oont-contents/plugins/jetpack/_inc/lib/class.core-rest-api-endpoints.php
2025-02-10 13:57:45 +01:00

4558 lines
148 KiB
PHP

<?php // phpcs:ignore WordPress.Files.FileName.InvalidClassFileName
/**
* Register WP REST API endpoints for Jetpack.
*
* @package automattic/jetpack
*/
use Automattic\Jetpack\Connection\Client;
use Automattic\Jetpack\Connection\Manager as Connection_Manager;
use Automattic\Jetpack\Connection\Rest_Authentication;
use Automattic\Jetpack\Connection\REST_Connector;
use Automattic\Jetpack\Connection\SSO;
use Automattic\Jetpack\Current_Plan as Jetpack_Plan;
use Automattic\Jetpack\Jetpack_CRM_Data;
use Automattic\Jetpack\Plugins_Installer;
use Automattic\Jetpack\Stats\Options as Stats_Options;
use Automattic\Jetpack\Status\Host;
use Automattic\Jetpack\Status\Visitor;
use Automattic\Jetpack\Waf\Brute_Force_Protection\Brute_Force_Protection_Shared_Functions;
use Automattic\Jetpack\Waf\Waf_Compatibility;
// Disable direct access.
if ( ! defined( 'ABSPATH' ) ) {
exit( 0 );
}
// Load WP_Error for error messages.
require_once ABSPATH . '/wp-includes/class-wp-error.php';
// Register endpoints when WP REST API is initialized.
add_action( 'rest_api_init', array( 'Jetpack_Core_Json_Api_Endpoints', 'register_endpoints' ) );
// Load API endpoints that are synced with WP.com
// Each of these is a class that will register its own routes on 'rest_api_init'.
require_once JETPACK__PLUGIN_DIR . '_inc/lib/core-api/load-wpcom-endpoints.php';
require_once JETPACK__PLUGIN_DIR . 'modules/subscriptions/class-settings.php';
/**
* Class Jetpack_Core_Json_Api_Endpoints
*
* @since 4.3.0
*/
class Jetpack_Core_Json_Api_Endpoints {
/**
* Roles that can access Stats once they're granted access.
*
* @var array
*/
public static $stats_roles;
/**
* Declare the Jetpack REST API endpoints.
*
* @since 4.3.0
*/
public static function register_endpoints() {
// Load API endpoint base classes.
require_once JETPACK__PLUGIN_DIR . '_inc/lib/core-api/class.jetpack-core-api-xmlrpc-consumer-endpoint.php';
// Load API endpoints.
require_once JETPACK__PLUGIN_DIR . '_inc/lib/core-api/class.jetpack-core-api-module-endpoints.php';
require_once JETPACK__PLUGIN_DIR . '_inc/lib/core-api/class.jetpack-core-api-site-endpoints.php';
require_once JETPACK__PLUGIN_DIR . '_inc/lib/core-api/class.jetpack-core-api-widgets-endpoints.php';
self::$stats_roles = array( 'administrator', 'editor', 'author', 'contributor', 'subscriber' );
$ixr_client = new Jetpack_IXR_Client( array( 'user_id' => get_current_user_id() ) );
$core_api_endpoint = new Jetpack_Core_API_Data( $ixr_client );
$module_list_endpoint = new Jetpack_Core_API_Module_List_Endpoint();
$module_data_endpoint = new Jetpack_Core_API_Module_Data_Endpoint();
$module_toggle_endpoint = new Jetpack_Core_API_Module_Toggle_Endpoint( new Jetpack_IXR_Client() );
$site_endpoint = new Jetpack_Core_API_Site_Endpoint();
$widget_endpoint = new Jetpack_Core_API_Widget_Endpoint();
/**
* TODO: Move me somewhere that makes more sense.
* Also give me permissions that aren't awful.
*/
register_rest_route(
'jetpack/v4',
'jetpack-ai-jwt',
array(
'methods' => WP_REST_Server::EDITABLE,
'callback' => __CLASS__ . '::get_openai_jwt',
'permission_callback' => function () {
return ( new Connection_Manager( 'jetpack' ) )->is_user_connected() && current_user_can( 'edit_posts' );
},
)
);
register_rest_route(
'jetpack/v4',
'plans',
array(
'methods' => WP_REST_Server::READABLE,
'callback' => __CLASS__ . '::get_plans',
'permission_callback' => __CLASS__ . '::connect_url_permission_callback',
)
);
register_rest_route(
'jetpack/v4',
'products',
array(
'methods' => WP_REST_Server::READABLE,
'callback' => __CLASS__ . '::get_products',
'permission_callback' => __CLASS__ . '::connect_url_permission_callback',
)
);
register_rest_route(
'jetpack/v4',
'marketing/survey',
array(
'methods' => WP_REST_Server::CREATABLE,
'callback' => __CLASS__ . '::submit_survey',
'permission_callback' => __CLASS__ . '::disconnect_site_permission_callback',
)
);
// Test current connection status of Jetpack.
register_rest_route(
'jetpack/v4',
'/connection/test',
array(
'methods' => WP_REST_Server::READABLE,
'callback' => __CLASS__ . '::jetpack_connection_test',
'permission_callback' => __CLASS__ . '::manage_modules_permission_check',
)
);
// Endpoint specific for privileged servers to request detailed debug information.
register_rest_route(
'jetpack/v4',
'/connection/test-wpcom/',
array(
'methods' => WP_REST_Server::READABLE,
'callback' => __CLASS__ . '::jetpack_connection_test_for_external',
'permission_callback' => __CLASS__ . '::view_jetpack_connection_test_check',
)
);
register_rest_route(
'jetpack/v4',
'/rewind',
array(
'methods' => WP_REST_Server::READABLE,
'callback' => __CLASS__ . '::get_rewind_data',
'permission_callback' => __CLASS__ . '::view_admin_page_permission_check',
)
);
register_rest_route(
'jetpack/v4',
'/scan',
array(
'methods' => WP_REST_Server::READABLE,
'callback' => __CLASS__ . '::get_scan_state',
'permission_callback' => __CLASS__ . '::view_admin_page_permission_check',
)
);
// Fetches a fresh connect URL.
register_rest_route(
'jetpack/v4',
'/connection/url',
array(
'methods' => WP_REST_Server::READABLE,
'callback' => __CLASS__ . '::build_connect_url',
'permission_callback' => __CLASS__ . '::connect_url_permission_callback',
'args' => array(
'from' => array( 'type' => 'string' ),
'redirect' => array( 'type' => 'string' ),
),
)
);
// Current user: get or set tracking settings.
register_rest_route(
'jetpack/v4',
'/tracking/settings',
array(
array(
'methods' => WP_REST_Server::READABLE,
'callback' => __CLASS__ . '::get_user_tracking_settings',
'permission_callback' => __CLASS__ . '::view_admin_page_permission_check',
),
array(
'methods' => WP_REST_Server::EDITABLE,
'callback' => __CLASS__ . '::update_user_tracking_settings',
'permission_callback' => __CLASS__ . '::view_admin_page_permission_check',
'args' => array(
'tracks_opt_out' => array( 'type' => 'boolean' ),
),
),
)
);
// Disconnect/unlink user from WordPress.com servers.
register_rest_route(
'jetpack/v4',
'/connection/user',
array(
'methods' => WP_REST_Server::EDITABLE,
'callback' => __CLASS__ . '::unlink_user',
'permission_callback' => __CLASS__ . '::unlink_user_permission_callback',
)
);
// Get current site data.
register_rest_route(
'jetpack/v4',
'/site',
array(
'methods' => WP_REST_Server::READABLE,
'callback' => __CLASS__ . '::get_site_data',
'permission_callback' => __CLASS__ . '::view_admin_page_permission_check',
)
);
// Get current site data.
register_rest_route(
'jetpack/v4',
'/site/features',
array(
'methods' => WP_REST_Server::READABLE,
'callback' => array( $site_endpoint, 'get_features' ),
'permission_callback' => array( $site_endpoint, 'can_request' ),
)
);
register_rest_route(
'jetpack/v4',
'/site/products',
array(
'methods' => WP_REST_Server::READABLE,
'callback' => array( $site_endpoint, 'get_products' ),
'permission_callback' => array( $site_endpoint, 'can_request' ),
)
);
// Get current site purchases.
register_rest_route(
'jetpack/v4',
'/site/purchases',
array(
'methods' => WP_REST_Server::READABLE,
'callback' => array( $site_endpoint, 'get_purchases' ),
'permission_callback' => array( $site_endpoint, 'can_request' ),
)
);
// Get current site benefits.
register_rest_route(
'jetpack/v4',
'/site/benefits',
array(
'methods' => WP_REST_Server::READABLE,
'callback' => array( $site_endpoint, 'get_benefits' ),
'permission_callback' => array( $site_endpoint, 'can_request' ),
)
);
// Get Activity Log data for this site.
register_rest_route(
'jetpack/v4',
'/site/activity',
array(
'methods' => WP_REST_Server::READABLE,
'callback' => __CLASS__ . '::get_site_activity',
'permission_callback' => __CLASS__ . '::manage_modules_permission_check',
)
);
// Return all modules.
register_rest_route(
'jetpack/v4',
'/module/all',
array(
'methods' => WP_REST_Server::READABLE,
'callback' => array( $module_list_endpoint, 'process' ),
'permission_callback' => array( $module_list_endpoint, 'can_request' ),
)
);
// Activate many modules.
register_rest_route(
'jetpack/v4',
'/module/all/active',
array(
'methods' => WP_REST_Server::EDITABLE,
'callback' => array( $module_list_endpoint, 'process' ),
'permission_callback' => array( $module_list_endpoint, 'can_request' ),
'args' => array(
'modules' => array(
'default' => '',
'type' => 'array',
'items' => array(
'type' => 'string',
),
'required' => true,
'validate_callback' => __CLASS__ . '::validate_module_list',
),
'active' => array(
'default' => true,
'type' => 'boolean',
'required' => false,
'validate_callback' => __CLASS__ . '::validate_boolean',
),
),
)
);
// Return a single module and update it when needed.
register_rest_route(
'jetpack/v4',
'/module/(?P<slug>[a-z\-]+)',
array(
'methods' => WP_REST_Server::READABLE,
'callback' => array( $core_api_endpoint, 'process' ),
'permission_callback' => array( $core_api_endpoint, 'can_request' ),
)
);
// Activate and deactivate a module.
register_rest_route(
'jetpack/v4',
'/module/(?P<slug>[a-z\-]+)/active',
array(
'methods' => WP_REST_Server::EDITABLE,
'callback' => array( $module_toggle_endpoint, 'process' ),
'permission_callback' => array( $module_toggle_endpoint, 'can_request' ),
'args' => array(
'active' => array(
'default' => true,
'type' => 'boolean',
'required' => true,
'validate_callback' => __CLASS__ . '::validate_boolean',
),
),
)
);
// Update a module.
register_rest_route(
'jetpack/v4',
'/module/(?P<slug>[a-z\-]+)',
array(
'methods' => WP_REST_Server::EDITABLE,
'callback' => array( $core_api_endpoint, 'process' ),
'permission_callback' => array( $core_api_endpoint, 'can_request' ),
'args' => self::get_updateable_parameters( 'any' ),
)
);
// Get data for a specific module, i.e. Protect block count, WPCOM stats,
// Akismet spam count, etc.
register_rest_route(
'jetpack/v4',
'/module/(?P<slug>[a-z\-]+)/data',
array(
'methods' => WP_REST_Server::READABLE,
'callback' => array( $module_data_endpoint, 'process' ),
'permission_callback' => array( $module_data_endpoint, 'can_request' ),
'args' => array(
'range' => array(
'default' => 'day',
'type' => 'string',
'required' => false,
'validate_callback' => __CLASS__ . '::validate_string',
),
),
)
);
// Check if the API key for a specific service is valid or not.
