[\w\d=]+)', array( 'methods' => 'GET', 'callback' => array( $this, 'get_domain_check' ), 'permission_callback' => '__return_true', // public access ) ); } /** * Respond to a GET request to the domain check route, with the given key. * * @param WP_REST_Request $request * * @return WP_REST_Response */ public function get_domain_check( WP_REST_Request $request ): WP_REST_Response { $response = new Domain_Check_Response( array( 'key' => $request->get_param( 'key' ), 'ver' => filter_input( INPUT_GET, 'ver' ), // must come in as url param ) ); $response->header( 'X-As3cf-Signature', $response->hashed_signature() ); return $this->rest_ensure_response( 'get', static::name(), $response ); } /** * Get a URL to the domain check route, with the given key. * * @param string $key * * @return string */ public function get_url( string $key ): string { return rest_url( static::endpoint() . $key ); } }