jetpack / extensions / blocks / subscriber-login / subscriber-login.php

subscriber-login.php in Jetpack – WP Security, Backup, Speed, & Growth 16.3-a.5, at extensions/blocks/subscriber-login/subscriber-login.php

169 lines 5.2 KB

Raw Download Zip

1	<?php
2	/**
3	* Subscriber Login Block.
4	*
5	* @since 13.1
6	*
7	* @package automattic/jetpack
8	*/
9
10	namespace Automattic\Jetpack\Extensions\Subscriber_Login;
11
12	use Automattic\Jetpack\Blocks;
13	use Automattic\Jetpack\Extensions\Premium_Content\Subscription_Service\Abstract_Token_Subscription_Service;
14	use Automattic\Jetpack\Status\Host;
15	use Automattic\Jetpack\Status\Request;
16	use Jetpack;
17	use Jetpack_Gutenberg;
18	use Jetpack_Memberships;
19	use Jetpack_Options;
20
21	if ( ! defined( 'ABSPATH' ) ) {
22	exit( 0 );
23	}
24
25	require_once __DIR__ . '/class-jetpack-subscription-site.php';
26
27	/**
28	* Registers the block for use in Gutenberg
29	* This is done via an action so that we can disable
30	* registration if we need to.
31	*/
32	function register_block() {
33	if (
34	! Jetpack::is_module_active( 'subscriptions' ) \|\|
35	! class_exists( 'Jetpack_Memberships' ) \|\|
36	! class_exists( 'Automattic\Jetpack\Extensions\Premium_Content\Subscription_Service\Abstract_Token_Subscription_Service' )
37	) {
38	return;
39	}
40
41	Blocks::jetpack_register_block(
42	__DIR__,
43	array( 'render_callback' => __NAMESPACE__ . '\render_block' )
44	);
45
46	add_filter(
47	'jetpack_options_whitelist',
48	function ( $options ) {
49	$options[] = 'jetpack_subscriptions_login_navigation_enabled';
50
51	return $options;
52	}
53	);
54
55	// If called via REST API, we need to register later in the lifecycle
56	if ( ( new Host() )->is_wpcom_platform() && ! Request::is_frontend() ) {
57	add_action(
58	'restapi_theme_init',
59	function () {
60	Jetpack_Subscription_Site::init()->handle_subscriber_login_block_placements();
61	}
62	);
63	} else {
64	Jetpack_Subscription_Site::init()->handle_subscriber_login_block_placements();
65	}
66	}
67	add_action( 'init', __NAMESPACE__ . '\register_block' );
68
69	/**
70	* Returns current URL.
71	*
72	* @return string
73	*/
74	function get_current_url() {
75	if ( ! isset( $_SERVER['HTTP_HOST'] ) \|\| ! isset( $_SERVER['REQUEST_URI'] ) ) {
76	return '';
77	}
78
79	return ( is_ssl() ? 'https://' : 'http://' ) . wp_unslash( $_SERVER['HTTP_HOST'] ) . wp_unslash( $_SERVER['REQUEST_URI'] ); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
80	}
81
82	/**
83	* Returns subscriber log in URL.
84	*
85	* @param string $redirect Path to redirect to on login.
86	*
87	* @return string
88	*/
89	function get_subscriber_login_url( $redirect ) {
90	$redirect = ! empty( $redirect ) ? $redirect : get_site_url();
91
92	if ( ( new Host() )->is_wpcom_simple() ) {
93	// On WPCOM we will redirect immediately
94	return wpcom_logmein_redirect_url( $redirect, false, null, 'link', get_current_blog_id() );
95	}
96
97	// On self-hosted we will save and hide the token.
98	// rawurlencode the redirect before nesting it: it is already percent-encoded
99	// (e.g. an emoji or non-ASCII slug comes through as %F0%9F%8C%91), and add_query_arg
100	// does not encode the values it inserts. Without this extra layer the value is
101	// over-decoded to raw bytes by the time it reaches the subscribers/auth endpoint,
102	// which strips it and 404s. See NL-273.
103	$redirect_url = get_site_url() . '/wp-json/jetpack/v4/subscribers/auth';
104	$redirect_url = add_query_arg( 'redirect_url', rawurlencode( $redirect ), $redirect_url );
105
106	return add_query_arg(
107	array(
108	'site_id' => intval( Jetpack_Options::get_option( 'id' ) ),
109	'redirect_url' => rawurlencode( $redirect_url ),
110	),
111	'https://subscribe.wordpress.com/memberships/jwt/'
112	);
113	}
114
115	/**
116	* Determines whether the visitor has a subscriber session for the login UI.
117	*
118	* WordPress sessions count on Simple; other hosts require the subscriber cookie.
119	* Content access validates the token separately.
120	*
121	* @return bool
122	*/
123	function is_subscriber_logged_in() {
124	return ( ( new Host() )->is_wpcom_simple() && is_user_logged_in() ) \|\| Abstract_Token_Subscription_Service::has_token_from_cookie();
125	}
126
127	/**
128	* Renders Subscriber Login block.
129	*
130	* @param array $attributes The block attributes.
131	*
132	* @return string
133	*/
134	function render_block( $attributes ) {
135	Jetpack_Gutenberg::load_assets_as_required( __DIR__ );
136
137	$block_template = '<div %1$s><a href="%2$s">%3$s</a></div>';
138	$redirect_url = ! empty( $attributes['redirectToCurrent'] ) ? get_current_url() : get_site_url();
139	$log_in_label = ! empty( $attributes['logInLabel'] ) ? sanitize_text_field( $attributes['logInLabel'] ) : esc_html__( 'Log in', 'jetpack' );
140	$log_out_label = ! empty( $attributes['logOutLabel'] ) ? sanitize_text_field( $attributes['logOutLabel'] ) : esc_html__( 'Log out', 'jetpack' );
141	$show_manage_link = ! empty( $attributes['showManageSubscriptionsLink'] );
142	$manage_subscriptions_label = ! empty( $attributes['manageSubscriptionsLabel'] ) ? sanitize_text_field( $attributes['manageSubscriptionsLabel'] ) : esc_html__( 'Manage subscription', 'jetpack' );
143
144	if ( ! is_subscriber_logged_in() ) {
145	return sprintf(
146	$block_template,
147	get_block_wrapper_attributes(),
148	get_subscriber_login_url( $redirect_url ),
149	$log_in_label
150	);
151	}
152
153	if ( $show_manage_link && Jetpack_Memberships::is_current_user_subscribed() ) {
154	return sprintf(
155	$block_template,
156	get_block_wrapper_attributes(),
157	'https://wordpress.com/reader/site/subscription/' . Jetpack_Memberships::get_blog_id(),
158	$manage_subscriptions_label
159	);
160	}
161
162	return sprintf(
163	$block_template,
164	get_block_wrapper_attributes(),
165	wp_logout_url( $redirect_url ),
166	$log_out_label
167	);
168	}
169