# reviewx/trunk/app/Rest/Controllers/AuthController.php

ReviewX – Multi-Criteria Reviews for WooCommerce with Google Reviews & Schema, version trunk. 272 lines.

- Page: https://pluginprobe.com/plugins/reviewx/trunk/code/app/Rest/Controllers/AuthController.php
- Raw: https://pluginprobe.com/plugins/reviewx/trunk/raw/app/Rest/Controllers/AuthController.php
- Modified: 2026-07-16T09:57:18+00:00

Line numbers below start at 1. Link to a line or a range by appending a fragment to the
page URL, for example `https://pluginprobe.com/plugins/reviewx/trunk/code/app/Rest/Controllers/AuthController.php#L10-L20`.

```php
<?php

namespace ReviewX\Rest\Controllers;

\defined("ABSPATH") || exit;
use Exception;
use ReviewX\Api\AuthApi;
use ReviewX\Handlers\MigrationRollback\MigrationPrompt;
use ReviewX\Handlers\MigrationRollback\ReviewXChecker;
use ReviewX\Models\Site;
use ReviewX\Services\Api\LoginService;
use ReviewX\Services\DataSyncService;
use ReviewX\Services\SettingService;
use ReviewX\Utilities\Auth\Client;
use ReviewX\Utilities\Helper;
use Throwable;
use ReviewX\WPDrill\Contracts\InvokableContract;
use ReviewX\WPDrill\Response;
use ReviewX\Services\CacheServices;
class AuthController implements InvokableContract
{
    protected LoginService $loginService;
    protected DataSyncService $dataSyncService;
    protected CacheServices $cacheServices;
    public function __construct()
    {
        $this->loginService = new LoginService();
        $this->dataSyncService = new DataSyncService();
        $this->cacheServices = new CacheServices();
    }
    public function __invoke()
    {
    }
    /**
     * @param $request
     * @return Response
     */
    public function login($request)
    {
        $data = $request->get_params();
        $payload = $this->buildAuthPayload($data);
        //return Helper::rvxApi(['error' => 'Invalid request', 'data' => $payload])->fails('Invalid request', Response::HTTP_BAD_REQUEST);
        try {
            $response = (new AuthApi())->login($payload);
            if ($response->getStatusCode() !== Response::HTTP_OK) {
                return Helper::saasResponse($response);
            }
            $apiData = $response->getApiData();
            $validation = $this->validateSite($apiData);
            if ($validation !== \true) {
                return $validation;
                // return error response
            }
            $site_info = $this->prepareData($apiData);
            $site = Site::where('uid', $site_info['uid'])->first();
            if (!$site) {
                $site = Site::insert($site_info);
            } else {
                Site::where("id", $site->id)->update($site_info);
            }
            Client::set(Site::where('uid', $site_info['uid'])->first());
            $syncScheduled = $this->dataSyncService->scheduleInitialDataSync('login', 'default');
            if (!$syncScheduled) {
                return Helper::rvxApi(['error' => 'Data sync could not be scheduled'])->fails('Data sync schedule failed', Response::HTTP_INTERNAL_SERVER_ERROR);
            }
            $this->cacheServices->removeCache();
            $this->cacheServices->refreshPendingReviewNoticeSummary();
            $this->loginService->resetPostMeta();
            // Set the localStorage isAlreadySyncSuccess
            \set_transient('rvx_reset_sync_flag', \true);
            \delete_metadata('user', 0, $insight_key, '', \true);
            \delete_metadata('user', 0, $review_key, '', \true);
            return Helper::saasResponse($response);
        } catch (Exception $e) {
            \error_log('ReviewX: Login failed: ' . $e->getMessage());
            $errorCode = $e->getCode() === 0 ? Response::HTTP_INTERNAL_SERVER_ERROR : $e->getCode();
            $message = $e->getCode() === 0 ? 'Internal Server Error' : $e->getMessage();
            return Helper::rvxApi(['error' => $message])->fails($message, $errorCode);
        }
    }
    public function license_key($request)
    {
        $data = $request->get_params();
        $payload = $this->buildAuthPayload($data);
        try {
            $response = (new AuthApi())->licenseLogin($payload);
            if ($response->getStatusCode() !== Response::HTTP_OK) {
                return Helper::saasResponse($response);
