VerificationCodeController.php at 4.4.1 · SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments

surecart / app / src / Controllers / Rest / VerificationCodeController.php

VerificationCodeController.php

126 lines 3.2 KB

Raw Download Zip

1	<?php
2
3	namespace SureCart\Controllers\Rest;
4
5	use SureCart\Models\User;
6	use SureCart\Models\VerificationCode;
7
8	/**
9	* Handle verification code requests through the REST API
10	*/
11	class VerificationCodeController extends RestController {
12	/**
13	* Class to make the requests.
14	*
15	* @var string
16	*/
17	protected $class = VerificationCode::class;
18
19	/**
20	* Create model.
21	*
22	* @param \WP_REST_Request $request Rest Request.
23	*
24	* @return \WP_REST_Response\|\WP_Error
25	*/
26	public function create( \WP_REST_Request $request ) {
27	$model = $this->middleware( new $this->class(), $request );
28	if ( is_wp_error( $model ) ) {
29	return $model;
30	}
31
32	$user = $this->getUser( $request->get_param( 'login' ) );
33
34	// bail if no user.
35	if ( ! $user ) {
36	return new \WP_Error( 'user_not_found', __( 'The user could not be found.', 'surecart' ), [ 'status' => 404 ] );
37	}
38
39	return $model->where( $request->get_query_params() )->create(
40	[
41	'email' => $user->user_email,
42	]
43	);
44	}
45
46	/**
47	* Verify a verification code
48	*
49	* @param \WP_REST_Request $request Rest Request.
50	*
51	* @return mixed\|\WP_Error
52	*/
53	public function verify( \WP_REST_Request $request ) {
54	// run middleware.
55	$model = $this->middleware( new $this->class(), $request );
56
57	// bail if error.
58	if ( is_wp_error( $model ) ) {
59	return $model;
60	}
61
62	$user = $this->getUser( $request->get_param( 'login' ) );
63	if ( ! $user ) {
64	return new \WP_Error(
65	'invalid_email',
66	__( 'There is no account with that username or email address.', 'surecart' ),
67	[ 'status' => 404 ]
68	);
69	}
70
71	// verify the code.
72	$verify = $model->where( $request->get_query_params() )->verify(
73	[
74	'email' => $user->user_email,
75	'code' => $request->get_param( 'code' ),
76	]
77	);
78
79	// check for errors.
80	if ( is_wp_error( $verify ) ) {
81	return $verify;
82	}
83
84	// code is invalid or not verified.
85	if ( empty( $verify->verified ) ) {
86	return new \WP_Error( 'invalid_code', __( 'Invalid verification code', 'surecart' ), [ 'status' => 400 ] );
87	}
88
89	// get the user based on the login value.
90	$user = $this->getUser( $request->get_param( 'login' ) );
91
92	// bail if no user.
93	if ( ! $user ) {
94	return new \WP_Error( 'user_not_found', __( 'The user could not be found.', 'surecart' ), [ 'status' => 404 ] );
95	}
96
97	// login the user.
98	$logged_in = $user->login();
99
100	if ( is_wp_error( $logged_in ) ) {
101	return $logged_in;
102	}
103
104	$verify->name = $user->display_name ?? $user->user_login;
105	$verify->avatar_url = get_avatar_url( $user->user_email, [ 'size' => 48 ] );
106	$verify->nonce = ( wp_installing() && ! is_multisite() ) ? '' : wp_create_nonce( 'wp_rest' );
107	$redirect_to = $request->get_param( 'redirect_to' );
108	$redirect_url = ! empty( $redirect_to ) ? wp_validate_redirect( $redirect_to, false ) : null;
109	$verify->redirect_url = apply_filters( 'sc_login_redirect_url', $redirect_url ); // this is the URL to redirect to after login.
110
111	// return the model.
112	return $verify;
113	}
114
115	/**
116	* Get the user from the login.
117	*
118	* @param string $login An email or login.
119	*
120	* @return \SureCart\Models\User\|false
121	*/
122	public function getUser( $login ) {
123	return User::getUserby( strpos( $login ?? '', '@' ) ? 'email' : 'login', $login );
124	}
125	}
126