OrderRestServiceProvider.php — SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments 4.5.0

surecart / app / src / Rest / OrderRestServiceProvider.php

surecart / app / src / Rest Last commit date

OrderRestServiceProvider.php

148 lines

1	<?php
2
3	namespace SureCart\Rest;
4
5	use SureCart\Rest\RestServiceInterface;
6	use SureCart\Controllers\Rest\OrderController;
7	use SureCart\Models\User;
8
9	/**
10	* Service provider for Price Rest Requests
11	*/
12	class OrderRestServiceProvider extends RestServiceProvider implements RestServiceInterface {
13	/**
14	* Endpoint.
15	*
16	* @var string
17	*/
18	protected $endpoint = 'orders';
19
20	/**
21	* Rest Controller
22	*
23	* @var string
24	*/
25	protected $controller = OrderController::class;
26
27	/**
28	* Methods allowed for the model.
29	*
30	* @var array
31	*/
32	protected $methods = [ 'index', 'find' ];
33
34	/**
35	* Register Additional REST Routes
36	*
37	* @return void
38	*/
39	public function registerRoutes() {
40	register_rest_route(
41	"$this->name/v$this->version",
42	$this->endpoint . '/(?P<id>\S+)/resend_notification/',
43	array(
44	array(
45	'methods' => \WP_REST_Server::EDITABLE,
46	'callback' => $this->callback( $this->controller, 'resend_notification' ),
47	'permission_callback' => array( $this, 'resend_notification_permissions_check' ),
48	),
49	// Register our schema callback.
50	'schema' => array( $this, 'get_item_schema' ),
51	)
52	);
53	}
54
55	/**
56	* Get our sample schema for a post.
57	*
58	* @return array The sample schema for a post
59	*/
60	public function get_item_schema() {
61	if ( $this->schema ) {
62	// Since WordPress 5.3, the schema can be cached in the $schema property.
63	return $this->schema;
64	}
65
66	$this->schema = [
67	// This tells the spec of JSON Schema we are using which is draft 4.
68	'$schema' => 'http://json-schema.org/draft-04/schema#',
69	// The title property marks the identity of the resource.
70	'title' => $this->endpoint,
71	'type' => 'object',
72	// In JSON Schema you can specify object properties in the properties attribute.
73	'properties' => [
74	'id' => [
75	'description' => esc_html__( 'Unique identifier for the object.', 'surecart' ),
76	'type' => 'string',
77	'context' => [ 'view', 'edit', 'embed' ],
78	'readonly' => true,
79	],
80	],
81	];
82
83	return $this->schema;
84	}
85
86	/**
87	* Filters a response based on the context defined in the schema.
88	*
89	* @since 4.7.0
90	*
91	* @param array\|\WP_REST_Response $data Response data to filter.
92	* @param string $context Context defined in the schema.
93	* @return array Filtered response.
94	*/
95	public function filter_response_by_context( $data, $context ) {
96	$schema = $this->get_item_schema();
97
98	// if the user can edit customers, show the edit context.
99	if ( current_user_can( 'edit_sc_customers' ) ) {
100	return rest_filter_response_by_context( $data, $schema, 'edit' );
101	}
102
103	$data = is_a( $data, 'WP_REST_Response' ) ? $data->get_data() : $data;
104
105	// if the user is logged in, and we have customer data.
106	// if it matches the current customer, then we can show the edit context.
107	if ( is_user_logged_in() && ! empty( $data['customer'] ) ) {
108	$customer_id = ! empty( $data['customer']['id'] ) ? $data['customer']['id'] : $data['customer'];
109	if ( User::current()->customerId() === $customer_id ) {
110	return rest_filter_response_by_context( $data, $schema, 'edit' );
111	}
112	}
113
114	return rest_filter_response_by_context( $data, $schema, 'view' );
115	}
116
117
118	/**
119	* Anyone can get a specific order if they have the unique order id.
120	*
121	* @param \WP_REST_Request $request Full details about the request.
122	* @return true\|\WP_Error True if the request has access to create items, WP_Error object otherwise.
123	*/
124	public function get_item_permissions_check( $request ) {
125	return current_user_can( 'read_sc_order', $request['id'] );
126	}
127
128	/**
129	* Listing
130	*
131	* @param \WP_REST_Request $request Full details about the request.
132	* @return true\|\WP_Error True if the request has access to create items, WP_Error object otherwise.
133	*/
134	public function get_items_permissions_check( $request ) {
135	return current_user_can( 'read_sc_orders', $request->get_params() );
136	}
137
138	/**
139	* Who can resend the order notification.
140	*
141	* @param \WP_REST_Request $request Rest Request.
142	* @return true\|\WP_Error True if the request has access to update return request, WP_Error object otherwise.
143	*/
144	public function resend_notification_permissions_check( $request ) {
145	return current_user_can( 'edit_sc_orders' );
146	}
147	}
148