            }
            $apiData = $response->getApiData();
            $validation = $this->validateSite($apiData);
            if ($validation !== \true) {
                return $validation;
                // return error response
            }
            $site_info = $this->prepareData($apiData);
            $site = Site::where('uid', $site_info['uid'])->first();
            if (!$site) {
                $site = Site::insert($site_info);
            } else {
                Site::where("id", $site->id)->update($site_info);
            }
            Client::set(Site::where('uid', $site_info['uid'])->first());
            $syncScheduled = $this->dataSyncService->scheduleInitialDataSync('login', 'default');
            if (!$syncScheduled) {
                return Helper::rvxApi(['error' => 'Data sync could not be scheduled'])->fails('Data sync schedule failed', Response::HTTP_INTERNAL_SERVER_ERROR);
            }
            $this->cacheServices->removeCache();
            $this->cacheServices->refreshPendingReviewNoticeSummary();
            $this->loginService->resetPostMeta();
            // Set the localStorage isAlreadySyncSuccess
            \set_transient('rvx_reset_sync_flag', \true);
            return Helper::saasResponse($response);
        } catch (Exception $e) {
            \error_log('ReviewX: License login failed: ' . $e->getMessage());
            $errorCode = $e->getCode() === 0 ? Response::HTTP_INTERNAL_SERVER_ERROR : $e->getCode();
            $message = $e->getCode() === 0 ? 'Internal Server Error' : $e->getMessage();
            return Helper::rvxApi(['error' => $message])->fails($message, $errorCode);
        }
    }
    protected function prepareData(array $site) : array
    {
        return ['site_id' => $site['id'], 'uid' => $site['uid'], 'name' => $site['name'], 'domain' => $site['domain'], 'url' => $site['url'], 'locale' => $site['locale'], 'email' => $site['email'], 'secret' => $site['key'], 'is_saas_sync' => 0, 'created_at' => \wp_date('Y-m-d H:i:s'), 'updated_at' => \wp_date('Y-m-d H:i:s')];
    }
    public function multicriteriaOptions()
    {
        $data = [];
        $isOldReviewXExists = ReviewXChecker::isReviewXExists();
        $isReviewXSaaSExists = ReviewXChecker::isReviewXSaasExists();
        if ($isOldReviewXExists && !$isReviewXSaaSExists) {
            $options = \get_option('_rx_option_review_criteria');
            $keys = ["a", "b", "c", "d", "e", "f", "g", "h", "i", "j"];
            $criterias = [];
            $i = 0;
            foreach ($options as $key => $name) {
                if (isset($keys[$i])) {
                    $criterias[] = ["key" => $keys[$i], "name" => $name];
                }
                $i++;
            }
            $multicrtriaEnableorDisable = \get_option('_rx_option_allow_multi_criteria');
            $data = ["enable" => $multicrtriaEnableorDisable == 1 ? \true : \false, "criterias" => $criterias];
        } elseif ($isReviewXSaaSExists) {
            $data = (array) (new SettingService())->getReviewSettings('product') ?? [];
            $data = $data['reviews']['multicriteria'] ?? $data['multicriteria'] ?? [];
        }
        return $data;
    }
    public function forgetPassword($request)
    {
        try {
            $response = $this->loginService->forgetPassword($request->get_params());
            return Helper::saasResponse($response);
        } catch (Throwable $e) {
            return Helper::rvxApi(['error' => $e->getMessage()])->fails('Forget password fail', $e->getCode());
        }
    }
    public function resetPassword($request)
    {
        try {
            $response = $this->loginService->resetPassword($request->get_params());
            return Helper::saasResponse($response);
        } catch (Throwable $e) {
            return Helper::rvxApi(['error' => $e->getMessage()])->fails('Reset password fail', $e->getCode());
        }
    }
    /**
     * @param $request
     * @return Response
     */
    public function register($request)
    {
        $data = $request->get_params();
        $payload = $this->buildAuthPayload($data);
        try {
            $response = (new AuthApi())->register($payload);
            if ($response->getStatusCode() !== Response::HTTP_OK) {