register_rest_route(
'jetpack/v4',
'/module/(?P<service>[a-z\-]+)/key/check',
array(
'methods' => WP_REST_Server::READABLE,
'callback' => array( $module_data_endpoint, 'key_check' ),
'permission_callback' => __CLASS__ . '::update_settings_permission_check',
'sanitize_callback' => 'sanitize_text_field',
)
);
register_rest_route(
'jetpack/v4',
'/module/(?P<service>[a-z\-]+)/key/check',
array(
'methods' => WP_REST_Server::EDITABLE,
'callback' => array( $module_data_endpoint, 'key_check' ),
'permission_callback' => __CLASS__ . '::update_settings_permission_check',
'sanitize_callback' => 'sanitize_text_field',
'args' => array(
'api_key' => array(
'default' => '',
'type' => 'string',
'validate_callback' => __CLASS__ . '::validate_alphanum',
),
),
)
);
// Update any Jetpack module option or setting.
register_rest_route(
'jetpack/v4',
'/settings',
array(
'methods' => WP_REST_Server::EDITABLE,
'callback' => array( $core_api_endpoint, 'process' ),
'permission_callback' => array( $core_api_endpoint, 'can_request' ),
'args' => self::get_updateable_parameters( 'any' ),
)
);
// Update a module.
register_rest_route(
'jetpack/v4',
'/settings/(?P<slug>[a-z\-]+)',
array(
'methods' => WP_REST_Server::EDITABLE,
'callback' => array( $core_api_endpoint, 'process' ),
'permission_callback' => array( $core_api_endpoint, 'can_request' ),
'args' => self::get_updateable_parameters(),
)
);
// Return all module settings.
register_rest_route(
'jetpack/v4',
'/settings/',
array(
'methods' => WP_REST_Server::READABLE,
'callback' => array( $core_api_endpoint, 'process' ),
'permission_callback' => array( $core_api_endpoint, 'can_request' ),
)
);
// Reset all Jetpack options.
register_rest_route(
'jetpack/v4',
'/options/(?P<options>[a-z\-]+)',
array(
'methods' => WP_REST_Server::EDITABLE,
'callback' => __CLASS__ . '::reset_jetpack_options',
'permission_callback' => __CLASS__ . '::manage_modules_permission_check',
)
);
// Updates: get number of plugin updates available.
register_rest_route(
'jetpack/v4',
'/updates/plugins',
array(
'methods' => WP_REST_Server::READABLE,
'callback' => __CLASS__ . '::get_plugin_update_count',
'permission_callback' => __CLASS__ . '::view_admin_page_permission_check',
)
);
// Dismiss Jetpack Notices.
register_rest_route(
'jetpack/v4',
'/notice/(?P<notice>[a-z\-_]+)',
array(
'methods' => WP_REST_Server::EDITABLE,
'callback' => __CLASS__ . '::dismiss_notice',
'permission_callback' => __CLASS__ . '::view_admin_page_permission_check',
)
);
/*
* Plugins: manage plugins on your site.
*
* @since 8.9.0
*
* @to-do: deprecate and switch to /wp/v2/plugins when WordPress 5.5 is the minimum required version.
* Noting that the `source` parameter is Jetpack-specific (not implemented in Core).
*/
register_rest_route(
'jetpack/v4',
'/plugins',
array(
array(
'methods' => WP_REST_Server::READABLE,
'callback' => __CLASS__ . '::get_plugins',
'permission_callback' => __CLASS__ . '::activate_plugins_permission_check',
),
array(
'methods' => WP_REST_Server::CREATABLE,
'callback' => __CLASS__ . '::install_plugin',
'permission_callback' => __CLASS__ . '::activate_plugins_permission_check',
'args' => array(
'slug' => array(
'type' => 'string',
'required' => true,
'description' => __( 'WordPress.org plugin directory slug.', 'jetpack' ),
'pattern' => '[\w\-]+',
),
'status' => array(
'description' => __( 'The plugin activation status.', 'jetpack' ),
'type' => 'string',
'enum' => is_multisite() ? array( 'inactive', 'active', 'network-active' ) : array( 'inactive', 'active' ),
'default' => 'inactive',
),
'source' => array(
'required' => false,
'type' => 'string',
'validate_callback' => __CLASS__ . '::validate_string',
),
),
),
)
);
/*
* Plugins: activate a specific plugin.
*
* @since 8.9.0
*
* @to-do: deprecate and switch to /wp/v2/plugins when WordPress 5.5 is the minimum required version.
* Noting that the `source` parameter is Jetpack-specific (not implemented in Core).
*/
register_rest_route(
'jetpack/v4',
'/plugins/(?P<plugin>[^.\/]+(?:\/[^.\/]+)?)',
array(
'methods' => WP_REST_Server::EDITABLE,
'callback' => __CLASS__ . '::activate_plugin',
'permission_callback' => __CLASS__ . '::activate_plugins_permission_check',
'args' => array(
'status' => array(
'required' => true,
'type' => 'string',
'validate_callback' => __CLASS__ . '::validate_activate_plugin',
),
'source' => array(
'required' => false,
'type' => 'string',
'validate_callback' => __CLASS__ . '::validate_string',
),
),
)
);
// Plugins: check if the plugin is active.
register_rest_route(
'jetpack/v4',
'/plugin/(?P<plugin>[a-z\/\.\-_]+)',
array(
'methods' => WP_REST_Server::READABLE,
'callback' => __CLASS__ . '::get_plugin',
'permission_callback' => __CLASS__ . '::activate_plugins_permission_check',
)
);
// Widgets: get information about a widget that supports it.
register_rest_route(
'jetpack/v4',
'/widgets/(?P<id>[0-9a-z\-_]+)',
array(
'methods' => WP_REST_Server::READABLE,
'callback' => array( $widget_endpoint, 'process' ),
'permission_callback' => array( $widget_endpoint, 'can_request' ),
)
);
// Site Verify: check if the site is verified, and a get verification token if not.
register_rest_route(
'jetpack/v4',
'/verify-site/(?P<service>[a-z\-_]+)',
array(
'methods' => WP_REST_Server::READABLE,
'callback' => __CLASS__ . '::is_site_verified_and_token',
'permission_callback' => __CLASS__ . '::update_settings_permission_check',
)
);
register_rest_route(
'jetpack/v4',
'/verify-site/(?P<service>[a-z\-_]+)/(?<keyring_id>[0-9]+)',
array(
'methods' => WP_REST_Server::READABLE,
'callback' => __CLASS__ . '::is_site_verified_and_token',
'permission_callback' => __CLASS__ . '::update_settings_permission_check',
)
);
// Site Verify: tell a service to verify the site.
register_rest_route(
'jetpack/v4',
'/verify-site/(?P<service>[a-z\-_]+)',
array(
'methods' => WP_REST_Server::EDITABLE,
'callback' => __CLASS__ . '::verify_site',
'permission_callback' => __CLASS__ . '::update_settings_permission_check',
'args' => array(
'keyring_id' => array(
'required' => true,
'type' => 'integer',
'validate_callback' => __CLASS__ . '::validate_posint',
),
),
)
);
register_rest_route(
'jetpack/v4',
'/recommendations/data',
array(
array(
'methods' => WP_REST_Server::READABLE,
'callback' => __CLASS__ . '::get_recommendations_data',
'permission_callback' => __CLASS__ . '::update_settings_permission_check',
),
array(
'methods' => WP_REST_Server::EDITABLE,
'callback' => __CLASS__ . '::update_recommendations_data',
'permission_callback' => __CLASS__ . '::update_settings_permission_check',
'args' => array(
'data' => array(
'required' => true,
'type' => 'object',
'validate_callback' => __CLASS__ . '::validate_recommendations_data',
),
),
),
)
);
register_rest_route(
'jetpack/v4',
'/recommendations/step',
array(
array(
'methods' => WP_REST_Server::READABLE,
'callback' => __CLASS__ . '::get_recommendations_step',
'permission_callback' => __CLASS__ . '::update_settings_permission_check',
),
array(
'methods' => WP_REST_Server::EDITABLE,
'callback' => __CLASS__ . '::update_recommendations_step',
'permission_callback' => __CLASS__ . '::update_settings_permission_check',
'args' => array(
'step' => array(
'required' => true,
'type' => 'string',
'validate_callback' => __CLASS__ . '::validate_string',
),
),
),
)
);
register_rest_route(
'jetpack/v4',
'/recommendations/product-suggestions',
array(
array(
'methods' => WP_REST_Server::READABLE,
'callback' => __CLASS__ . '::get_recommendations_product_suggestions',
'permission_callback' => __CLASS__ . '::view_admin_page_permission_check',
),
)
);
register_rest_route(
'jetpack/v4',
'/recommendations/upsell',
array(
array(
'methods' => WP_REST_Server::READABLE,
'callback' => __CLASS__ . '::get_recommendations_upsell',
'permission_callback' => __CLASS__ . '::view_admin_page_permission_check',
),
)
);
register_rest_route(
'jetpack/v4',
'/recommendations/conditional',
array(
array(
'methods' => WP_REST_Server::READABLE,
'callback' => __CLASS__ . '::get_conditional_recommendations',
'permission_callback' => __CLASS__ . '::view_admin_page_permission_check',
),
)
);
// Get site discount.
register_rest_route(
'jetpack/v4',
'/site/discount',
array(
'methods' => WP_REST_Server::READABLE,
'callback' => __CLASS__ . '::get_site_discount',
'permission_callback' => __CLASS__ . '::view_admin_page_permission_check',
)
);
/*
* Manage the Jetpack CRM plugin's integration with Jetpack contact forms.
*/
register_rest_route(
'jetpack/v4',
'jetpack_crm',
array(
array(
'methods' => WP_REST_Server::READABLE,
'callback' => __CLASS__ . '::get_jetpack_crm_data',
'permission_callback' => __CLASS__ . '::jetpack_crm_data_permission_check',
),
array(
'methods' => WP_REST_Server::EDITABLE,
'callback' => __CLASS__ . '::activate_crm_jetpack_forms_extension',
'permission_callback' => __CLASS__ . '::activate_crm_extensions_permission_check',
'args' => array(
'extension' => array(
'required' => true,
'type' => 'text',
),
),
),
)
);
register_rest_route(
'jetpack/v4',
'purchase-token',
array(
array(
'methods' => WP_REST_Server::READABLE,
'callback' => __CLASS__ . '::get_purchase_token',
'permission_callback' => __CLASS__ . '::purchase_token_permission_check',
),
array(
'methods' => WP_REST_Server::CREATABLE,
'callback' => __CLASS__ . '::delete_purchase_token',
'permission_callback' => __CLASS__ . '::purchase_token_permission_check',
),
)
);
/*
* Set the Jetpack Option `has_see_wc_connection_modal` to true
*/
register_rest_route(
'jetpack/v4',
'seen-wc-connection-modal',
array(
'methods' => WP_REST_Server::EDITABLE,
'callback' => __CLASS__ . '::set_has_seen_wc_connection_modal',
'permission_callback' => __CLASS__ . '::manage_modules_permission_check',
)
);
// Get Jetpack introduction offers
register_rest_route(
'jetpack/v4',
'/intro-offers',
array(
'methods' => WP_REST_Server::READABLE,
'callback' => __CLASS__ . '::get_intro_offers',
'permission_callback' => __CLASS__ . '::view_admin_page_permission_check',
)
);
// Save subscriber token and redirect
register_rest_route(
'jetpack/v4',
'/subscribers/auth',
array(
'methods' => WP_REST_Server::READABLE,
'callback' => __CLASS__ . '::set_subscriber_cookie_and_redirect',
'permission_callback' => '__return_true',
'args' => array(
'redirect_url' => array(
'required' => true,
'description' => __( 'The URL to redirect to.', 'jetpack' ),
'validate_callback' => 'wp_http_validate_url',
'sanitize_callback' => 'sanitize_url',
'type' => 'string',
'format' => 'uri',
),
),
)
);
/**
* Get the list of available Jetpack features.
