| 1 |
<?php |
| 2 |
namespace Templately\Utils; |
| 3 |
|
| 4 |
use Templately\API\Login; |
| 5 |
use WP_Error; |
| 6 |
|
| 7 |
class Http extends Base { |
| 8 |
/** |
| 9 |
* API Endpoint |
| 10 |
* @var string |
| 11 |
*/ |
| 12 |
private $url = 'https://app.templately.com/api/plugin'; |
| 13 |
|
| 14 |
/** |
| 15 |
* Development Mode |
| 16 |
* @var boolean |
| 17 |
*/ |
| 18 |
private $dev_mode = false; |
| 19 |
|
| 20 |
/** |
| 21 |
* API Query |
| 22 |
* @var string |
| 23 |
*/ |
| 24 |
public $query = null; |
| 25 |
/** |
| 26 |
* API Endpoint |
| 27 |
* @var string |
| 28 |
*/ |
| 29 |
public $endpoint = null; |
| 30 |
|
| 31 |
/** |
| 32 |
* Setting the development mode. |
| 33 |
*/ |
| 34 |
public function __construct() { |
| 35 |
$this->dev_mode = Helper::is_dev_api(); |
| 36 |
} |
| 37 |
|
| 38 |
/** |
| 39 |
* Determining the endpoint URL based on the mode. |
| 40 |
* |
| 41 |
* @return string |
| 42 |
*/ |
| 43 |
public function url() { |
| 44 |
if ( Helper::is_dev_api() ) { |
| 45 |
$this->url = 'https://app.templately.dev/api/plugin'; |
| 46 |
} |
| 47 |
|
| 48 |
/** |
| 49 |
* Filter the API endpoint URL |
| 50 |
* |
| 51 |
* @since 3.5.0 |
| 52 |
* @param string $url The endpoint URL |
| 53 |
*/ |
| 54 |
$this->url = apply_filters('templately_dev_api_endpoint_url', $this->url); |
| 55 |
|
| 56 |
return $this->url; |
| 57 |
} |
| 58 |
|
| 59 |
/** |
| 60 |
* Generate Google OAuth authentication URL |
| 61 |
* |
| 62 |
* @param string $redirect_to Optional redirect path after authentication |
| 63 |
* @return string The Google auth URL with query parameters |
| 64 |
*/ |
| 65 |
public function google_auth_url($redirect_to = '', $current_url = '') { |
| 66 |
$base_url = $this->url(); |
| 67 |
// Replace /api/plugin with /api/auth/plugin/google |
| 68 |
$auth_url = str_replace('/api/plugin', '/api/auth/plugin/google', $base_url); |
| 69 |
|
| 70 |
// Get the referer to return to the exact same page we initiated login from securely |
| 71 |
if ( ! empty( $current_url ) ) { |
| 72 |
$referer = esc_url_raw( $current_url ); |
| 73 |
} else { |
| 74 |
$referer = isset( $_SERVER['HTTP_REFERER'] ) ? esc_url_raw( wp_unslash( $_SERVER['HTTP_REFERER'] ) ) : ''; |
| 75 |
} |
| 76 |
|
| 77 |
$return_url = wp_validate_redirect( $referer, '' ); |
| 78 |
|
| 79 |
if ( empty( $return_url ) ) { |
| 80 |
$return_url = admin_url( 'admin.php?page=templately' ); |
| 81 |
} |
| 82 |
|
| 83 |
// Unique random state — doubles as cache busting and as the CSRF token the |
| 84 |
// callback validates. Only minted into a transient for a logged-in user: |
| 85 |
// this endpoint is public, and an anonymous caller could otherwise flood |
| 86 |
// wp_options with tokens that can never authorize anything. |
| 87 |
$state = wp_generate_password( 32, false ); |
| 88 |
$state_owner = get_current_user_id(); |
| 89 |
|
| 90 |
if ( $state_owner > 0 ) { |
| 91 |
Database::set_transient( 'google_state_' . $state, $state_owner, 15 * MINUTE_IN_SECONDS ); |
