ProductsRestServiceProvider.php — SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments 1.2.1

surecart / app / src / Rest / ProductsRestServiceProvider.php

surecart / app / src / Rest Last commit date

ProductsRestServiceProvider.php

213 lines

1	<?php
2
3	namespace SureCart\Rest;
4
5	use SureCart\Rest\RestServiceInterface;
6	use SureCart\Controllers\Rest\ProductsController;
7
8	/**
9	* Service provider for Price Rest Requests
10	*/
11	class ProductsRestServiceProvider extends RestServiceProvider implements RestServiceInterface {
12
13	/**
14	* Endpoint.
15	*
16	* @var string
17	*/
18	protected $endpoint = 'products';
19
20	/**
21	* Rest Controller
22	*
23	* @var string
24	*/
25	protected $controller = ProductsController::class;
26
27	/**
28	* Get our sample schema for a post.
29	*
30	* @return array The sample schema for a post
31	*/
32	public function get_item_schema() {
33	if ( $this->schema ) {
34	// Since WordPress 5.3, the schema can be cached in the $schema property.
35	return $this->schema;
36	}
37
38	$this->schema = [
39	// This tells the spec of JSON Schema we are using which is draft 4.
40	'$schema' => 'http://json-schema.org/draft-04/schema#',
41	// The title property marks the identity of the resource.
42	'title' => $this->endpoint,
43	'type' => 'object',
44	// In JSON Schema you can specify object properties in the properties attribute.
45	'properties' => [
46	'id' => [
47	'description' => esc_html__( 'Unique identifier for the object.', 'surecart' ),
48	'type' => 'string',
49	'context' => [ 'view', 'edit', 'embed' ],
50	'readonly' => true,
51	],
52	'file_upload_ids' => [
53	'description' => esc_html__( 'Files attached to the product.', 'surecart' ),
54	'context' => [ 'edit' ],
55	'type' => 'array',
56	'items' => [
57	'type' => 'string',
58	],
59	],
60	'metadata' => [
61	'description' => esc_html__( 'Stored product metadata', 'surecart' ),
62	'type' => 'object',
63	'properties' => [
64	'wp_created_by' => [
65	'type' => 'integer',
66	'context' => [ 'edit' ],
67	'readonly' => true,
68	],
69	],
70	],
71	'metrics' => [
72	'description' => esc_html__( 'Top level metrics for the product.', 'surecart' ),
73	'readonly' => true,
74	'type' => 'object',
75	'properties' => [
76	'currency' => [
77	'type' => 'string',
78	],
79	'max_price_amount' => [
80	'type' => 'integer',
81	],
82	'min_price_amount' => [
83	'type' => 'integer',
84	],
85	'prices_count' => [
86	'type' => 'integer',
87	],
88	],
89	'context' => [ 'edit' ],
90	],
91	],
92	];
93
94	return $this->schema;
95	}
96
97	/**
98	* Get the collection params.
99	*
100	* @return array
101	*/
102	public function get_collection_params() {
103	return [
104	'archived' => [
105	'description' => esc_html__( 'Whether to get archived products or not.', 'surecart' ),
106	'type' => 'boolean',
107	],
108	'recurring' => [
109	'description' => esc_html__( 'Only return products that are recurring or not recurring (one time).', 'surecart' ),
110	'type' => 'boolean',
111	],
112	'query' => [
113	'description' => __( 'The query to be used for full text search of this collection.', 'surecart' ),
114	'type' => 'string',
115	],
116	'ids' => [
117	'description' => __( 'Ensure result set excludes specific IDs.', 'surecart' ),
118	'type' => 'array',
119	'items' => [
120	'type' => 'string',
121	],
122	'default' => [],
123	],
124	'product_group_ids' => [
125	'description' => __( 'Only return objects that belong to the given product groups.', 'surecart' ),
126	'type' => 'array',
127	'items' => [
128	'type' => 'string',
129	],
130	'default' => [],
131	],
132	'page' => [
133	'description' => esc_html__( 'The page of items you want returned.', 'surecart' ),
134	'type' => 'integer',
135	],
136	'per_page' => [
137	'description' => esc_html__( 'A limit on the number of items to be returned, between 1 and 100.', 'surecart' ),
138	'type' => 'integer',
139	],
140	];
141	}
142
143	/**
144	* Anyone can get a specific product.
145	*
146	* @param \WP_REST_Request $request Full details about the request.
147	* @return true\|\WP_Error True if the request has access to create items, WP_Error object otherwise.
148	*/
149	public function get_item_permissions_check( $request ) {
150	if ( 'edit' === $request['context'] && ! current_user_can( 'edit_sc_products' ) ) {
151	return new \WP_Error(
152	'rest_forbidden_context',
153	__( 'Sorry, you are not allowed to edit products.', 'surecart' ),
154	array( 'status' => rest_authorization_required_code() )
155	);
156	}
157
158	return true;
159	}
160
161	/**
162	* Who can list products?
163	*
164	* @param \WP_REST_Request $request Full details about the request.
165	* @return true\|\WP_Error True if the request has access to create items, WP_Error object otherwise.
166	*/
167	public function get_items_permissions_check( $request ) {
168	if ( 'edit' === $request['context'] && ! current_user_can( 'edit_sc_products' ) ) {
169	return new \WP_Error(
170	'rest_forbidden_context',
171	__( 'Sorry, you are not allowed to edit products.', 'surecart' ),
172	array( 'status' => rest_authorization_required_code() )
173	);
174	}
175
176	if ( $request['archived'] ) {
177	return current_user_can( 'edit_sc_products' );
178	}
179
180	return true;
181	}
182
183	/**
184	* Create model.
185	*
186	* @param \WP_REST_Request $request Full details about the request.
187	* @return true\|\WP_Error True if the request has access to create items, WP_Error object otherwise.
188	*/
189	public function create_item_permissions_check( $request ) {
190	return current_user_can( 'publish_sc_products' );
191	}
192
193	/**
194	* Update model.
195	*
196	* @param \WP_REST_Request $request Full details about the request.
197	* @return true\|\WP_Error True if the request has access to create items, WP_Error object otherwise.
198	*/
199	public function update_item_permissions_check( $request ) {
200	return current_user_can( 'edit_sc_products' );
201	}
202
203	/**
204	* Delete model.
205	*
206	* @param \WP_REST_Request $request Full details about the request.
207	* @return true\|\WP_Error True if the request has access to create items, WP_Error object otherwise.
208	*/
209	public function delete_item_permissions_check( $request ) {
210	return current_user_can( 'delete_sc_products' );
211	}
212	}
213