Your IP : 216.73.216.215
<?php
/**
* Auth functionality REST endpoint.
*
* @link http://wpmudev.com
* @since 4.12.0
* @author Joel James <joel@incsub.com>
* @package WPMUDEV\Dashboard\Endpoints
*/
namespace WPMUDEV\Dashboard\Endpoints;
// If this file is called directly, abort.
defined( 'WPINC' ) || die;
use WP_REST_Request;
use WP_REST_Response;
use WP_REST_Server;
use WPMUDEV_Dashboard;
/**
* Class Auth
*/
class Auth extends Endpoint {
/**
* API endpoint for the current endpoint.
*
* @since 5.0.0
* @var string $endpoint
*/
private string $endpoint = '/auth';
/**
* Register the routes for handling auth functionality.
*
* @since 5.0.0
*
* @return void
*/
public function register_routes() {
// Logout endpoint.
register_rest_route(
$this->get_namespace(),
$this->endpoint . '/logout',
array(
array(
'methods' => WP_REST_Server::CREATABLE,
'callback' => array( $this, 'logout' ),
'permission_callback' => array( $this, 'permissions_check' ),
),
)
);
// Updates checking endpoint.
register_rest_route(
$this->get_namespace(),
$this->endpoint . '/check-updates',
array(
array(
'methods' => WP_REST_Server::CREATABLE,
'callback' => array( $this, 'check_updates' ),
'permission_callback' => array( $this, 'permissions_check' ),
),
)
);
// Hub sync endpoint.
register_rest_route(
$this->get_namespace(),
$this->endpoint . '/hub-sync',
array(
array(
'methods' => WP_REST_Server::CREATABLE,
'callback' => array( $this, 'hub_sync' ),
'permission_callback' => array( $this, 'permissions_check_skip_allowed_users' ), // hub_sync is the login endpoint, most of the times it doesn't have allowed_users yet.
'args' => array(
'api_key' => array(
'required' => true,
'description' => __( 'WPMU DEV API key.', 'wpmudev' ),
'type' => 'string',
),
'auth_nonce' => array(
'required' => true,
'description' => __( 'Sync auth nonce.', 'wpmudev' ),
'type' => 'string',
),
'is_sso_enabled' => array(
'required' => false,
'description' => __( 'Whether to enable SSO.', 'wpmudev' ),
'type' => 'boolean',
'default' => true,
),
),
),
)
);
// Get available teams.
register_rest_route(
$this->get_namespace(),
$this->endpoint . '/teams',
array(
array(
'methods' => WP_REST_Server::READABLE,
'callback' => array( $this, 'get_user_teams_callback' ),
'permission_callback' => array( $this, 'permissions_check' ),
'args' => array(
'user_api_key' => array(
'required' => true,
'description' => __( 'WPMU DEV User API key.', 'wpmudev' ),
'type' => 'string',
),
'auth_nonce' => array(
'required' => true,
'description' => __( 'Sync auth nonce.', 'wpmudev' ),
'type' => 'string',
),
),
),
)
);
}
/**
* Retrieve available teams for a user.
*
* This endpoint fetches the user's teams using the provided API key.
*
* @since 5.0.0
*
* @param WP_REST_Request $request Request object containing the user API key.
*
* @return WP_REST_Response
*/
public function get_user_teams_callback( $request ) {
// Retrieve the user_api_key from the request parameters.
$api_key = $request->get_param( 'user_api_key' );
$auth_nonce = $request->get_param( 'auth_nonce' );
$auth_verify_nonce = wp_verify_nonce( $auth_nonce, 'auth_nonce' );
if ( ! $auth_verify_nonce ) {
return $this->get_error_response(
'invalid_nonce',
__( 'Invalid Permissions.', 'wpmudev' ),
array(
'redirect' => add_query_arg(
array( 'invalid_nonce' => '1' ),
WPMUDEV_Dashboard::$ui->page_urls->dashboard_url
),
)
);
}
// Call the get_user_teams method with the provided API key.
