| @@ -250,9 +250,9 @@ | ||
| 250 | 250 | public function refresh_token( WP_REST_Request $request ): WP_REST_Response { |
| 251 | 251 | $refresh_token = $request->get_param( 'refresh_token' ); |
| 252 | 252 | |
| 253 | 253 | if ( empty( $refresh_token ) ) { |
| 254 | - return new WP_REST_Response( | |
| 254 | + return rest_ensure_response( | |
| 255 | 255 | array( |
| 256 | 256 | 'error' => 'invalid_request', |
| 257 | 257 | 'error_description' => 'Missing refresh_token parameter', |
| 258 | 258 | ), |
| @@ -276,9 +276,9 @@ | ||
| 276 | 276 | } elseif ( false !== strpos( $error_code, 'user_not_found' ) ) { |
| 277 | 277 | $oauth_error = 'invalid_grant'; |
| 278 | 278 | } |
| 279 | 279 | |
| 280 | - return new WP_REST_Response( | |
| 280 | + return rest_ensure_response( | |
| 281 | 281 | array( |
| 282 | 282 | 'error' => $oauth_error, |
| 283 | 283 | 'error_description' => $error_msg, |
| 284 | 284 | ), |
| @@ -446,12 +446,18 @@ | ||
| 446 | 446 | * |
| 447 | 447 | * @return WP_REST_Response |
| 448 | 448 | */ |
| 449 | 449 | public function get_all_users_sessions( WP_REST_Request $request ): WP_REST_Response { |
| 450 | + global $wpdb; | |
| 451 | + | |
| 450 | 452 | $auth_service = AuthService::instance(); |
| 451 | 453 | |
| 452 | 454 | // Get all users who have refresh tokens. |
| 453 | - $user_ids = $auth_service->sessions()->users_with_sessions(); | |
| 455 | + $user_ids = $wpdb->get_col( | |
| 456 | + "SELECT DISTINCT user_id | |
| 457 | + FROM {$wpdb->usermeta} | |
| 458 | + WHERE meta_key = '_woocommerce_pos_refresh_tokens'" | |
| 459 | + ); | |
| 454 | 460 | |
| 455 | 461 | $users_data = array(); |
| 456 | 462 | |
| 457 | 463 | // Get current JTI if available from the request token. |
