mirror of
https://github.com/wp-graphql/wp-graphql-woocommerce.git
synced 2026-08-14 12:53:44 +02:00
Geoffrey K TaylorandGitHub
ba13b2ec0a
* feat: Authorizing URLs implemented and tested. * feat: More woographql_*_nonce functions implemented. * chore: linting changes made. * chore: linting changes made. * fix: woographql_*_ functions tested. * chore: WPCS compliance met. * devops: lint-code script updated to PHP v8.0 * chore: WPCS compliance met * devops: TransferSessionHandlerTest & QLSessionHandlerTest updated * devops: codeclimate.yml added. * chore: Linter compliance met * devops: Harmonizing WordPress doc written and Settings doc updated. * chore: Typo fixed in docs. * fix: General bugfixes and improvements related to Auth URLs * devops: More docs. * chore: Linter compliance met * chore: small change made to docs.
93 lines
2.4 KiB
PHP
93 lines
2.4 KiB
PHP
<?php
|
|
/**
|
|
* Handles data for the current customers session.
|
|
*
|
|
* @package WPGraphQL\WooCommerce\Utils
|
|
* @since 0.12.5
|
|
*/
|
|
|
|
namespace WPGraphQL\WooCommerce\Utils;
|
|
|
|
/**
|
|
* Class Transfer_Session_Handler
|
|
*/
|
|
class Transfer_Session_Handler extends \WC_Session_Handler {
|
|
/**
|
|
* Return true, if valid credential exists
|
|
*
|
|
* @return bool
|
|
*/
|
|
protected function verify_auth_request_credentials_exists() {
|
|
$possible_nonces = array_values( Protected_Router::get_nonce_names() );
|
|
// Return false if not nonce names set.
|
|
if ( empty( $possible_nonces ) ) {
|
|
return false;
|
|
}
|
|
|
|
// Return false if no matching nonces found in query parameters.
|
|
$query_params = array_keys( $_REQUEST ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended
|
|
if ( empty( array_intersect( $possible_nonces, $query_params ) ) ) {
|
|
return false;
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
/**
|
|
* Returns "session_id" if proper conditions met.
|
|
*
|
|
* @return int
|
|
*/
|
|
protected function get_posted_session_id() {
|
|
if ( ! $this->verify_auth_request_credentials_exists() ) {
|
|
return 0;
|
|
}
|
|
if ( ! isset( $_REQUEST['session_id'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended
|
|
return 0;
|
|
}
|
|
|
|
return sanitize_text_field( wp_unslash( $_REQUEST['session_id'] ) ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended
|
|
}
|
|
|
|
/**
|
|
* Reads in customer ID from query parameters if specific conditions are met otherwise
|
|
* a guest ID are generated as usual.
|
|
*
|
|
* @return string
|
|
*/
|
|
public function generate_customer_id() {
|
|
$session_id = $this->get_posted_session_id();
|
|
if ( 0 !== $session_id ) {
|
|
return $session_id;
|
|
}
|
|
|
|
return parent::generate_customer_id();
|
|
}
|
|
|
|
/**
|
|
* Returns client session ID.
|
|
*
|
|
* @return string
|
|
*/
|
|
public function get_client_session_id() {
|
|
$session_id = $this->get_posted_session_id();
|
|
$session_data = 0 !== $session_id ? $this->get_session( $session_id ) : null;
|
|
|
|
if ( ! empty( $session_data ) ) {
|
|
$client_session_id = $session_data['client_session_id'];
|
|
$client_session_id_expiration = $session_data['client_session_id_expiration'];
|
|
} else {
|
|
$client_session_id = $this->get( 'client_session_id', false );
|
|
$client_session_id_expiration = absint( $this->get( 'client_session_id_expiration', 0 ) );
|
|
}
|
|
|
|
if ( false !== $client_session_id && time() < $client_session_id_expiration ) {
|
|
return $client_session_id;
|
|
}
|
|
|
|
$client_session_id = '';
|
|
|
|
return $client_session_id;
|
|
}
|
|
}
|