$response = WPMUDEV_Dashboard::$api->get_user_teams( $api_key );
// Return the response from the API method.
return $this->get_response( $response );
}
/**
* Check for updates with Hub.
*
* This will do a full sync with Hub.
*
* @since 5.0.0
*
* @param WP_REST_Request $request Request object.
*
* @return WP_REST_Response
*/
public function check_updates( WP_REST_Request $request ) {
WPMUDEV_Dashboard::$settings->set( 'refresh_profile', true, 'flags' );
WPMUDEV_Dashboard::$api->refresh_projects_data();
WPMUDEV_Dashboard::$site->refresh_local_projects( 'remote', true );
return $this->get_response(
array(
'is_logged_in' => WPMUDEV_Dashboard::$api->has_key(),
)
);
}
/**
* Perform sync with Hub.
*
* This endpoint should be used for authentication.
*
* @since 5.0.0
*
* @param WP_REST_Request $request Request object.
*
* @return WP_REST_Response
*/
public function hub_sync( WP_REST_Request $request ) {
$api_key = $request->get_param( 'api_key' );
$is_sso_enabled = $request->get_param( 'is_sso_enabled' );
$auth_nonce = $request->get_param( 'auth_nonce' );
$auth_verify_nonce = wp_verify_nonce( $auth_nonce, 'auth_nonce' );
if ( ! $auth_verify_nonce ) {
return $this->get_error_response(
'invalid_nonce',
__( 'Invalid Permissions.', 'wpmudev' ),
array(
'redirect' => add_query_arg(
array( 'invalid_nonce' => '1' ),
WPMUDEV_Dashboard::$ui->page_urls->dashboard_url
),
)
);
}
if ( ! empty( $api_key ) ) {
// Set API key.
WPMUDEV_Dashboard::$api->set_key( $api_key );
// always get projects on first login / sync.
WPMUDEV_Dashboard::$api->refresh_projects_data();
WPMUDEV_Dashboard::$settings->set( 'enabled', $is_sso_enabled, 'sso' );
if ( $is_sso_enabled ) {
WPMUDEV_Dashboard::$settings->set( 'userid', get_current_user_id(), 'sso' );
}
// Sync with Hub.
$result = WPMUDEV_Dashboard::$api->hub_sync( false, true );
// Handle error.
if ( ! $result || empty( $result['membership'] ) ) {
// Clear API key.
WPMUDEV_Dashboard::$api->set_key( '' );
if ( false === $result || ! is_array( $result ) ) {
return $this->get_error_response(
'connection_error',
sprintf(
/* translators: %s: Error message. */
__(
'Your server had a problem connecting to WPMU DEV: "%s">. Please try again.',
'wpmudev'
),
esc_html( WPMUDEV_Dashboard::$api->api_error ),
)
. '<br>' // new line.
. sprintf(
/* translators: %s: API URL. */
__(
'If this problem continues, please contact your host with this error message and ask: "Is php on my server properly configured to be able to contact %s with a POST HTTP request via fsockopen or CURL?"',
'wpmudev'
),
esc_html( WPMUDEV_Dashboard::$api->rest_url( '' ) )
)
);
}
if ( ! empty( $result['limit_exceeded_no_hosting_sites'] ) ) {
$limit_data = $result['limit_data'] ?? array();
$limit_data = is_array( $limit_data ) ? $limit_data : array();
// null-safety.
$limit_data = wp_parse_args(
$limit_data,
array(
'site_limit' => 1,
// we did have DEV hosting_limit in the past for some membership. And we calculate "available hosting sites" slot that can use, display it in this notice.
// the option / settings / data still there, but realistically this will have 0 value ( no DEV Hosting Limit / Unlimited ).
// therefore calculating + displaying "available hosting sites" is somewhat obsolete if not leads to confusions.
// TODO: we should instead have another line / note in this notice to recommend them migrate to our DEV Hosting ( little bit too aggressive though, but seems that is where we are going ).