*
* @since 13.9
*/
register_rest_route(
'jetpack/v4',
'/features/available',
array(
'methods' => WP_REST_Server::READABLE,
'callback' => array( static::class, 'get_features_available' ),
'permission_callback' => array( static::class, 'get_features_permission_check' ),
)
);
/**
* Get the list of enabled Jetpack features.
*
* @since 13.9
*/
register_rest_route(
'jetpack/v4',
'/features/enabled',
array(
'methods' => WP_REST_Server::READABLE,
'callback' => array( static::class, 'get_features_enabled' ),
'permission_callback' => array( static::class, 'get_features_permission_check' ),
)
);
}
/**
* Ask WPCOM for a JWT token to use for OpenAI conversations.
* TODO: Clean me up. This is ugly hack code.
*/
public static function get_openai_jwt() {
$blog_id = \Jetpack_Options::get_option( 'id' );
$response = \Automattic\Jetpack\Connection\Client::wpcom_json_api_request_as_user(
"/sites/$blog_id/jetpack-openai-query/jwt",
'2',
array(
'method' => 'POST',
'headers' => array( 'Content-Type' => 'application/json; charset=utf-8' ),
),
wp_json_encode( array() ),
'wpcom'
);
if ( is_wp_error( $response ) ) {
return $response;
}
$json = json_decode( wp_remote_retrieve_body( $response ) );
if ( ! isset( $json->token ) ) {
return new WP_Error( 'no-token', 'No token returned from WPCOM' );
}
return array(
'token' => $json->token,
'blog_id' => $blog_id,
);
}
/**
* Set subscriber cookie and redirect
*
* @param \WP_Rest_Request $request The URL to redirect to.
*
* @return WP_Error|WP_REST_Response
*/
public static function set_subscriber_cookie_and_redirect( $request ) {
require_once JETPACK__PLUGIN_DIR . 'extensions/blocks/premium-content/_inc/subscription-service/include.php';
$subscription_service = \Automattic\Jetpack\Extensions\Premium_Content\subscription_service();
$token = $subscription_service->get_and_set_token_from_request();
$payload = $subscription_service->decode_token( $token );
$is_valid_token = ! empty( $payload );
if ( $is_valid_token ) {
return new WP_REST_Response( null, 302, array( 'location' => $request['redirect_url'] ) );
}
return new WP_Error( 'invalid-token', 'Invalid Token' );
}
/**
* Get the data for the recommendations
*
* @return array Recommendations data
*/
public static function get_recommendations_data() {
return Jetpack_Recommendations::get_recommendations_data();
}
/**
* Update the data for the recommendations
*
* @param WP_REST_Request $request The request.
*
* @return bool true
*/
public static function update_recommendations_data( $request ) {
$data = $request['data'];
Jetpack_Recommendations::update_recommendations_data( $data );
return true;
}
/**
* Get the data for the recommendations
*
* @return array Recommendations data
*/
public static function get_recommendations_step() {
return Jetpack_Recommendations::get_recommendations_step();
}
/**
* Update the step for the recommendations
*
* @param WP_REST_Request $request The request.
*
* @return bool true
*/
public static function update_recommendations_step( $request ) {
$step = $request['step'];
Jetpack_Recommendations::update_recommendations_step( $step );
return true;
}
/**
* Get product suggestions for the recommendations
*
* @return string|WP_Error The response from the wpcom product suggestions endpoint as a JSON object.
*/
public static function get_recommendations_product_suggestions() {
$blog_id = Jetpack_Options::get_option( 'id' );
if ( ! $blog_id ) {
return new WP_Error( 'site_not_registered', esc_html__( 'Site not registered.', 'jetpack' ) );
}
$user_connected = ( new Connection_Manager( 'jetpack' ) )->is_user_connected( get_current_user_id() );
if ( ! $user_connected ) {
return wp_json_encode( array() );
}
$request_path = sprintf( '/sites/%s/jetpack-recommendations/product-suggestions?locale=' . get_user_locale(), $blog_id );
$wpcom_request = Client::wpcom_json_api_request_as_user(
$request_path,
'2',
array(
'method' => 'GET',
'headers' => array(
'X-Forwarded-For' => ( new Visitor() )->get_ip( true ),
),
)
);
$response_code = wp_remote_retrieve_response_code( $wpcom_request );
if ( 200 === $response_code ) {
return json_decode( wp_remote_retrieve_body( $wpcom_request ) );
} else {
return new WP_Error(
'failed_to_fetch_data',
esc_html__( 'Unable to fetch the requested data.', 'jetpack' ),
array( 'status' => $response_code )
);
}
}
/**
* Get the upsell for the recommendations
*
* @return string The response from the wpcom upsell endpoint as a JSON object
*/
public static function get_recommendations_upsell() {
$blog_id = Jetpack_Options::get_option( 'id' );
if ( ! $blog_id ) {
return new WP_Error( 'site_not_registered', esc_html__( 'Site not registered.', 'jetpack' ) );
}
$user_connected = ( new Connection_Manager( 'jetpack' ) )->is_user_connected( get_current_user_id() );
if ( ! $user_connected ) {
$response = array(
'hide_upsell' => true,
);
return $response;
}
$request_path = sprintf( '/sites/%s/jetpack-recommendations/upsell?locale=' . get_user_locale(), $blog_id );
$wpcom_request = Client::wpcom_json_api_request_as_user(
$request_path,
'2',
array(
'method' => 'GET',
'headers' => array(
'X-Forwarded-For' => ( new Visitor() )->get_ip( true ),
),
)
);
$response_code = wp_remote_retrieve_response_code( $wpcom_request );
if ( 200 === $response_code ) {
return json_decode( wp_remote_retrieve_body( $wpcom_request ) );
} else {
return new WP_Error(
'failed_to_fetch_data',
esc_html__( 'Unable to fetch the requested data.', 'jetpack' ),
array( 'status' => $response_code )
);
}
}
/**
* Get conditional recommendations data.
*
* @return array Conditional recommendations data.
*/
public static function get_conditional_recommendations() {
return Jetpack_Recommendations::get_conditional_recommendations();
}
/**
* Validate the recommendations data
*
* @param array $value Value to check received by request.
* @param WP_REST_Request $request The request sent to the WP REST API.
* @param string $param Name of the parameter passed to endpoint holding $value.
*
* @return bool|WP_Error
*/
public static function validate_recommendations_data( $value, $request, $param ) {
if ( ! is_array( $value ) ) {
/* translators: Name of a parameter that must be an object */
return new WP_Error( 'invalid_param', sprintf( esc_html__( '%s must be an object.', 'jetpack' ), $param ) );
}
foreach ( $value as $answer ) {
if ( is_array( $answer ) ) {
$validate = self::validate_array_of_strings( $answer, $request, $param );
} elseif ( is_string( $answer ) ) {
$validate = self::validate_string( $answer, $request, $param );
} elseif ( $answer === null ) {
$validate = true;
} else {
$validate = self::validate_boolean( $answer, $request, $param );
}
if ( is_wp_error( $validate ) ) {
return $validate;
}
}
return true;
}
/**
* Return a purchase token used for site-connected (non user-authenticated) checkout.
*
* @return string|WP_Error The current purchase token or WP_Error with error details.
*/
public static function get_purchase_token() {
$blog_id = Jetpack_Options::get_option( 'id' );
if ( ! $blog_id ) {
return new WP_Error( 'site_not_registered', esc_html__( 'Site not registered.', 'jetpack' ) );
}
return Jetpack_Options::get_option( 'purchase_token', '' );
}
/**
* Delete the current purchase token.
*
* @return boolean|WP_Error Whether the token was deleted or WP_Error with error details.
*/
public static function delete_purchase_token() {
$blog_id = Jetpack_Options::get_option( 'id' );
if ( ! $blog_id ) {
return new WP_Error( 'site_not_registered', esc_html__( 'Site not registered.', 'jetpack' ) );
}
return Jetpack_Options::delete_option( 'purchase_token' );
}
/**
* Get list of Jetpack Plans.
*
* @param WP_REST_Request $request The request.
*/
public static function get_plans( $request ) {
$request = Client::wpcom_json_api_request_as_user(
'/plans?_locale=' . get_user_locale(),
'2',
array(
'method' => 'GET',
'headers' => array(
'X-Forwarded-For' => ( new Visitor() )->get_ip( true ),
),
)
);
$body = json_decode( wp_remote_retrieve_body( $request ) );
if ( 200 === wp_remote_retrieve_response_code( $request ) ) {
$data = $body;
} else {
// something went wrong so we'll just return the response without caching.
return $body;
}
return $data;
}
/**
* Gets the WP.com products that are in use on wpcom.
* Similar to the WP.com plans that we currently in user on WPCOM.
*
* @param WP_REST_Request $request The request.
*
* @return string|WP_Error A JSON object of wpcom products if the request was successful, or a WP_Error otherwise.
*/
public static function get_products( $request ) { // phpcs:ignore VariableAnalysis.CodeAnalysis.VariableAnalysis.UnusedVariable
$wpcom_request = Client::wpcom_json_api_request_as_user(
'/products?_locale=' . get_user_locale() . '&type=jetpack',
'2',
array(
'method' => 'GET',
'headers' => array(
'X-Forwarded-For' => ( new Visitor() )->get_ip( true ),
),
)
);
$response_code = wp_remote_retrieve_response_code( $wpcom_request );
if ( 200 === $response_code ) {
return json_decode( wp_remote_retrieve_body( $wpcom_request ) );
} else {
// Something went wrong so we'll just return the response without caching.
return new WP_Error(
'failed_to_fetch_data',
esc_html__( 'Unable to fetch the requested data.', 'jetpack' ),
array( 'status' => $response_code )
);
}
}
/**
* Send Survey details to WordPress.com.
*
* @param WP_REST_Request $request The request.
*/
public static function submit_survey( $request ) {
$wpcom_request = Client::wpcom_json_api_request_as_user(
'/marketing/survey',
'v2',
array(
'method' => 'POST',
'headers' => array(
'Content-Type' => 'application/json',
'X-Forwarded-For' => ( new Visitor() )->get_ip( true ),
),
),
$request->get_json_params()
);
$wpcom_request_body = json_decode( wp_remote_retrieve_body( $wpcom_request ) );
if ( 200 === wp_remote_retrieve_response_code( $wpcom_request ) ) {
$data = $wpcom_request_body;
} else {
// something went wrong so we'll just return the response without caching.
return $wpcom_request_body;
}
return $data;
}
/**
* Checks if this site has been verified using a service - only 'google' supported at present - and a specfic
* keyring to use to get the token if it is not
*
* Returns 'verified' = true/false, and a token if 'verified' is false and site is ready for verification
*
* @since 6.6.0
*
* @param WP_REST_Request $request The request sent to the WP REST API.
*
* @return array|WP_Error
*/
public static function is_site_verified_and_token( $request ) {
/**
* Return an error if the site uses a Maintenance / Coming Soon plugin
* and if the plugin is configured to make the site private.
