'Unknown post', 404 ); |
| 93 |
} |
| 94 |
|
| 95 |
if ( ! current_user_can( 'edit_post', $post->ID ) ) { |
| 96 |
return new WP_Error( 'unauthorized', 'User cannot edit post', 403 ); |
| 97 |
} |
| 98 |
|
| 99 |
$post_data = array( |
| 100 |
'post_ID' => $post_id, |
| 101 |
'post_type' => $post->post_type, |
| 102 |
'post_title' => $input['title'], |
| 103 |
'post_content' => $input['content'], |
| 104 |
'post_excerpt' => $input['excerpt'], |
| 105 |
); |
| 106 |
|
| 107 |
$preview_url = add_query_arg( 'preview', 'true', get_permalink( $post->ID ) ); |
| 108 |
|
| 109 |
if ( ! wp_check_post_lock( $post->ID ) && |
| 110 |
get_current_user_id() === (int) $post->post_author && |
| 111 |
( 'auto-draft' === $post->post_status || 'draft' === $post->post_status ) |
| 112 |
) { |
| 113 |
// Drafts and auto-drafts are just overwritten by autosave for the same user if the post is not locked. |
| 114 |
$auto_id = edit_post( wp_slash( $post_data ) ); |
| 115 |
} else { |
| 116 |
// Non drafts or other users drafts are not overwritten. The autosave is stored in a special post revision for each user. |
| 117 |
$auto_id = wp_create_post_autosave( wp_slash( $post_data ) ); |
| 118 |
$nonce = wp_create_nonce( 'post_preview_' . $post->ID ); |
| 119 |
$preview_url = add_query_arg( |
| 120 |
array( |
| 121 |
'preview_id' => $post->ID, |
| 122 |
'preview_nonce' => $nonce, |
| 123 |
), |
| 124 |
$preview_url |
| 125 |
); |
| 126 |
} |
| 127 |
|
| 128 |
$updated_post = get_post( $auto_id ); |
| 129 |
|
| 130 |
if ( $updated_post && $updated_post->ID && $updated_post->post_modified ) { |
| 131 |
return array( |
| 132 |
'ID' => $auto_id, |
| 133 |
'post_ID' => $post->ID, |
| 134 |
'modified' => $this->format_date( $updated_post->post_modified_gmt, $updated_post->post_modified ), |
| 135 |
'preview_URL' => $preview_url, |
| 136 |
); |
| 137 |
} else { |
| 138 |
return new WP_Error( 'autosave_error', __( 'Autosave encountered an unexpected error', 'jetpack' ), 500 ); |
| 139 |
} |
| 140 |
} |
| 141 |
} |
| 142 |
|