| 92 |
} |
| 93 |
|
| 94 |
$return_params = [ |
| 95 |
'templately_google_login' => '1', |
| 96 |
'templately_state' => $state, |
| 97 |
]; |
| 98 |
|
| 99 |
// Add redirect-to parameter if provided |
| 100 |
if (!empty($redirect_to)) { |
| 101 |
$return_params['redirect-to'] = $redirect_to; |
| 102 |
} |
| 103 |
|
| 104 |
$site_url_with_params = add_query_arg($return_params, $return_url); |
| 105 |
|
| 106 |
$query_params = [ |
| 107 |
'site_url' => urlencode($site_url_with_params), |
| 108 |
'site_ip' => Helper::get_ip(), |
| 109 |
'state' => $state, |
| 110 |
]; |
| 111 |
|
| 112 |
return add_query_arg($query_params, $auth_url); |
| 113 |
} |
| 114 |
|
| 115 |
/** |
| 116 |
* @param array $args |
| 117 |
* @return string |
| 118 |
*/ |
| 119 |
protected function prepareArgs( $args ) { |
| 120 |
$prepareArgs = ""; |
| 121 |
foreach ( $args as $key => $value ) { |
| 122 |
switch ( true ) { |
| 123 |
case is_int( $value ): |
| 124 |
case is_bool( $value ): |
| 125 |
case is_string( $value ) && ( $value === 'true' || $value === 'false' ): |
| 126 |
$prepareArgs .= "$key:" . $value . ","; |
| 127 |
break; |
| 128 |
default: |
| 129 |
$prepareArgs .= "$key:" . '"' . Helper::esc_json_string( $value ) . '"' . ","; |
| 130 |
break; |
| 131 |
} |
| 132 |
} |
| 133 |
|
| 134 |
return rtrim( $prepareArgs, ',' ); |
| 135 |
} |
| 136 |
|
| 137 |
/** |
| 138 |
* Preparing query for the endpoint. |
| 139 |
* |
| 140 |
* @param string $query_name |
| 141 |
* @param string $params |
| 142 |
* @param array $funcArgs |
| 143 |
* @param array ...$args |
| 144 |
* @return Http |
| 145 |
*/ |
| 146 |
public function query( $query_name, $params, $funcArgs = [], ...$args ) { |
| 147 |
$query = '{'; |
| 148 |
$query .= $query_name; |
| 149 |
if ( is_array( $funcArgs ) && ! empty( $funcArgs ) ) { |
| 150 |
$query .= "(" . $this->prepareArgs( $funcArgs ) . ")"; |
| 151 |
} |
| 152 |
if ( ! empty( $params ) ) { |
| 153 |
$query .= "{"; |
| 154 |
$query .= $params; |
| 155 |
$query .= "}"; |
| 156 |
} |
| 157 |
$query .= '}'; |
| 158 |
|
| 159 |
$this->endpoint = $query_name; |
| 160 |
$this->query = ! empty( $args ) ? sprintf( $query, ...$args ) : $query; |
| 161 |
return $this; |
| 162 |
} |
| 163 |
|
| 164 |
/** |
| 165 |
* Preparing mutation for the endpoint. |
| 166 |
* |
| 167 |
* @param string $mutate |
| 168 |
* @param string $params |
| 169 |
* @param array $funcArgs |
| 170 |
* @param array ...$args |
| 171 |
* @return Http |
| 172 |
*/ |
| 173 |
public function mutation( $mutate, $params, $funcArgs = [], ...$args ) { |
| 174 |
$this->query( $mutate, $params, $funcArgs, ...$args ); |
| 175 |
$mutation = 'mutation'; |
| 176 |
$mutation .= $this->query; |
| 177 |
$this->endpoint = $mutate; |
| 178 |
$this->query = ! empty( $args ) ? sprintf( $mutation, ...$args ) : $mutation; |
| 179 |
return $this; |
| 180 |
} |
| 181 |
|
| 182 |
/** |
| 183 |
* This function is responsible for Remote HTTP POST |