*
* We currently handle the following plugins:
* - https://github.com/mojoness/mojo-marketplace-wp-plugin (used by bluehost)
* - https://wordpress.org/plugins/mojo-under-construction
* - https://wordpress.org/plugins/under-construction-page
* - https://wordpress.org/plugins/ultimate-under-construction
* - https://wordpress.org/plugins/coming-soon
*
* You can handle this in your own plugin thanks to the `jetpack_is_under_construction_plugin` filter.
* If the filter returns true, we will consider the site as under construction.
*/
$mm_coming_soon = get_option( 'mm_coming_soon', null );
$under_construction_activation_status = get_option( 'underConstructionActivationStatus', null );
$ucp_options = get_option( 'ucp_options', array() );
$uuc_settings = get_option( 'uuc_settings', array() );
$csp4 = get_option( 'seed_csp4_settings_content', array() );
if (
( Jetpack::is_plugin_active( 'mojo-marketplace-wp-plugin/mojo-marketplace.php' ) && 'true' === $mm_coming_soon )
|| Jetpack::is_plugin_active( 'mojo-under-construction/mojo-contruction.php' ) && 1 == $under_construction_activation_status // phpcs:ignore Universal.Operators.StrictComparisons.LooseEqual
|| ( Jetpack::is_plugin_active( 'under-construction-page/under-construction.php' ) && isset( $ucp_options['status'] ) && 1 == $ucp_options['status'] ) // phpcs:ignore Universal.Operators.StrictComparisons.LooseEqual
|| ( Jetpack::is_plugin_active( 'ultimate-under-construction/ultimate-under-construction.php' ) && isset( $uuc_settings['enable'] ) && 1 == $uuc_settings['enable'] ) // phpcs:ignore Universal.Operators.StrictComparisons.LooseEqual
|| ( Jetpack::is_plugin_active( 'coming-soon/coming-soon.php' ) && isset( $csp4['status'] ) && ( 1 == $csp4['status'] || 2 == $csp4['status'] ) ) // phpcs:ignore Universal.Operators.StrictComparisons.LooseEqual
/**
* Allow plugins to mark a site as "under construction".
*
* @since 6.7.0
*
* @param false bool Is the site under construction? Default to false.
*/
|| true === apply_filters( 'jetpack_is_under_construction_plugin', false )
) {
return new WP_Error( 'forbidden', __( 'Site is under construction and cannot be verified', 'jetpack' ) );
}
$xml = new Jetpack_IXR_Client(
array(
'user_id' => get_current_user_id(),
)
);
$args = array(
'user_id' => get_current_user_id(),
'service' => $request['service'],
);
if ( isset( $request['keyring_id'] ) ) {
$args['keyring_id'] = $request['keyring_id'];
}
$xml->query( 'jetpack.isSiteVerified', $args );
if ( $xml->isError() ) {
return new WP_Error( 'error_checking_if_site_verified_google', sprintf( '%s: %s', $xml->getErrorCode(), $xml->getErrorMessage() ) );
} else {
return $xml->getResponse();
}
}
/**
* Verify site with external service.
*
* @param WP_REST_Request $request The request.
*/
public static function verify_site( $request ) {
$xml = new Jetpack_IXR_Client(
array(
'user_id' => get_current_user_id(),
)
);
$params = $request->get_json_params();
$xml->query(
'jetpack.verifySite',
array(
'user_id' => get_current_user_id(),
'service' => $request['service'],
'keyring_id' => $params['keyring_id'],
)
);
if ( $xml->isError() ) {
return new WP_Error( 'error_verifying_site_google', sprintf( '%s: %s', $xml->getErrorCode(), $xml->getErrorMessage() ) );
} else {
$response = $xml->getResponse();
if ( ! empty( $response['errors'] ) ) {
$error = new WP_Error();
$error->errors = $response['errors'];
return $error;
}
return $response;
}
}
/**
* Handles dismissing of Jetpack Notices
*
* @since 4.3.0
*
* @param WP_REST_Request $request The request sent to the WP REST API.
*
* @return array|WP_Error
*/
public static function dismiss_notice( $request ) {
$notice = $request['notice'];
if ( ! isset( $request['dismissed'] ) || true !== $request['dismissed'] ) {
return new WP_Error( 'invalid_param', esc_html__( 'Invalid parameter "dismissed".', 'jetpack' ), array( 'status' => 404 ) );
}
if ( isset( $notice ) && ! empty( $notice ) ) {
switch ( $notice ) {
case 'feedback_dash_request':
case 'welcome':
$notices = get_option( 'jetpack_dismissed_notices', array() );
$notices[ $notice ] = true;
update_option( 'jetpack_dismissed_notices', $notices );
return rest_ensure_response( get_option( 'jetpack_dismissed_notices', array() ) );
default:
return new WP_Error( 'invalid_param', esc_html__( 'Invalid parameter "notice".', 'jetpack' ), array( 'status' => 404 ) );
}
}
return new WP_Error( 'required_param', esc_html__( 'Missing parameter "notice".', 'jetpack' ), array( 'status' => 404 ) );
}
/**
* Verify that the user can disconnect the site.
*
* @since 4.3.0
*
* @return bool|WP_Error True if user is able to disconnect the site.
*/
public static function disconnect_site_permission_callback() {
if ( current_user_can( 'jetpack_disconnect' ) ) {
return true;
}
return new WP_Error(
'invalid_user_permission_jetpack_disconnect',
REST_Connector::get_user_permissions_error_msg(),
array( 'status' => rest_authorization_required_code() )
);
}
/**
* Verify that the user can get a connect/link URL
*
* @since 4.3.0
*
* @return bool|WP_Error True if user is able to disconnect the site.
*/
public static function connect_url_permission_callback() {
if ( current_user_can( 'jetpack_connect_user' ) ) {
return true;
}
return new WP_Error(
'invalid_user_permission_jetpack_connect',
REST_Connector::get_user_permissions_error_msg(),
array( 'status' => rest_authorization_required_code() )
);
}
/**
* Verify that a user can use the /connection/user endpoint. Has to be a registered user and be currently linked.
*
* @since 4.3.0
*
* @uses Automattic\Jetpack\Connection\Manager::is_user_connected();)
*
* @return bool|WP_Error True if user is able to unlink.
*/
public static function unlink_user_permission_callback() {
if ( current_user_can( 'jetpack_connect_user' ) && ( new Connection_Manager( 'jetpack' ) )->is_user_connected( get_current_user_id() ) ) {
return true;
}
return new WP_Error(
'invalid_user_permission_unlink_user',
REST_Connector::get_user_permissions_error_msg(),
array( 'status' => rest_authorization_required_code() )
);
}
/**
* Verify that user can manage Jetpack modules.
*
* @since 4.3.0
*
* @return bool Whether user has the capability 'jetpack_manage_modules'.
*/
public static function manage_modules_permission_check() {
if ( current_user_can( 'jetpack_manage_modules' ) ) {
return true;
}
return new WP_Error(
'invalid_user_permission_manage_modules',
REST_Connector::get_user_permissions_error_msg(),
array( 'status' => rest_authorization_required_code() )
);
}
/**
* Verify that user can update Jetpack modules.
*
* @since 4.3.0
*
* @return bool Whether user has the capability 'jetpack_configure_modules'.
*/
public static function configure_modules_permission_check() {
if ( current_user_can( 'jetpack_configure_modules' ) ) {
return true;
}
return new WP_Error(
'invalid_user_permission_configure_modules',
REST_Connector::get_user_permissions_error_msg(),
array( 'status' => rest_authorization_required_code() )
);
}
/**
* Verify that user can view Jetpack admin page.
*
* @since 4.3.0
*
* @return bool Whether user has the capability 'jetpack_admin_page'.
*/
public static function view_admin_page_permission_check() {
if ( current_user_can( 'jetpack_admin_page' ) ) {
return true;
}
return new WP_Error(
'invalid_user_permission_view_admin',
REST_Connector::get_user_permissions_error_msg(),
array( 'status' => rest_authorization_required_code() )
);
}
/**
* Verify that user can update Jetpack general settings.
*
* @since 4.3.0
*
* @return bool Whether user has the capability 'update_settings_permission_check'.
*/
public static function update_settings_permission_check() {
if ( current_user_can( 'jetpack_configure_modules' ) ) {
return true;
}
return new WP_Error(
'invalid_user_permission_manage_settings',
REST_Connector::get_user_permissions_error_msg(),
array( 'status' => rest_authorization_required_code() )
);
}
/**
* Verify that user can view Jetpack admin page and can activate plugins.
*
* @since 4.3.0
*
* @return bool Whether user has the capability 'jetpack_admin_page' and 'activate_plugins'.
*/
public static function activate_plugins_permission_check() {
if ( current_user_can( 'jetpack_admin_page' ) && current_user_can( 'activate_plugins' ) ) {
return true;
}
return new WP_Error(
'invalid_user_permission_activate_plugins',
REST_Connector::get_user_permissions_error_msg(),
array( 'status' => rest_authorization_required_code() )
);
}
/**
* Verify that user can edit other's posts (Editors and Administrators).
*
* @return bool Whether user has the capability 'edit_others_posts'.
*/
public static function edit_others_posts_check() {
if ( current_user_can( 'edit_others_posts' ) ) {
return true;
}
return new WP_Error(
'invalid_user_permission_edit_others_posts',
REST_Connector::get_user_permissions_error_msg(),
array( 'status' => rest_authorization_required_code() )
);
}
/**
* Verify that site can view and delete the site's purchase token.
*
* @return bool Whether site has level-site auth or user has the capability 'manage_options'.
*/
public static function purchase_token_permission_check() {
if ( Rest_Authentication::is_signed_with_blog_token() ) {
return true;
}
if ( current_user_can( 'manage_options' ) ) {
return true;
}
return new WP_Error(
'invalid_permission_manage_purchase_token',
REST_Connector::get_user_permissions_error_msg(),
array( 'status' => rest_authorization_required_code() )
);
}
/**
* Test connection status for this Jetpack site.
*
* @since 6.8.0
*
* @return array|WP_Error WP_Error returned if connection test does not succeed.
*/
public static function jetpack_connection_test() {
require_once JETPACK__PLUGIN_DIR . '_inc/lib/debugger.php';
$cxntests = new Jetpack_Cxn_Tests();
if ( $cxntests->pass() ) {
return rest_ensure_response(
array(
'code' => 'success',
'message' => __( 'All connection tests passed.', 'jetpack' ),
)
);
} else {
return $cxntests->output_fails_as_wp_error();
}
}
/**
* Test connection permission check method.
*
* @since 7.1.0
*
* @return bool
*/
public static function view_jetpack_connection_test_check() {
// phpcs:disable WordPress.Security.NonceVerification.Recommended -- This is verifying the trusted caller via a shared private key and timestamp.
if ( ! isset( $_GET['signature'] ) || ! isset( $_GET['timestamp'] ) || ! isset( $_GET['url'] ) ) {
return false;
}
$signature = base64_decode( wp_unslash( $_GET['signature'] ) ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode, WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
$signature_data = wp_json_encode(
array(
'rest_route' => isset( $_GET['rest_route'] ) ? filter_var( wp_unslash( $_GET['rest_route'] ) ) : null,
'timestamp' => (int) $_GET['timestamp'],
'url' => esc_url_raw( wp_unslash( $_GET['url'] ) ),
)
);
if (
! function_exists( 'openssl_verify' )
|| 1 !== openssl_verify(
$signature_data,
$signature,
JETPACK__DEBUGGER_PUBLIC_KEY
)
) {
return false;
}
// signature timestamp must be within 5min of current time.
if ( abs( time() - (int) $_GET['timestamp'] ) > 300 ) {
return false;
}
// phpcs:enable WordPress.Security.NonceVerification.Recommended
return true;
}
/**
* Test connection status for this Jetpack site, encrypt the results for decryption by a third-party.