'hosted_limit' => 0,
'total_hosted' => 0,
)
);
return $this->get_error_response(
'site_limit_exceeded',
sprintf(
/* translators: %d: Site limit. */
__(
'You have reached your plan’s limit of <strong>%d site(s), not hosted with us, connected to The Hub</strong>.',
'wpmudev'
),
$limit_data['site_limit'],
)
. ' ' // space.
. sprintf(
/* translators: %1$s: Hub account URL, %2$s: Hub URL. */
__(
'<a href="%1$s" target="_blank" rel="noopener noreferrer">Upgrade your membership</a> or <a href="%2$s" target="_blank" rel="noopener noreferrer">remove a site</a> before adding another.',
'wpmudev'
),
esc_url( WPMUDEV_Dashboard::$ui->page_urls->hub_account_url ),
esc_url( WPMUDEV_Dashboard::$ui->page_urls->hub_url ),
)
. '<br/>' // new line.
. sprintf(
/* translators: %s: Support URL. */
__(
'<a href="%s" target="_blank" rel="noopener noreferrer">Contact Support</a> for assistance.',
'wpmudev'
),
esc_url( WPMUDEV_Dashboard::$ui->page_urls->hub_support_url . '#get-support' )
),
$limit_data
);
}
return $this->get_error_response(
'invalid_key',
__( 'Could not sync with Hub. Please check the API key.', 'wpmudev' )
);
} else {
// Valid key.
global $current_user;
WPMUDEV_Dashboard::$settings->set( 'limit_to_user', array( $current_user->ID ), 'general' );
WPMUDEV_Dashboard::$api->refresh_profile();
/***
* Action hook that run after login with WPMUDEV account is successful.
*
* @since 4.11.2
*
* @param int $user_id Current user ID.
*/
do_action( 'wpmudev_dashboard_after_login_success', $current_user->ID );
}
WPMUDEV_Dashboard::$ui->page_urls->reload();
return $this->get_response(
array(
'hub_site_url' => sprintf(
'%s/site/%d/overview/quick-setup',
WPMUDEV_Dashboard::$ui->page_urls->hub_url,
WPMUDEV_Dashboard::$api->get_site_id()
),
'urls' => WPMUDEV_Dashboard::$ui->page_urls,
'free_plugins_installed' => $this->get_installed_free_plugins(),
'features' => WPMUDEV_Dashboard::$ui->get_features(),
)
);
}
// If we reach this point, return error.
return $this->get_error_response(
'invalid_key',
__( 'Could not sync with Hub. Please check the API key.', 'wpmudev' )
);
}
/**
* Logout from Hub and disconnect site.
*
* @since 5.0.0
*
* @param WP_REST_Request $request Request object.
*
* @return WP_REST_Response
*/
public function logout( WP_REST_Request $request ) {
// Logout.
WPMUDEV_Dashboard::$site->logout( false );
return $this->get_response();
}
/**
* Get list of free plugins installed.
*
* @return array
*/
private function get_installed_free_plugins(): array {
$installed = array();
// Membership type.
$type = WPMUDEV_Dashboard::$api->get_membership_status();
// Free and expired types are not valid.
if ( in_array( $type, array( 'expired', 'paused', 'free' ), true ) ) {
return $installed;
}
// Get membership details.
$membership_data = WPMUDEV_Dashboard::$api->get_membership_data();
$free_projects = WPMUDEV_Dashboard::$site->get_installed_free_projects();
if ( 'single' === $type ) {
foreach ( $free_projects as $free_project ) {
if ( absint( $free_project['id'] ) === absint( $membership_data['membership'] ) ) {
$installed[] = $free_project;
}
}
} elseif ( 'full' === $type ) {
$installed = $free_projects;
} elseif ( 'unit' === $type ) {
foreach ( $free_projects as $free_project ) {
$membership_projects = $membership_data['membership_projects'] ?? array();
$membership_projects = array_map( 'intval', $membership_projects );
if ( in_array( (int) $free_project, $membership_projects, true ) ) {
$installed[] = $free_project;
}
}
}
// Get only id and name.
if ( ! empty( $installed ) ) {
$installed = wp_list_pluck( $installed, 'name', 'id' );
}
return $installed;
}
}