sureforms / inc / rest-api.php

rest-api.php in SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz 1.4.1, at inc/rest-api.php

217 lines 5.5 KB

Raw Download Zip

1	<?php
2	/**
3	* Rest API Manager Class.
4	*
5	* @package sureforms.
6	*/
7
8	namespace SRFM\Inc;
9
10	use SRFM\Inc\AI_Form_Builder\AI_Auth;
11	use SRFM\Inc\AI_Form_Builder\AI_Form_Builder;
12	use SRFM\Inc\AI_Form_Builder\Field_Mapping;
13	use SRFM\Inc\Database\Tables\Entries;
14	use SRFM\Inc\Traits\Get_Instance;
15
16	if ( ! defined( 'ABSPATH' ) ) {
17	exit; // Exit if accessed directly.
18	}
19
20	/**
21	* Rest API handler class.
22	*
23	* @since 0.0.7
24	*/
25	class Rest_Api {
26	use Get_Instance;
27
28	/**
29	* Constructor
30	*
31	* @since 0.0.7
32	* @return void
33	*/
34	public function __construct() {
35	add_action( 'rest_api_init', [ $this, 'register_endpoints' ] );
36	}
37
38	/**
39	* Register endpoints
40	*
41	* @since 0.0.7
42	* @return void
43	*/
44	public function register_endpoints() {
45
46	$prefix = 'sureforms';
47	$version_slug = 'v1';
48
49	$endpoints = $this->get_endpoints();
50
51	foreach ( $endpoints as $endpoint => $args ) {
52	register_rest_route(
53	$prefix . '/' . $version_slug,
54	$endpoint,
55	$args
56	);
57	}
58	}
59
60	/**
61	* Check if user can edit posts
62	*
63	* @since 0.0.7
64	* @return bool
65	*/
66	public function can_edit_posts() {
67	return current_user_can( 'edit_posts' );
68	}
69
70	/**
71	* Checks whether the value is boolean or not.
72	*
73	* @param mixed $value value to be checked.
74	* @since 0.0.8
75	* @return bool
76	*/
77	public function sanitize_boolean_field( $value ) {
78	return filter_var( $value, FILTER_VALIDATE_BOOLEAN );
79	}
80
81	/**
82	* Generate the block slugs as per the request by parsing the post content.
83	*
84	* @param \WP_REST_Request $request Full details about the request.
85	* @since 0.0.7
86	* @return void
87	*/
88	public function generate_block_slugs_by_content( $request ) {
89	$nonce = Helper::get_string_value( $request->get_header( 'X-WP-Nonce' ) );
90
91	if ( ! wp_verify_nonce( sanitize_text_field( $nonce ), 'wp_rest' ) ) {
92	wp_send_json_error( __( 'Nonce verification failed.', 'sureforms' ) );
93	}
94
95	$slugs = [];
96	$updated = false;
97	$params = $request->get_params();
98
99	if ( empty( $params['formID'] ) ) {
100	wp_send_json_error( __( 'Invalid request. Form ID missing.', 'sureforms' ) );
101	}
102
103	$form = get_post( absint( $params['formID'] ) );
104	$content = ! empty( $params['content'] ) ? wp_kses_post( $params['content'] ) : '';
105
106	if ( ! is_null( $form ) ) {
107	Helper::process_blocks( parse_blocks( $form->post_content ), $slugs, $updated );
108	}
109
110	Helper::process_blocks( parse_blocks( $content ), $slugs, $updated, '', true );
111
112	wp_send_json_success( $slugs );
113	}
114
115	/**
116	* Get the data for generating entries chart.
117	*
118	* @param \WP_REST_Request $request Full details about the request.
119	* @since 1.0.0
120	* @return array<mixed>
121	*/
122	public function get_entries_chart_data( $request ) {
123	$nonce = Helper::get_string_value( $request->get_header( 'X-WP-Nonce' ) );
124
125	if ( ! wp_verify_nonce( sanitize_text_field( $nonce ), 'wp_rest' ) ) {
126	wp_send_json_error( __( 'Nonce verification failed.', 'sureforms' ) );
127	}
128
129	$params = $request->get_params();
130
131	if ( empty( $params ) ) {
132	wp_send_json_error( __( 'Request could not be processed.', 'sureforms' ) );
133	}
134
135	$after = is_array( $params ) && ! empty( $params['after'] ) ? sanitize_text_field( Helper::get_string_value( $params['after'] ) ) : '';
136
137	if ( empty( $after ) ) {
138	wp_send_json_error( __( 'Invalid date.', 'sureforms' ) );
139	}
140
141	$where = [
142	[
143	[
144	'key' => 'created_at',
145	'value' => $after,
146	'compare' => '>=',
147	],
148
149	],
150	];
151
152	return Entries::get_instance()->get_results(
153	$where,
154	'created_at',
155	[ 'ORDER BY created_at DESC' ]
156	);
157	}
158
159	/**
160	* Get endpoints
161	*
162	* @since 0.0.7
163	* @return array<array<mixed>>
164	*/
165	private function get_endpoints() {
166	/*
167	* @internal This filter is used to add custom endpoints.
168	* @since 1.2.0
169	* @param array<array<mixed>> $endpoints Endpoints.
170	*/
171	return apply_filters(
172	'srfm_rest_api_endpoints',
173	[
174	'generate-block-slugs' => [
175	'methods' => 'POST',
176	'callback' => [ $this, 'generate_block_slugs_by_content' ],
177	'permission_callback' => [ $this, 'can_edit_posts' ],
178	],
179	'generate-form' => [
180	'methods' => 'POST',
181	'callback' => [ AI_Form_Builder::get_instance(), 'generate_ai_form' ],
182	'permission_callback' => [ $this, 'can_edit_posts' ],
183	'args' => [
184	'use_system_message' => [
185	'sanitize_callback' => [ $this, 'sanitize_boolean_field' ],
186	],
187	],
188	],
189	// This route is used to map the AI response to SureForms fields markup.
190	'map-fields' => [
191	'methods' => 'POST',
192	'callback' => [ Field_Mapping::get_instance(), 'generate_gutenberg_fields_from_questions' ],
193	'permission_callback' => [ $this, 'can_edit_posts' ],
194	],
195	// This route is used to initiate auth process when user tries to authenticate on billing portal.
196	'initiate-auth' => [
197	'methods' => 'GET',
198	'callback' => [ AI_Auth::get_instance(), 'get_auth_url' ],
199	'permission_callback' => [ $this, 'can_edit_posts' ],
200	],
201	// This route is to used to decrypt the access key and save it in the database.
202	'handle-access-key' => [
203	'methods' => 'POST',
204	'callback' => [ AI_Auth::get_instance(), 'handle_access_key' ],
205	'permission_callback' => [ $this, 'can_edit_posts' ],
206	],
207	// This route is to get the form submissions for the last 30 days.
208	'entries-chart-data' => [
209	'methods' => 'GET',
210	'callback' => [ $this, 'get_entries_chart_data' ],
211	'permission_callback' => [ $this, 'can_edit_posts' ],
212	],
213	]
214	);
215	}
216	}
217