*
* @since 7.1.0
*
* @return array|mixed|object|WP_Error
*/
public static function jetpack_connection_test_for_external() {
// Since we are running this test for inclusion in the WP.com testing suite, let's not try to run them as part of these results.
add_filter( 'jetpack_debugger_run_self_test', '__return_false' );
require_once JETPACK__PLUGIN_DIR . '_inc/lib/debugger.php';
$cxntests = new Jetpack_Cxn_Tests();
if ( $cxntests->pass() ) {
$result = array(
'code' => 'success',
'message' => __( 'All connection tests passed.', 'jetpack' ),
);
} else {
$error = $cxntests->output_fails_as_wp_error(); // Using this so the output is similar both ways.
$errors = array();
// Borrowed from WP_REST_Server::error_to_response().
foreach ( (array) $error->errors as $code => $messages ) {
foreach ( (array) $messages as $message ) {
$errors[] = array(
'code' => $code,
'message' => $message,
'data' => $error->get_error_data( $code ),
);
}
}
$result = ( ! empty( $errors ) ) ? $errors[0] : null;
if ( count( $errors ) > 1 ) {
// Remove the primary error.
array_shift( $errors );
$result['additional_errors'] = $errors;
}
}
$result = wp_json_encode( $result );
$encrypted = $cxntests->encrypt_string_for_wpcom( $result );
if ( ! $encrypted || ! is_array( $encrypted ) ) {
return rest_ensure_response(
array(
'code' => 'action_required',
'message' => 'Please request results from the in-plugin debugger',
)
);
}
return rest_ensure_response(
array(
'code' => 'response',
'debug' => $encrypted,
)
);
}
/**
* Fetch information about the Rewind status of the site.
*/
public static function rewind_data() {
$site_id = Jetpack_Options::get_option( 'id' );
if ( ! $site_id ) {
return new WP_Error( 'site_id_missing' );
}
if ( ! isset( $_GET['_cacheBuster'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended
$rewind_state = get_transient( 'jetpack_rewind_state' );
if ( $rewind_state ) {
return $rewind_state;
}
}
$response = Client::wpcom_json_api_request_as_blog( sprintf( '/sites/%d/rewind', $site_id ) . '?force=wpcom', '2', array(), null, 'wpcom' );
if ( 200 !== wp_remote_retrieve_response_code( $response ) ) {
return new WP_Error( 'rewind_data_fetch_failed' );
}
$body = wp_remote_retrieve_body( $response );
$result = json_decode( $body );
set_transient( 'jetpack_rewind_state', $result, 30 * MINUTE_IN_SECONDS );
return $result;
}
/**
* Get rewind data
*
* @since 5.7.0
*
* @return array Array of rewind properties.
*/
public static function get_rewind_data() {
$rewind_data = self::rewind_data();
if ( ! is_wp_error( $rewind_data ) ) {
return rest_ensure_response(
array(
'code' => 'success',
'message' => esc_html__( 'Backup & Scan data correctly received.', 'jetpack' ),
'data' => wp_json_encode( $rewind_data ),
)
);
}
if ( $rewind_data->get_error_code() === 'rewind_data_fetch_failed' ) {
return new WP_Error( 'rewind_data_fetch_failed', esc_html__( 'Failed fetching rewind data. Try again later.', 'jetpack' ), array( 'status' => 400 ) );
}
if ( $rewind_data->get_error_code() === 'site_id_missing' ) {
return new WP_Error( 'site_id_missing', esc_html__( 'The ID of this site does not exist.', 'jetpack' ), array( 'status' => 404 ) );
}
return new WP_Error(
'error_get_rewind_data',
esc_html__( 'Could not retrieve Backup & Scan data.', 'jetpack' ),
array( 'status' => 500 )
);
}
/**
* Gets Scan state data.
*
* @since 8.5.0
*
* @return array|WP_Error Result from WPCOM API or error.
*/
public static function scan_state() {
if ( ! isset( $_GET['_cacheBuster'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended
$scan_state = get_transient( 'jetpack_scan_state' );
if ( ! empty( $scan_state ) ) {
return $scan_state;
}
}
$site_id = Jetpack_Options::get_option( 'id' );
if ( ! $site_id ) {
return new WP_Error( 'site_id_missing' );
}
// The default timeout was too short in come cases.
add_filter( 'http_request_timeout', array( __CLASS__, 'increase_timeout_30' ), PHP_INT_MAX - 1 );
$response = Client::wpcom_json_api_request_as_blog( sprintf( '/sites/%d/scan', $site_id ) . '?force=wpcom', '2', array(), null, 'wpcom' );
remove_filter( 'http_request_timeout', array( __CLASS__, 'increase_timeout_30' ), PHP_INT_MAX - 1 );
if ( wp_remote_retrieve_response_code( $response ) !== 200 ) {
return new WP_Error( 'scan_state_fetch_failed' );
}
$body = wp_remote_retrieve_body( $response );
$result = json_decode( $body );
set_transient( 'jetpack_scan_state', $result, 30 * MINUTE_IN_SECONDS );
return $result;
}
/**
* Increases the request timeout value to 30 seconds.
*
* @return int Always returns 30.
*/
public static function increase_timeout_30() {
return 30; // 30 Seconds
}
/**
* Get Scan state for API.
*
* @since 8.5.0
*
* @return WP_REST_Response|WP_Error REST response or error state.
*/
public static function get_scan_state() {
$scan_state = self::scan_state();
if ( ! is_wp_error( $scan_state ) ) {
if ( ( new Host() )->is_woa_site() && ! empty( $scan_state->threats ) ) {
$scan_state->threats = array();
}
return rest_ensure_response(
array(
'code' => 'success',
'message' => esc_html__( 'Scan state correctly received.', 'jetpack' ),
'data' => wp_json_encode( $scan_state ),
)
);
}
if ( $scan_state->get_error_code() === 'scan_state_fetch_failed' ) {
return new WP_Error( 'scan_state_fetch_failed', esc_html__( 'Failed fetching rewind data. Try again later.', 'jetpack' ), array( 'status' => 400 ) );
}
if ( $scan_state->get_error_code() === 'site_id_missing' ) {
return new WP_Error( 'site_id_missing', esc_html__( 'The ID of this site does not exist.', 'jetpack' ), array( 'status' => 404 ) );
}
return new WP_Error(
'error_get_rewind_data',
esc_html__( 'Could not retrieve Scan state.', 'jetpack' ),
array( 'status' => 500 )
);
}
/**
* Disconnects Jetpack from the WordPress.com Servers
*
* @deprecated since Jetpack 10.0.0
* @see Automattic\Jetpack\Connection\REST_Connector::disconnect_site()
*
* @uses Jetpack::disconnect();
* @since 4.3.0
*
* @param WP_REST_Request $request The request sent to the WP REST API.
*
* @return bool|WP_Error True if Jetpack successfully disconnected.
*/
public static function disconnect_site( $request ) {
_deprecated_function( __METHOD__, 'jetpack-10.0.0', '\Automattic\Jetpack\Connection\REST_Connector::disconnect_site' );
if ( ! isset( $request['isActive'] ) || false !== $request['isActive'] ) {
return new WP_Error( 'invalid_param', esc_html__( 'Invalid Parameter', 'jetpack' ), array( 'status' => 404 ) );
}
if ( Jetpack::is_connection_ready() ) {
Jetpack::disconnect();
return rest_ensure_response( array( 'code' => 'success' ) );
}
return new WP_Error( 'disconnect_failed', esc_html__( 'Was not able to disconnect the site. Please try again.', 'jetpack' ), array( 'status' => 400 ) );
}
/**
* Gets a new connect raw URL with fresh nonce.
*
* @uses Jetpack::disconnect();
* @since 4.3.0
*
* @param WP_REST_Request $request The request sent to the WP REST API.
*
* @return string|WP_Error A raw URL if the connection URL could be built; error message otherwise.
*/
public static function build_connect_url( $request = array() ) {
$from = isset( $request['from'] ) ? $request['from'] : false;
$redirect = isset( $request['redirect'] ) ? $request['redirect'] : false;
$url = Jetpack::init()->build_connect_url( true, $redirect, $from );
if ( $url ) {
return rest_ensure_response( $url );
}
return new WP_Error( 'build_connect_url_failed', esc_html__( 'Unable to build the connect URL. Please reload the page and try again.', 'jetpack' ), array( 'status' => 400 ) );
}
/**
* Get miscellaneous user data related to the connection. Similar data available in old "My Jetpack".
* Information about the master/primary user.
* Information about the current user.
*
* @deprecated since Jetpack 10.0.0
* @see Automattic\Jetpack\Connection\REST_Connector::get_user_connection_data()
*
* @since 4.3.0
*
* @return object
*/
public static function get_user_connection_data() {
_deprecated_function( __METHOD__, 'jetpack-10.0.0', '\Automattic\Jetpack\Connection\REST_Connector::get_user_connection_data' );
require_once JETPACK__PLUGIN_DIR . '_inc/lib/admin-pages/class.jetpack-react-page.php';
$connection_owner = ( new Connection_Manager() )->get_connection_owner();
$owner_display_name = false === $connection_owner ? null : $connection_owner->data->display_name;
$response = array(
'currentUser' => jetpack_current_user_data(),
'connectionOwner' => $owner_display_name,
);
return rest_ensure_response( $response );
}
/**
* Unlinks current user from the WordPress.com Servers.
*
* @since 4.3.0
* @uses Automattic\Jetpack\Connection\Manager->disconnect_user
*
* @param WP_REST_Request $request The request sent to the WP REST API.
*
* @return bool|WP_Error True if user successfully unlinked.
*/
public static function unlink_user( $request ) {
if ( ! isset( $request['linked'] ) || false !== $request['linked'] ) {
return new WP_Error( 'invalid_param', esc_html__( 'Invalid Parameter', 'jetpack' ), array( 'status' => 404 ) );
}
if ( ( new Connection_Manager( 'jetpack' ) )->disconnect_user() ) {
return rest_ensure_response(
array(
'code' => 'success',
)
);
}
return new WP_Error( 'unlink_user_failed', esc_html__( 'Was not able to unlink the user. Please try again.', 'jetpack' ), array( 'status' => 400 ) );
}
/**
* Gets current user's tracking settings.
*
* @since 6.0.0
*
* @param WP_REST_Request $request The request sent to the WP REST API.
*
* @return WP_REST_Response|WP_Error Response, else error.
*/
public static function get_user_tracking_settings( $request ) { // phpcs:ignore VariableAnalysis.CodeAnalysis.VariableAnalysis.UnusedVariable
if ( ! ( new Connection_Manager( 'jetpack' ) )->is_user_connected() ) {
$response = array(
'tracks_opt_out' => true, // Default to opt-out if not connected to wp.com.
);
} else {
$response = Client::wpcom_json_api_request_as_user(
'/jetpack-user-tracking',
'v2',
array(
'method' => 'GET',
'headers' => array(
'X-Forwarded-For' => ( new Visitor() )->get_ip( true ),
),
)
);
if ( ! is_wp_error( $response ) ) {
$response = json_decode( wp_remote_retrieve_body( $response ), true );
}
}
return rest_ensure_response( $response );
}
/**
* Updates current user's tracking settings.
*
* @since 6.0.0
*
* @param WP_REST_Request $request The request sent to the WP REST API.
*
* @return WP_REST_Response|WP_Error Response, else error.
