OrderRestServiceProvider.php
| 1 | <?php |
| 2 | |
| 3 | namespace SureCart\Rest; |
| 4 | |
| 5 | use SureCart\Rest\RestServiceInterface; |
| 6 | use SureCart\Controllers\Rest\OrderController; |
| 7 | use SureCart\Models\User; |
| 8 | |
| 9 | /** |
| 10 | * Service provider for Price Rest Requests |
| 11 | */ |
| 12 | class OrderRestServiceProvider extends RestServiceProvider implements RestServiceInterface { |
| 13 | /** |
| 14 | * Endpoint. |
| 15 | * |
| 16 | * @var string |
| 17 | */ |
| 18 | protected $endpoint = 'orders'; |
| 19 | |
| 20 | /** |
| 21 | * Rest Controller |
| 22 | * |
| 23 | * @var string |
| 24 | */ |
| 25 | protected $controller = OrderController::class; |
| 26 | |
| 27 | /** |
| 28 | * Methods allowed for the model. |
| 29 | * |
| 30 | * @var array |
| 31 | */ |
| 32 | protected $methods = [ 'index', 'find' ]; |
| 33 | |
| 34 | /** |
| 35 | * Register Additional REST Routes |
| 36 | * |
| 37 | * @return void |
| 38 | */ |
| 39 | public function registerRoutes() { |
| 40 | register_rest_route( |
| 41 | "$this->name/v$this->version", |
| 42 | $this->endpoint . '/(?P<id>\S+)/resend_notification/', |
| 43 | array( |
| 44 | array( |
| 45 | 'methods' => \WP_REST_Server::EDITABLE, |
| 46 | 'callback' => $this->callback( $this->controller, 'resend_notification' ), |
| 47 | 'permission_callback' => array( $this, 'resend_notification_permissions_check' ), |
| 48 | ), |
| 49 | // Register our schema callback. |
| 50 | 'schema' => array( $this, 'get_item_schema' ), |
| 51 | ) |
| 52 | ); |
| 53 | } |
| 54 | |
| 55 | /** |
| 56 | * Get our sample schema for a post. |
| 57 | * |
| 58 | * @return array The sample schema for a post |
| 59 | */ |
| 60 | public function get_item_schema() { |
| 61 | if ( $this->schema ) { |
| 62 | // Since WordPress 5.3, the schema can be cached in the $schema property. |
| 63 | return $this->schema; |
| 64 | } |
| 65 | |
| 66 | $this->schema = [ |
| 67 | // This tells the spec of JSON Schema we are using which is draft 4. |
| 68 | '$schema' => 'http://json-schema.org/draft-04/schema#', |
| 69 | // The title property marks the identity of the resource. |
| 70 | 'title' => $this->endpoint, |
| 71 | 'type' => 'object', |
| 72 | // In JSON Schema you can specify object properties in the properties attribute. |
| 73 | 'properties' => [ |
| 74 | 'id' => [ |
| 75 | 'description' => esc_html__( 'Unique identifier for the object.', 'surecart' ), |
| 76 | 'type' => 'string', |
| 77 | 'context' => [ 'view', 'edit', 'embed' ], |
| 78 | 'readonly' => true, |
| 79 | ], |
| 80 | ], |
| 81 | ]; |
| 82 | |
| 83 | return $this->schema; |
| 84 | } |
| 85 | |
| 86 | /** |
| 87 | * Filters a response based on the context defined in the schema. |
| 88 | * |
| 89 | * @since 4.7.0 |
| 90 | * |
| 91 | * @param array|\WP_REST_Response $data Response data to filter. |
| 92 | * @param string $context Context defined in the schema. |
| 93 | * @return array Filtered response. |
| 94 | */ |
| 95 | public function filter_response_by_context( $data, $context ) { |
| 96 | $schema = $this->get_item_schema(); |
| 97 | |
| 98 | // if the user can edit customers, show the edit context. |
| 99 | if ( current_user_can( 'edit_sc_customers' ) ) { |
| 100 | return rest_filter_response_by_context( $data, $schema, 'edit' ); |
| 101 | } |
| 102 | |
| 103 | $data = is_a( $data, 'WP_REST_Response' ) ? $data->get_data() : $data; |
| 104 | |
| 105 | // if the user is logged in, and we have customer data. |
| 106 | // if it matches the current customer, then we can show the edit context. |
| 107 | if ( is_user_logged_in() && ! empty( $data['customer'] ) ) { |
| 108 | $customer_id = ! empty( $data['customer']['id'] ) ? $data['customer']['id'] : $data['customer']; |
| 109 | if ( User::current()->customerId() === $customer_id ) { |
| 110 | return rest_filter_response_by_context( $data, $schema, 'edit' ); |
| 111 | } |
| 112 | } |
| 113 | |
| 114 | return rest_filter_response_by_context( $data, $schema, 'view' ); |
| 115 | } |
| 116 | |
| 117 | |
| 118 | /** |
| 119 | * Anyone can get a specific order if they have the unique order id. |
| 120 | * |
| 121 | * @param \WP_REST_Request $request Full details about the request. |
| 122 | * @return true|\WP_Error True if the request has access to create items, WP_Error object otherwise. |
| 123 | */ |
| 124 | public function get_item_permissions_check( $request ) { |
| 125 | return current_user_can( 'read_sc_order', $request['id'] ); |
| 126 | } |
| 127 | |
| 128 | /** |
| 129 | * Listing |
| 130 | * |
| 131 | * @param \WP_REST_Request $request Full details about the request. |
| 132 | * @return true|\WP_Error True if the request has access to create items, WP_Error object otherwise. |
| 133 | */ |
| 134 | public function get_items_permissions_check( $request ) { |
| 135 | return current_user_can( 'read_sc_orders', $request->get_params() ); |
| 136 | } |
| 137 | |
| 138 | /** |
| 139 | * Who can resend the order notification. |
| 140 | * |
| 141 | * @param \WP_REST_Request $request Rest Request. |
| 142 | * @return true|\WP_Error True if the request has access to update return request, WP_Error object otherwise. |
| 143 | */ |
| 144 | public function resend_notification_permissions_check( $request ) { |
| 145 | return current_user_can( 'edit_sc_orders' ); |
| 146 | } |
| 147 | } |
| 148 |