siteorigin-widgets-resource.class.php000064400000010540151546154710014037 0ustar00<?php
/**
 * Resource for SiteOrigin widgets.
 */
class SiteOrigin_Widgets_Resource extends WP_REST_Controller {
	public $widgetAnchor;

	public function register_routes() {
		$version = '1';
		$namespace = 'sowb/v' . $version;
		$resource = 'widgets';

		$subresource = 'forms';
		register_rest_route( $namespace, '/' . $resource . '/' . $subresource, array(
			'methods' => WP_REST_Server::CREATABLE,
			'callback' => array( $this, 'get_widget_form' ),
			'args' => array(
				'widgetClass' => array(
					'validate_callback' => array( $this, 'validate_widget_class' ),
				),
				'widgetData' => array(
					'validate_callback' => array( $this, 'validate_widget_data' ),
				),
			),
			'permission_callback' => array( $this, 'permissions_check' ),
		) );

		$subresource = 'previews';
		register_rest_route( $namespace, '/' . $resource . '/' . $subresource, array(
			'methods' => WP_REST_Server::CREATABLE,
			'callback' => array( $this, 'get_widget_preview' ),
			'args' => array(
				'widgetClass' => array(
					'validate_callback' => array( $this, 'validate_widget_class' ),
				),
				'widgetData' => array(
					'validate_callback' => array( $this, 'validate_widget_data' ),
				),
			),
			'permission_callback' => array( $this, 'permissions_check' ),
		) );

		$subresource = 'permission';
		register_rest_route( $namespace, '/' . $resource . '/' . $subresource, array(
			'methods' => WP_REST_Server::CREATABLE,
			'callback' => array( $this, 'can_user_migrate_widgets' ),
			'permission_callback' => array( $this, 'permissions_check' ),
		) );
	}

	/**
	 * @param WP_REST_Request $request Request.
	 *
	 * @return true|WP_Error True if the request has read access, WP_Error object otherwise.
	 */
	public function permissions_check( $request ) {
		if ( ! current_user_can( 'edit_posts' ) ) {
			$status_code = rest_authorization_required_code();

			return new WP_Error(
				$status_code,
				__( 'Insufficient permissions.', 'so-widgets-bundle' ),
				array(
					'status' => $status_code,
				)
			);
		}

		return true;
	}

	/**
	 * Validate passed in widgetClass arg only contains alphanumeric and underscores.
	 *
	 * @return bool
	 */
	public function validate_widget_class( $param, $request, $key ) {
		return preg_match( '/\w+/', $param ) == 1;
	}

	/**
	 * Get the collection of widgets.
	 *
	 * @param WP_REST_Request $request
	 *
	 * @return WP_Error|WP_REST_Response
	 */
	public function get_widget_form( $request ) {
		$widget_class = $request['widgetClass'];
		$widget_data = empty( $request['widgetData'] ) ? array() : $request['widgetData'];

		/* @var $widget SiteOrigin_Widget */
		$widget = SiteOrigin_Widgets_Widget_Manager::get_widget_instance( $widget_class );
		// Attempt to activate the widget if it's not already active.
		if ( ! empty( $widget_class ) && empty( $widget ) ) {
			$widget = SiteOrigin_Widgets_Bundle::single()->load_missing_widget( false, $widget_class );
		}

		if ( ! empty( $widget ) && is_object( $widget ) && is_subclass_of( $widget, 'SiteOrigin_Widget' ) ) {
			if ( ! empty( $widget_data ) ) {
				$widget_data = $widget->update( $widget_data, $widget_data );
			}
			ob_start();
			$widget->form( $widget_data );
			$widget_form = ob_get_clean();
		} else {
			$widget_form = new WP_Error(
				400,
				'Invalid or missing widget class: ' . $widget_class,
				array(
					'status' => 400,
				)
			);
		}

		return rest_ensure_response( $widget_form );
	}

	/**
	 * For now widget data is validated in the below `get_widget_preview` function.
	 * Leaving this here for possible later implementation.
	 *
	 * @return bool
	 */
	public function validate_widget_data( $param, $request, $key ) {
		return true;
	}

	public function add_widget_id( $id, $instance, $widget ) {
		return $this->widgetAnchor;
	}

	/**
	 * Get the collection of widgets.
	 *
	 * @param WP_REST_Request $request
	 *
	 * @return WP_Error|WP_REST_Response
	 */
	public function get_widget_preview( $request ) {
		return rest_ensure_response(
			SiteOrigin_Widgets_Bundle_Widget_Block::single()->get_widget_preview(
				$request
			)
		);
	}

	/**
	 * Checks if current user can migrate widgets.
	 *
	 * Determines if the current user has permission to migrate widgets
	 * by checking if they have the 'manage_options' capability.
	 *
	 * @return bool True if user can migrate widgets, false otherwise.
	 */
	public function can_user_migrate_widgets(): bool {
		return current_user_can( 'manage_options' );
	}
}
sowb-rest-routes.php000064400000001750151546154710010535 0ustar00<?php

/**
 * Handles registering Widgets Bundle custom REST endpoints.
 *
 * Class SiteOrigin_Widgets_Rest_Routes
 */
class SiteOrigin_Widgets_Rest_Routes {
	public function __construct() {
		global $wp_version;

		if ( version_compare( $wp_version, '4.7', '>=' ) && class_exists( 'WP_REST_Controller' ) ) {
			include plugin_dir_path( __FILE__ ) . 'siteorigin-widgets-resource.class.php';
			add_action( 'rest_api_init', array( $this, 'register_rest_routes' ) );
		}
	}

	/**
	 * Singleton
	 *
	 * @return SiteOrigin_Widgets_Rest_Routes
	 */
	public static function single() {
		static $single;

		if ( empty( $single ) ) {
			$single = new self();
		}

		return $single;
	}

	/**
	 * Register all our REST resources.
	 */
	public function register_rest_routes() {
		$resources = array(
			new SiteOrigin_Widgets_Resource(),
		);

		foreach ( $resources as $resource ) {
			/* @var WP_REST_Controller $resource */
			$resource->register_routes();
		}
	}
}
SiteOrigin_Widgets_Rest_Routes::single();