*/
public static function update_user_tracking_settings( $request ) {
if ( ! ( new Connection_Manager( 'jetpack' ) )->is_user_connected() ) {
$response = array(
'tracks_opt_out' => true, // Default to opt-out if not connected to wp.com.
);
} else {
$response = Client::wpcom_json_api_request_as_user(
'/jetpack-user-tracking',
'v2',
array(
'method' => 'PUT',
'headers' => array(
'Content-Type' => 'application/json',
'X-Forwarded-For' => ( new Visitor() )->get_ip( true ),
),
),
wp_json_encode( $request->get_params() )
);
if ( ! is_wp_error( $response ) ) {
$response = json_decode( wp_remote_retrieve_body( $response ), true );
}
}
return rest_ensure_response( $response );
}
/**
* Fetch site data from .com including the site's current plan and the site's products.
*
* @since 5.5.0
*
* @return stdClass|WP_Error
*/
public static function site_data() {
$site_id = Jetpack_Options::get_option( 'id' );
if ( ! $site_id ) {
return new WP_Error( 'site_id_missing', '', array( 'api_error_code' => __( 'site_id_missing', 'jetpack' ) ) );
}
$args = array( 'headers' => array() );
// Allow use a store sandbox. Internal ref: PCYsg-IA-p2.
if ( isset( $_COOKIE ) && isset( $_COOKIE['store_sandbox'] ) ) {
$secret = filter_var( wp_unslash( $_COOKIE['store_sandbox'] ) );
$args['headers']['Cookie'] = "store_sandbox=$secret;";
}
$response = Client::wpcom_json_api_request_as_blog( sprintf( '/sites/%d', $site_id ) . '?force=wpcom', '1.1', $args );
$body = wp_remote_retrieve_body( $response );
$data = $body ? json_decode( $body ) : null;
if ( 200 !== wp_remote_retrieve_response_code( $response ) ) {
$error_info = array(
'api_error_code' => null,
'api_http_code' => wp_remote_retrieve_response_code( $response ),
);
if ( is_wp_error( $response ) ) {
$error_info['api_error_code'] = $response->get_error_code() ? wp_strip_all_tags( $response->get_error_code() ) : null;
} elseif ( $data && ! empty( $data->error ) ) {
$error_info['api_error_code'] = $data->error;
}
return new WP_Error( 'site_data_fetch_failed', '', $error_info );
}
Jetpack_Plan::update_from_sites_response( $response );
return $data;
}
/**
* Get site data, including for example, the site's current plan.
*
* @return WP_Error|WP_HTTP_Response|WP_REST_Response
* @since 4.3.0
*/
public static function get_site_data() {
$site_data = self::site_data();
if ( ! is_wp_error( $site_data ) ) {
/**
* Fires when the site data was successfully returned from the /sites/%d wpcom endpoint.
*
* @since 8.7.0
*/
do_action( 'jetpack_get_site_data_success' );
return rest_ensure_response(
array(
'code' => 'success',
'message' => esc_html__( 'Site data correctly received.', 'jetpack' ),
'data' => wp_json_encode( $site_data ),
)
);
}
$error_data = $site_data->get_error_data();
if ( empty( $error_data['api_error_code'] ) ) {
$error_message = esc_html__( 'Failed fetching site data from WordPress.com. If the problem persists, try reconnecting Jetpack.', 'jetpack' );
} else {
/* translators: %s is an error code (e.g. `token_mismatch`) */
$error_message = sprintf( esc_html__( 'Failed fetching site data from WordPress.com (%s). If the problem persists, try reconnecting Jetpack.', 'jetpack' ), $error_data['api_error_code'] );
}
return new WP_Error(
$site_data->get_error_code(),
$error_message,
array(
'status' => 400,
'api_error_code' => empty( $error_data['api_error_code'] ) ? null : $error_data['api_error_code'],
'api_http_code' => empty( $error_data['api_http_code'] ) ? null : $error_data['api_http_code'],
)
);
}
/**
* Fetch AL data for this site and return it.
*
* @since 7.4
*
* @return array|WP_Error
*/
public static function get_site_activity() {
$site_id = Jetpack_Options::get_option( 'id' );
if ( ! $site_id ) {
return new WP_Error(
'site_id_missing',
esc_html__( 'Site ID is missing.', 'jetpack' ),
array( 'status' => 400 )
);
}
$response = Client::wpcom_json_api_request_as_user(
"/sites/$site_id/activity",
'2',
array(
'method' => 'GET',
'headers' => array(
'X-Forwarded-For' => ( new Visitor() )->get_ip( true ),
),
),
null,
'wpcom'
);
$response_code = wp_remote_retrieve_response_code( $response );
if ( 200 !== $response_code ) {
return new WP_Error(
'activity_fetch_failed',
esc_html__( 'Could not retrieve site activity.', 'jetpack' ),
array( 'status' => $response_code )
);
}
$data = json_decode( wp_remote_retrieve_body( $response ) );
if ( ! isset( $data->current->orderedItems ) ) {
return new WP_Error(
'activity_not_found',
esc_html__( 'No activity found', 'jetpack' ),
array( 'status' => 204 ) // no content.
);
}
return rest_ensure_response(
array(
'code' => 'success',
'data' => $data->current->orderedItems,
)
);
}
/**
* Fetch the discount for this site and return it.
*
* @since 10.8
*
* @return array|WP_Error
*/
public static function get_site_discount() {
$site_id = Jetpack_Options::get_option( 'id' );
if ( ! $site_id ) {
return new WP_Error(
'site_id_missing',
esc_html__( 'Site ID is missing.', 'jetpack' ),
array( 'status' => 400 )
);
}
$response = Client::wpcom_json_api_request_as_user(
"/sites/$site_id/discount",
'2',
array(
'method' => 'GET',
'headers' => array(
'X-Forwarded-For' => ( new Visitor() )->get_ip( true ),
),
)
);
$response_code = wp_remote_retrieve_response_code( $response );
$data = json_decode( wp_remote_retrieve_body( $response ) );
if ( 200 !== $response_code ) {
return new WP_Error(
'discount_fetch_failed',
is_object( $data ) && property_exists( $data, 'error' ) ? $data->error : esc_html__( 'Could not retrieve site discount.', 'jetpack' ),
array( 'status' => $response_code )
);
}
if ( ! isset( $data ) ) {
return new WP_Error(
'discount_parse_error',
esc_html__( 'Could not parse discount', 'jetpack' ),
array( 'status' => 204 ) // no content.
);
}
return rest_ensure_response(
array(
'code' => 'success',
'data' => $data,
)
);
}
/**
* Reset Jetpack options
*
* @since 4.3.0
*
* @param WP_REST_Request $request {
* Array of parameters received by request.
*
* @type string $options Available options to reset are options|modules
* }
*
* @return bool|WP_Error True if options were reset. Otherwise, a WP_Error instance with the corresponding error.
*/
public static function reset_jetpack_options( $request ) {
if ( ! isset( $request['reset'] ) || true !== $request['reset'] ) {
return new WP_Error( 'invalid_param', esc_html__( 'Invalid Parameter', 'jetpack' ), array( 'status' => 404 ) );
}
if ( isset( $request['options'] ) ) {
$data = $request['options'];
$message = '';
switch ( $data ) {
case ( 'options' ):
$options_to_reset = Jetpack::get_jetpack_options_for_reset();
// Reset the Jetpack options.
foreach ( $options_to_reset['jp_options'] as $option_to_reset ) {
Jetpack_Options::delete_option( $option_to_reset );
}
foreach ( $options_to_reset['wp_options'] as $option_to_reset ) {
delete_option( $option_to_reset );
}
// Reset to default modules.
$default_modules = Jetpack::get_default_modules();
Jetpack::update_active_modules( $default_modules );
$message = esc_html__( 'Jetpack options reset.', 'jetpack' );
break;
case 'modules':
$default_modules = Jetpack::get_default_modules();
Jetpack::update_active_modules( $default_modules );
$message = esc_html__( 'Modules reset to default.', 'jetpack' );
break;
default:
return new WP_Error( 'invalid_param', esc_html__( 'Invalid Parameter', 'jetpack' ), array( 'status' => 404 ) );
}
return rest_ensure_response(
array(
'code' => 'success',
'message' => $message,
)
);
}
return new WP_Error( 'required_param', esc_html__( 'Missing parameter "type".', 'jetpack' ), array( 'status' => 404 ) );
}
/**
* Get the query parameters to update module options or general settings.
*
* @since 4.3.0
* @since 4.4.0 Accepts a $selector parameter.
*
* @param string $selector Selects a set of options to update, Can be empty, a module slug or 'any'.
*
* @return array
*/
public static function get_updateable_parameters( $selector = '' ) {
$parameters = array(
'context' => array(
'default' => 'edit',
),
);
return array_merge( $parameters, self::get_updateable_data_list( $selector ) );
}
/**
* Returns a list of module options or general settings that can be updated.
*
* @since 4.3.0
* @since 4.4.0 Accepts 'any' as a parameter which will make it return the entire list.
*
* @param string|array $selector Module slug, 'any', or an array of parameters.
* If empty, it's assumed we're updating a module and we'll try to get its slug.
* If 'any' the full list is returned.
* If it's an array of parameters, includes the elements by matching keys.
*
* @return array
*/
public static function get_updateable_data_list( $selector = '' ) {
$options = array(
// Blocks.
'jetpack_blocks_disabled' => array(
'description' => esc_html__( 'Jetpack Blocks disabled.', 'jetpack' ),
'type' => 'boolean',
'default' => false,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'settings',
),
// Carousel
'carousel_background_color' => array(
'description' => esc_html__( 'Color scheme.', 'jetpack' ),
'type' => 'string',
'default' => 'black',
'enum' => array(
'black',
'white',
),
'enum_labels' => array(
'black' => esc_html__( 'Black', 'jetpack' ),
'white' => esc_html__( 'White', 'jetpack' ),
),
'validate_callback' => __CLASS__ . '::validate_list_item',
'jp_group' => 'carousel',
),
'carousel_display_exif' => array(
'description' => wp_kses(
sprintf( __( 'Show photo metadata (<a href="https://en.wikipedia.org/wiki/Exchangeable_image_file_format" target="_blank">Exif</a>) in carousel, when available.', 'jetpack' ) ),
array(
'a' => array(
'href' => true,
'target' => true,
),
)
),
'type' => 'boolean',
'default' => 0,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'carousel',
),
'carousel_display_comments' => array(
'description' => esc_html__( 'Show comments area in carousel', 'jetpack' ),
'type' => 'boolean',
'default' => 1,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'carousel',
),
// Comments.
'highlander_comment_form_prompt' => array(
'description' => esc_html__( 'Greeting Text', 'jetpack' ),
'type' => 'string',
'default' => esc_html__( 'Leave a Reply', 'jetpack' ),
'sanitize_callback' => 'sanitize_text_field',
'jp_group' => 'comments',
),
'jetpack_comment_form_color_scheme' => array(
'description' => esc_html__( 'Color scheme', 'jetpack' ),
'type' => 'string',
'default' => 'light',
'enum' => array(
'light',
'dark',
'transparent',
),
'enum_labels' => array(
'light' => esc_html__( 'Light', 'jetpack' ),
'dark' => esc_html__( 'Dark', 'jetpack' ),
'transparent' => esc_html__( 'Transparent', 'jetpack' ),
),
'validate_callback' => __CLASS__ . '::validate_list_item',
'jp_group' => 'comments',
),
// Custom Content Types.