| 184 |
* |
| 185 |
* @param string $query |
| 186 |
* @param array $args |
| 187 |
* @return mixed |
| 188 |
*/ |
| 189 |
public function post( $args = [] ) { |
| 190 |
if ( empty( $query ) ) { |
| 191 |
$query = $this->query; |
| 192 |
} |
| 193 |
|
| 194 |
$headers = [ |
| 195 |
'Content-Type' => 'application/json', |
| 196 |
'Accept' => 'application/json', |
| 197 |
'x-templately-ip' => Helper::get_ip(), |
| 198 |
'x-templately-url' => home_url( '/' ), |
| 199 |
'x-templately-version' => TEMPLATELY_VERSION, |
| 200 |
]; |
| 201 |
|
| 202 |
if ( ! empty( $args['headers'] ) ) { |
| 203 |
$headers = wp_parse_args( $args['headers'], $headers ); |
| 204 |
unset( $args['headers'] ); |
| 205 |
} |
| 206 |
|
| 207 |
if ( defined( 'TEMPLATELY_DEBUG_LOG' ) && TEMPLATELY_DEBUG_LOG ) { |
| 208 |
Helper::log( 'URL: ' . $this->url() ); |
| 209 |
Helper::log( 'QUERY: ' . $query ); |
| 210 |
} |
| 211 |
|
| 212 |
$_default_args = [ |
| 213 |
'timeout' => $this->dev_mode ? 120 : 30, |
| 214 |
'headers' => $headers, |
| 215 |
'body' => wp_json_encode( [ |
| 216 |
'query' => $query |
| 217 |
] ) |
| 218 |
]; |
| 219 |
|
| 220 |
$retryCount = 0; |
| 221 |
$maxRetries = defined('TEMPLATELY_HTTP_RETRY') ? TEMPLATELY_HTTP_RETRY : 3; |
| 222 |
$args = wp_parse_args( $args, $_default_args ); |
| 223 |
do { |
| 224 |
$response = wp_remote_post( $this->url(), $args ); |
| 225 |
$retryCount++; |
| 226 |
} while ( is_wp_error( $response ) && $retryCount < $maxRetries ); |
| 227 |
|
| 228 |
if ( defined( 'TEMPLATELY_DEBUG_LOG' ) && TEMPLATELY_DEBUG_LOG ) { |
| 229 |
Helper::log( 'Retry Count: ' . $retryCount ); |
| 230 |
// Helper::log( 'RAW RESPONSE: ' ); |
| 231 |
// Helper::log( $response ); |
| 232 |
// Helper::log( 'END RAW RESPONSE' ); |
| 233 |
} |
| 234 |
|
| 235 |
return $this->maybeErrors( $response, $args ); |
| 236 |
} |
| 237 |
|
| 238 |
/** |
| 239 |
* Formatting the self::post() response |
| 240 |
* |
| 241 |
* @param mixed $response |
| 242 |
* @param array $args |
| 243 |
* @return mixed |
| 244 |
*/ |
| 245 |
private function maybeErrors( &$response, $args = [] ) { |
| 246 |
if ( $response instanceof WP_Error ) { |
| 247 |
return $response; // Return WP_Error, if it is an error. |
| 248 |
} |
| 249 |
|
| 250 |
// Check for verification header before processing response body |
| 251 |
Helper::check_verification_header( $response ); |
| 252 |
Helper::check_site_disconnection( $response ); |
| 253 |
|
| 254 |
$response_code = wp_remote_retrieve_response_code( $response ); |
| 255 |
$response_message = wp_remote_retrieve_response_message( $response ); |
| 256 |
|
| 257 |
/** |
| 258 |
* Retrieve Data from Response Body. |
| 259 |
*/ |
| 260 |
$response = json_decode( wp_remote_retrieve_body( $response ), true ); |
| 261 |
/** |
| 262 |
* If the graphql hit with any error. |
| 263 |
*/ |
| 264 |
if ( ! empty( $response['errors'] ) ) { |
| 265 |
if ( defined( 'TEMPLATELY_DEBUG_LOG' ) && TEMPLATELY_DEBUG_LOG ) { |
| 266 |