                return Helper::saasResponse($response);
            }
            $apiData = $response->getApiData();
            $validation = $this->validateSite($apiData);
            if ($validation !== \true) {
                return $validation;
                // return error response
            }
            $site_info = $this->prepareRegisterData($apiData['site']);
            $site = Site::where('uid', $site_info['uid'])->first();
            if (!$site) {
                $site = Site::insert($site_info);
            } else {
                Site::where("id", $site->id)->update($site_info);
            }
            Client::set(Site::where('uid', $site_info['uid'])->first());
            $syncScheduled = $this->dataSyncService->scheduleDataSync('register', 'product');
            if (!$syncScheduled) {
                return Helper::rvxApi(['error' => "Registration successful, but data sync could not be scheduled"])->fails('Data sync schedule failed', Response::HTTP_INTERNAL_SERVER_ERROR);
            }
            $this->cacheServices->removeCache();
            $this->loginService->resetPostMeta();
            $this->removeUserSettingsFormLocal();
            // Set the localStorage isAlreadySyncSuccess
            \set_transient('rvx_reset_sync_flag', \true);
            return Helper::saasResponse($response);
        } catch (Exception $e) {
            \error_log('ReviewX: Registration failed: ' . $e->getMessage());
            $errorCode = $e->getCode() === 0 ? Response::HTTP_INTERNAL_SERVER_ERROR : $e->getCode();
            $message = $e->getCode() === 0 ? 'Internal Server Error' : $e->getMessage();
            return Helper::rvxApi(['error' => $message])->fails($message, $errorCode);
        }
    }
    public function migrationPrompt()
    {
        $migrationData = new MigrationPrompt();
        $result = \false;
        if (ReviewXChecker::isReviewXExists() && !ReviewXChecker::isReviewXSaasExists()) {
            $result = $migrationData->reviewx_retrieve_old_plugin_options_data();
        } elseif (ReviewXChecker::isReviewXSaasExists()) {
            $result = $migrationData->reviewx_retrieve_saas_plugin_options_data();
        }
        if ($result !== \false) {
            $successMessage = "Old Data found";
            return Helper::rvxApi($result)->success($successMessage, 200);
        } else {
            $failsMessage = "No Data found";
            return Helper::rvxApi(null)->success($failsMessage, 200);
        }
    }
    public function removeUserSettingsFormLocal()
    {
        $option_name = '__user_setting_access';
        if (\delete_option($option_name)) {
            return ["Success" => "Options Table Delete"];
        }
    }
    /**
     * Validate API response for required site data.
     *
     * @param array $apiData
     * @return bool
     */
    private function validateSite(array $apiData) : bool
    {
        if (!\is_array($apiData) && !isset($apiData['id']) && !isset($apiData['uid'])) {
            return \false;
        }
        return \true;
    }
    protected function prepareRegisterData(array $site) : array
    {
        return ['site_id' => $site['id'], 'uid' => $site['uid'], 'name' => $site['name'], 'domain' => $site['domain'], 'url' => $site['url'], 'locale' => $site['locale'], 'email' => $site['email'], 'secret' => $site['key'], 'is_saas_sync' => 0, 'created_at' => \wp_date('Y-m-d H:i:s'), 'updated_at' => \wp_date('Y-m-d H:i:s')];
    }
    private function buildAuthPayload(array $data) : array
    {
        $multicriteria = $this->multicriteriaOptions();
        if (!empty($multicriteria)) {
            $data['multicriteria'] = $multicriteria;
            $data['multi_criteria_reviews'] = $this->legacyMultiCriteriaOptions($multicriteria);
        }
        return \array_merge($data, Helper::getWpClientInfo());
    }
    private function legacyMultiCriteriaOptions(array $multicriteria) : array
    {
        $criteriaNames = [];
        foreach ($multicriteria['criterias'] ?? [] as $criteria) {
            if (\is_array($criteria) && !empty($criteria['name'])) {
                $criteriaNames[] = $criteria['name'];
            }
        }
        return ['enabled' => !empty($multicriteria['enable']), 'criteria' => $criteriaNames];
    }
}

```