'jetpack_portfolio' => array(
'description' => esc_html__( 'Enable or disable Jetpack portfolio post type.', 'jetpack' ),
'type' => 'boolean',
'default' => 0,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'custom-content-types',
),
'jetpack_portfolio_posts_per_page' => array(
'description' => esc_html__( 'Number of entries to show at most in Portfolio pages.', 'jetpack' ),
'type' => 'integer',
'default' => 10,
'validate_callback' => __CLASS__ . '::validate_posint',
'jp_group' => 'custom-content-types',
),
'jetpack_testimonial' => array(
'description' => esc_html__( 'Enable or disable Jetpack testimonial post type.', 'jetpack' ),
'type' => 'boolean',
'default' => 0,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'custom-content-types',
),
'jetpack_testimonial_posts_per_page' => array(
'description' => esc_html__( 'Number of entries to show at most in Testimonial pages.', 'jetpack' ),
'type' => 'integer',
'default' => 10,
'validate_callback' => __CLASS__ . '::validate_posint',
'jp_group' => 'custom-content-types',
),
// WAF.
'jetpack_waf_automatic_rules' => array(
'description' => esc_html__( 'Enable automatic rules - Protect your site against untrusted traffic sources with automatic security rules.', 'jetpack' ),
'type' => 'boolean',
'default' => Waf_Compatibility::get_default_automatic_rules_option(),
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'waf',
),
'jetpack_waf_ip_block_list_enabled' => array(
'description' => esc_html__( 'Block list - Block a specific request IP.', 'jetpack' ),
'type' => 'boolean',
'default' => 0,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'waf',
),
'jetpack_waf_ip_block_list' => array(
'description' => esc_html__( 'Blocked IP addresses', 'jetpack' ),
'type' => 'string',
'default' => '',
'validate_callback' => __CLASS__ . '::validate_string',
'sanitize_callback' => 'esc_textarea',
'jp_group' => 'waf',
),
'jetpack_waf_ip_allow_list_enabled' => array(
'description' => esc_html__( 'Allow list - Allow a specific request IP.', 'jetpack' ),
'type' => 'boolean',
'default' => 0,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'settings',
),
'jetpack_waf_ip_allow_list' => array(
'description' => esc_html__( 'Always allowed IP addresses', 'jetpack' ),
'type' => 'string',
'default' => '',
'validate_callback' => __CLASS__ . '::validate_string',
'sanitize_callback' => 'esc_textarea',
'jp_group' => 'settings',
),
'jetpack_waf_share_data' => array(
'description' => esc_html__( 'Share basic data with Jetpack.', 'jetpack' ),
'type' => 'boolean',
'default' => 0,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'waf',
),
'jetpack_waf_share_debug_data' => array(
'description' => esc_html__( 'Share detailed data with Jetpack.', 'jetpack' ),
'type' => 'boolean',
'default' => 0,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'waf',
),
// Galleries.
'tiled_galleries' => array(
'description' => esc_html__( 'Display all your gallery pictures in a cool mosaic.', 'jetpack' ),
'type' => 'boolean',
'default' => 0,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'tiled-gallery',
),
'gravatar_disable_hovercards' => array(
'description' => esc_html__( "View people's profiles when you mouse over their Gravatars", 'jetpack' ),
'type' => 'string',
'default' => 'enabled',
// Not visible. This is used as the checkbox value.
'enum' => array(
'enabled',
'disabled',
),
'enum_labels' => array(
'enabled' => esc_html__( 'Enabled', 'jetpack' ),
'disabled' => esc_html__( 'Disabled', 'jetpack' ),
),
'validate_callback' => __CLASS__ . '::validate_list_item',
'jp_group' => 'gravatar-hovercards',
),
// Infinite Scroll.
'infinite_scroll' => array(
'description' => esc_html__( 'To infinity and beyond', 'jetpack' ),
'type' => 'boolean',
'default' => 1,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'infinite-scroll',
),
'infinite_scroll_google_analytics' => array(
'description' => esc_html__( 'Use Google Analytics with Infinite Scroll', 'jetpack' ),
'type' => 'boolean',
'default' => 0,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'infinite-scroll',
),
// Likes.
'wpl_default' => array(
'description' => esc_html__( 'WordPress.com Likes are', 'jetpack' ),
'type' => 'string',
'default' => 'on',
'enum' => array(
'on',
'off',
),
'enum_labels' => array(
'on' => esc_html__( 'On for all posts', 'jetpack' ),
'off' => esc_html__( 'Turned on per post', 'jetpack' ),
),
'validate_callback' => __CLASS__ . '::validate_list_item',
'jp_group' => 'likes',
),
'social_notifications_like' => array(
'description' => esc_html__( 'Send email notification when someone likes a post', 'jetpack' ),
'type' => 'boolean',
'default' => 1,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'likes',
),
// Markdown.
'wpcom_publish_comments_with_markdown' => array(
'description' => esc_html__( 'Use Markdown for comments.', 'jetpack' ),
'type' => 'boolean',
'default' => 0,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'markdown',
),
'wpcom_publish_posts_with_markdown' => array(
'description' => esc_html__( 'Use Markdown for posts.', 'jetpack' ),
'type' => 'boolean',
'default' => 0,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'markdown',
),
// Monitor.
'monitor_receive_notifications' => array(
'description' => esc_html__( 'Receive Monitor Email Notifications.', 'jetpack' ),
'type' => 'boolean',
'default' => 0,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'monitor',
),
// Post by Email.
'post_by_email_address' => array(
'description' => esc_html__( 'Email Address', 'jetpack' ),
'type' => 'string',
'default' => 'noop',
'enum' => array(
'noop',
'create',
'regenerate',
'delete',
),
'enum_labels' => array(
'noop' => '',
'create' => esc_html__( 'Create Post by Email address', 'jetpack' ),
'regenerate' => esc_html__( 'Regenerate Post by Email address', 'jetpack' ),
'delete' => esc_html__( 'Delete Post by Email address', 'jetpack' ),
),
'validate_callback' => __CLASS__ . '::validate_list_item',
'jp_group' => 'post-by-email',
),
// Protect.
'jetpack_protect_key' => array(
'description' => esc_html__( 'Protect API key', 'jetpack' ),
'type' => 'string',
'default' => '',
'validate_callback' => __CLASS__ . '::validate_alphanum',
'jp_group' => 'protect',
),
'jetpack_protect_global_whitelist' => array(
'description' => esc_html__( 'Protect global IP allow list', 'jetpack' ),
'type' => 'string',
'default' => '',
'validate_callback' => __CLASS__ . '::validate_string',
'sanitize_callback' => 'esc_textarea',
'jp_group' => 'protect',
),
// Sharing.
'sharing_services' => array(
'description' => esc_html__( 'Enabled Services and those hidden behind a button', 'jetpack' ),
'type' => 'object',
'default' => array(
'visible' => array( 'facebook', 'x' ),
'hidden' => array(),
),
'validate_callback' => __CLASS__ . '::validate_services',
'jp_group' => 'sharedaddy',
),
'button_style' => array(
'description' => esc_html__( 'Button Style', 'jetpack' ),
'type' => 'string',
'default' => 'icon',
'enum' => array(
'icon-text',
'icon',
'text',
'official',
),
'enum_labels' => array(
'icon-text' => esc_html__( 'Icon + text', 'jetpack' ),
'icon' => esc_html__( 'Icon only', 'jetpack' ),
'text' => esc_html__( 'Text only', 'jetpack' ),
'official' => esc_html__( 'Official buttons', 'jetpack' ),
),
'validate_callback' => __CLASS__ . '::validate_list_item',
'jp_group' => 'sharedaddy',
),
'sharing_label' => array(
'description' => esc_html__( 'Sharing Label', 'jetpack' ),
'type' => 'string',
'default' => '',
'validate_callback' => __CLASS__ . '::validate_string',
'sanitize_callback' => 'esc_html',
'jp_group' => 'sharedaddy',
),
'show' => array(
'description' => esc_html__( 'Views where buttons are shown', 'jetpack' ),
'type' => 'array',
'items' => array(
'type' => 'string',
),
'default' => array( 'post' ),
'validate_callback' => __CLASS__ . '::validate_sharing_show',
'jp_group' => 'sharedaddy',
),
'jetpack-twitter-cards-site-tag' => array(
'description' => esc_html__( "The Twitter username of the owner of this site's domain.", 'jetpack' ),
'type' => 'string',
'default' => '',
'validate_callback' => __CLASS__ . '::validate_twitter_username',
'sanitize_callback' => 'esc_html',
'jp_group' => 'sharedaddy',
),
'sharedaddy_disable_resources' => array(
'description' => esc_html__( 'Disable CSS and JS', 'jetpack' ),
'type' => 'boolean',
'default' => 0,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'sharedaddy',
),
'custom' => array(
'description' => esc_html__( 'Custom sharing services added by user.', 'jetpack' ),
'type' => 'object',
'default' => array(
'sharing_name' => '',
'sharing_url' => '',
'sharing_icon' => '',
),
'validate_callback' => __CLASS__ . '::validate_custom_service',
'jp_group' => 'sharedaddy',
),
// Not an option, but an action that can be performed on the list of custom services passing the service ID.
'sharing_delete_service' => array(
'description' => esc_html__( 'Delete custom sharing service.', 'jetpack' ),
'type' => 'string',
'default' => '',
'validate_callback' => __CLASS__ . '::validate_custom_service_id',
'jp_group' => 'sharedaddy',
),
// SSO.
'jetpack_sso_require_two_step' => array(
'description' => esc_html__( 'Require Two-Step Authentication', 'jetpack' ),
'type' => 'boolean',
'default' => SSO\Helpers::is_require_two_step_checkbox_disabled(),
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'sso',
),
'jetpack_sso_match_by_email' => array(
'description' => esc_html__( 'Match by Email', 'jetpack' ),
'type' => 'boolean',
'default' => 1,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'sso',
),
// Subscriptions.