Helper::log( 'ERROR: ' ); |
| 267 |
Helper::log( $response['errors'] ); |
| 268 |
Helper::log( 'END ERROR' ); |
| 269 |
} |
| 270 |
if ( is_array( $response['errors'] ) ) { |
| 271 |
$wp_error = new WP_Error; |
| 272 |
array_walk( $response['errors'], function ( $error ) use ( &$wp_error ) { |
| 273 |
if ( isset( $error['message'] ) ) { |
| 274 |
if ( $error['message'] === 'validation' ) { |
| 275 |
array_walk( $error['extensions'], function ( $_error, $_error_key ) use ( &$wp_error ) { |
| 276 |
if ( $_error_key == 'validation' ) { |
| 277 |
array_walk( $_error, function ( $v_error, $key ) use ( &$wp_error ) { |
| 278 |
$wp_error->add( "{$key}_error", $v_error[0] ); |
| 279 |
} ); |
| 280 |
} |
| 281 |
} ); |
| 282 |
} else { |
| 283 |
$error_data = []; |
| 284 |
if(!empty($error["extensions"]["statusText"])) { |
| 285 |
$error_data["statusText"] = $error["extensions"]["statusText"]; |
| 286 |
} |
| 287 |
if ( isset( $error['debugMessage'] ) ) { |
| 288 |
$wp_error->add( 'templately_graphql_error', $error['debugMessage'] ); |
| 289 |
} else { |
| 290 |
$wp_error->add( 'templately_graphql_error', $error['message'], $error_data ); |
| 291 |
} |
| 292 |
} |
| 293 |
} |
| 294 |
} ); |
| 295 |
|
| 296 |
if( $wp_error->get_error_code() === 'templately_graphql_error' ) { |
| 297 |
if( $wp_error->get_error_message() == 'Unauthorized' ) { |
| 298 |
$global_user = Login::get_instance()->delete(); |
| 299 |
|
| 300 |
return [ |
| 301 |
'redirect' => true, |
| 302 |
'url' => 'sign-in', |
| 303 |
'user' => $global_user, |
| 304 |
]; |
| 305 |
} |
| 306 |
} |
| 307 |
|
| 308 |
return $wp_error; |
| 309 |
} |
| 310 |
} elseif ( ! empty( $response['status'] ) && $response['status'] === 'error' ) { |
| 311 |
|
| 312 |
if ( defined( 'TEMPLATELY_DEBUG_LOG' ) && TEMPLATELY_DEBUG_LOG ) { |
| 313 |
Helper::log( 'ERROR: ' ); |
| 314 |
Helper::log( $response ); |
| 315 |
Helper::log( 'END ERROR' ); |
| 316 |
} |
| 317 |
|
| 318 |
$error_data = []; |
| 319 |
if ( ! empty( $response['statusText'] ) ) { |
| 320 |
$error_data['statusText'] = $response['statusText']; |
| 321 |
} |
| 322 |
|
| 323 |
$error_message = ! empty( $response['message'] ) ? $response['message'] : __( 'Unknown error occurred', 'templately' ); |
| 324 |
|
| 325 |
return new WP_Error( 'templately_api_error', $error_message, $error_data ); |
| 326 |
} |
| 327 |
|
| 328 |
$_response = isset( $response['data'][$this->endpoint] ) ? $response['data'][$this->endpoint] : []; |
| 329 |
// {"data":{"connectWithApiKey":{"status":"error","message":"Invalid API key.","user":null}}} |
| 330 |
if ( ! empty( $response['status'] ) && $response['status'] === 'error' ) { |
| 331 |
|
| 332 |
} |
| 333 |
|
| 334 |
if ( defined( 'TEMPLATELY_DEBUG_LOG' ) && TEMPLATELY_DEBUG_LOG ) { |
| 335 |
Helper::log( 'RESPONSE: ' ); |
| 336 |
Helper::log( $_response ); |
| 337 |
Helper::log( 'END RESPONSE' ); |
| 338 |
} |
| 339 |
|
| 340 |
return $_response; |
| 341 |
} |
| 342 |
} |
| 343 |
|