'stb_enabled' => array(
'description' => esc_html__( "Show a <em>'follow blog'</em> option in the comment form", 'jetpack' ),
'type' => 'boolean',
'default' => 1,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'subscriptions',
),
'stc_enabled' => array(
'description' => esc_html__( "Show a <em>'follow comments'</em> option in the comment form", 'jetpack' ),
'type' => 'boolean',
'default' => 1,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'subscriptions',
),
'wpcom_newsletter_categories' => array(
'description' => esc_html__( 'Array of post category ids that are marked as newsletter categories', 'jetpack' ),
'type' => 'array',
'default' => array(),
'validate_callback' => __CLASS__ . '::validate_array',
'jp_group' => 'subscriptions',
),
'wpcom_newsletter_categories_enabled' => array(
'description' => esc_html__( 'Whether the newsletter categories are enabled or not', 'jetpack' ),
'type' => 'boolean',
'default' => 0,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'subscriptions',
),
'wpcom_featured_image_in_email' => array(
'description' => esc_html__( 'Whether to include the featured image in the email or not', 'jetpack' ),
'type' => 'boolean',
'default' => 0,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'subscriptions',
),
'jetpack_gravatar_in_email' => array(
'description' => esc_html__( 'Whether to show author avatar in the email byline', 'jetpack' ),
'type' => 'boolean',
'default' => 1,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'subscriptions',
),
'jetpack_author_in_email' => array(
'description' => esc_html__( 'Whether to show author display name in the email byline', 'jetpack' ),
'type' => 'boolean',
'default' => 1,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'subscriptions',
),
'jetpack_post_date_in_email' => array(
'description' => esc_html__( 'Whether to show date in the email byline', 'jetpack' ),
'type' => 'boolean',
'default' => 1,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'subscriptions',
),
'wpcom_subscription_emails_use_excerpt' => array(
'description' => esc_html__( 'Whether to use the excerpt in the email or not', 'jetpack' ),
'type' => 'boolean',
'default' => 0,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'subscriptions',
),
'jetpack_subscriptions_reply_to' => array(
'description' => esc_html__( 'Reply to email behaviour for newsletters emails', 'jetpack' ),
'type' => 'string',
'default' => Automattic\Jetpack\Modules\Subscriptions\Settings::$default_reply_to,
'validate_callback' => __CLASS__ . '::validate_subscriptions_reply_to',
'jp_group' => 'subscriptions',
),
'jetpack_subscriptions_from_name' => array(
'description' => esc_html__( 'From name for newsletters emails', 'jetpack' ),
'type' => 'string',
'default' => '',
'validate_callback' => __CLASS__ . '::validate_subscriptions_reply_to_name',
'jp_group' => 'subscriptions',
),
'sm_enabled' => array(
'description' => esc_html__( 'Show popup Subscribe modal to readers.', 'jetpack' ),
'type' => 'boolean',
'default' => 0,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'subscriptions',
),
'jetpack_subscribe_overlay_enabled' => array(
'description' => esc_html__( 'Show subscribe overlay on homepage.', 'jetpack' ),
'type' => 'boolean',
'default' => 0,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'subscriptions',
),
'jetpack_subscribe_floating_button_enabled' => array(
'description' => esc_html__( 'Show a floating subscribe button.', 'jetpack' ),
'type' => 'boolean',
'default' => 0,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'subscriptions',
),
'jetpack_subscriptions_subscribe_post_end_enabled' => array(
'description' => esc_html__( 'Add Subscribe block at the end of each post.', 'jetpack' ),
'type' => 'boolean',
'default' => 0,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'subscriptions',
),
'jetpack_subscriptions_login_navigation_enabled' => array(
'description' => esc_html__( 'Add Subscriber Login block to the navigation.', 'jetpack' ),
'type' => 'boolean',
'default' => 0,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'subscriptions',
),
'jetpack_subscriptions_subscribe_navigation_enabled' => array(
'description' => esc_html__( 'Add Subscribe block to the navigation.', 'jetpack' ),
'type' => 'boolean',
'default' => 0,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'subscriptions',
),
'social_notifications_subscribe' => array(
'description' => esc_html__( 'Send email notification when someone subscribes to my blog', 'jetpack' ),
'type' => 'boolean',
'default' => 0,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'subscriptions',
),
'subscription_options' => array(
'description' => esc_html__( 'Three options used in subscription email templates: \'invitation\', \'welcome\' and \'comment_follow\'.', 'jetpack' ),
'type' => 'object',
'default' => array(
'invitation' => '',
'welcome' => '',
'comment_follow' => '',
),
'validate_callback' => __CLASS__ . '::validate_subscription_options',
'jp_group' => 'subscriptions',
),
// Related Posts.
'show_headline' => array(
'description' => esc_html__( 'Highlight related content with a heading', 'jetpack' ),
'type' => 'boolean',
'default' => 1,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'related-posts',
),
'show_thumbnails' => array(
'description' => esc_html__( 'Show a thumbnail image where available', 'jetpack' ),
'type' => 'boolean',
'default' => 0,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'related-posts',
),
// Search.
'instant_search_enabled' => array(
'description' => esc_html__( 'Enable Instant Search', 'jetpack' ),
'type' => 'boolean',
'default' => 0,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'search',
),
'has_jetpack_search_product' => array(
'description' => esc_html__( 'Has an active Jetpack Search product purchase', 'jetpack' ),
'type' => 'boolean',
'default' => 0,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'settings',
),
'search_auto_config' => array(
'description' => esc_html__( 'Trigger an auto config of instant search', 'jetpack' ),
'type' => 'boolean',
'default' => 0,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'search',
),
// Verification Tools.
'google' => array(
'description' => esc_html__( 'Google Search Console', 'jetpack' ),
'type' => 'string',
'default' => '',
'validate_callback' => __CLASS__ . '::validate_verification_service',
'jp_group' => 'verification-tools',
),
'bing' => array(
'description' => esc_html__( 'Bing Webmaster Center', 'jetpack' ),
'type' => 'string',
'default' => '',
'validate_callback' => __CLASS__ . '::validate_verification_service',
'jp_group' => 'verification-tools',
),
'pinterest' => array(
'description' => esc_html__( 'Pinterest Site Verification', 'jetpack' ),
'type' => 'string',
'default' => '',
'validate_callback' => __CLASS__ . '::validate_verification_service',
'jp_group' => 'verification-tools',
),
'yandex' => array(
'description' => esc_html__( 'Yandex Site Verification', 'jetpack' ),
'type' => 'string',
'default' => '',
'validate_callback' => __CLASS__ . '::validate_verification_service',
'jp_group' => 'verification-tools',
),
'facebook' => array(
'description' => esc_html__( 'Facebook Domain Verification', 'jetpack' ),
'type' => 'string',
'default' => '',
'validate_callback' => __CLASS__ . '::validate_verification_service',
'jp_group' => 'verification-tools',
),
// WordAds.
'enable_header_ad' => array(
'description' => esc_html__( 'Display an ad unit at the top of each page.', 'jetpack' ),
'type' => 'boolean',
'default' => 1,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'wordads',
),
'wordads_approved' => array(
'description' => esc_html__( 'Is site approved for WordAds?', 'jetpack' ),
'type' => 'boolean',
'default' => 0,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'wordads',
),
'wordads_second_belowpost' => array(
'description' => esc_html__( 'Display second ad below post?', 'jetpack' ),
'type' => 'boolean',
'default' => 1,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'wordads',
),
'wordads_inline_enabled' => array(
'description' => esc_html__( 'Display inline ad within post content?', 'jetpack' ),
'type' => 'boolean',
'default' => 1,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'wordads',
),
'wordads_display_front_page' => array(
'description' => esc_html__( 'Display ads on the front page?', 'jetpack' ),
'type' => 'boolean',
'default' => 1,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'wordads',
),
'wordads_display_post' => array(
'description' => esc_html__( 'Display ads on posts?', 'jetpack' ),
'type' => 'boolean',
'default' => 1,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'wordads',
),
'wordads_display_page' => array(
'description' => esc_html__( 'Display ads on pages?', 'jetpack' ),
'type' => 'boolean',
'default' => 1,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'wordads',
),
'wordads_display_archive' => array(
'description' => esc_html__( 'Display ads on archive pages?', 'jetpack' ),
'type' => 'boolean',
'default' => 1,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'wordads',
),
'wordads_custom_adstxt_enabled' => array(
'description' => esc_html__( 'Custom ads.txt', 'jetpack' ),
'type' => 'boolean',
'default' => 0,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'wordads',
),
'wordads_custom_adstxt' => array(
'description' => esc_html__( 'Custom ads.txt entries', 'jetpack' ),
'type' => 'string',
'default' => '',
'validate_callback' => __CLASS__ . '::validate_string',
'sanitize_callback' => 'sanitize_textarea_field',
'jp_group' => 'wordads',
),
'wordads_ccpa_enabled' => array(
'description' => esc_html__( 'Enable support for California Consumer Privacy Act', 'jetpack' ),
'type' => 'boolean',
'default' => 0,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'wordads',
),
'wordads_ccpa_privacy_policy_url' => array(
'description' => esc_html__( 'Privacy Policy URL', 'jetpack' ),
'type' => 'string',
'default' => '',
'validate_callback' => __CLASS__ . '::validate_string',
'sanitize_callback' => 'sanitize_text_field',
'jp_group' => 'wordads',
),
'wordads_cmp_enabled' => array(
'description' => esc_html__( 'Enable GDPR Consent Management Banner for WordAds', 'jetpack' ),
'type' => 'boolean',
'default' => 0,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'wordads',
),
// Google Analytics.
'google_analytics_tracking_id' => array(
'description' => esc_html__( 'Google Analytics', 'jetpack' ),
'type' => 'string',
'default' => '',
'validate_callback' => __CLASS__ . '::validate_alphanum',
'jp_group' => 'google-analytics',
),
// Stats.
'admin_bar' => array(
'description' => esc_html__( 'Include a small chart in your admin bar with a 48-hour traffic snapshot.', 'jetpack' ),
'type' => 'boolean',
'default' => 1,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'stats',
),
'enable_odyssey_stats' => array(
'description' => esc_html__( 'Preview the new Jetpack Stats experience (Experimental).', 'jetpack' ),
'type' => 'boolean',
'default' => 1,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'stats',
),
'roles' => array(
'description' => esc_html__( 'Select the roles that will be able to view stats reports.', 'jetpack' ),
'type' => 'array',
'items' => array(
'type' => 'string',
),
'default' => array( 'administrator' ),
'validate_callback' => __CLASS__ . '::validate_stats_roles',
'sanitize_callback' => __CLASS__ . '::sanitize_stats_allowed_roles',
'jp_group' => 'stats',
),
'count_roles' => array(
'description' => esc_html__( 'Count the page views of registered users who are logged in.', 'jetpack' ),
'type' => 'array',
'items' => array(
'type' => 'string',
),
'default' => array( 'administrator' ),
'validate_callback' => __CLASS__ . '::validate_stats_roles',
'jp_group' => 'stats',
),
'blog_id' => array(
'description' => esc_html__( 'Blog ID.', 'jetpack' ),
'type' => 'boolean',
'default' => 0,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'stats',
),
'do_not_track' => array(
'description' => esc_html__( 'Do not track.', 'jetpack' ),
'type' => 'boolean',
'default' => 1,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'stats',
),
'version' => array(
'description' => esc_html__( 'Version.', 'jetpack' ),
'type' => 'integer',
'default' => 9,
'validate_callback' => __CLASS__ . '::validate_posint',
'jp_group' => 'stats',
),
'collapse_nudges' => array(
'description' => esc_html__( 'Collapse upgrade nudges', 'jetpack' ),
'type' => 'boolean',
'default' => 0,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'stats',
),
// Whether to share stats views with WordPress.com Reader.
'wpcom_reader_views_enabled' => array(
'description' => esc_html__( 'Show post views in the WordPress.com Reader.', 'jetpack' ),
'type' => 'boolean',
'default' => 1,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'settings',
),
// Akismet - Not a module, but a plugin. The options can be passed and handled differently.
'akismet_show_user_comments_approved' => array(
'description' => '',
'type' => 'boolean',
'default' => 0,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'settings',
),
'wordpress_api_key' => array(
'description' => '',
'type' => 'string',
'default' => '',
'validate_callback' => __CLASS__ . '::validate_alphanum',
'jp_group' => 'settings',
),
// Empty stats card dismiss.
'dismiss_empty_stats_card' => array(
'description' => '',
'type' => 'boolean',
'default' => 0,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'settings',
),
// Backup Getting Started card on dashboard.
'dismiss_dash_backup_getting_started' => array(
'description' => '',
'type' => 'boolean',
'default' => 0,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'settings',
),
// Agencies Learn More card on dashboard.
'dismiss_dash_agencies_learn_more' => array(
'description' => '',
'type' => 'boolean',
'default' => 0,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'settings',
),
'lang_id' => array(
'description' => esc_html__( 'Primary language for the site.', 'jetpack' ),
'type' => 'string',
'default' => 'en_US',
'jp_group' => 'settings',
),
// SEO Tools.
'advanced_seo_front_page_description' => array(
'description' => esc_html__( 'Front page meta description.', 'jetpack' ),
'type' => 'string',
'default' => '',
'sanitize_callback' => 'Jetpack_SEO_Utils::sanitize_front_page_meta_description',
'jp_group' => 'seo-tools',
),
'advanced_seo_title_formats' => array(
'description' => esc_html__( 'SEO page title structures.', 'jetpack' ),
'type' => 'object',
'default' => array(
'archives' => array(),
'front_page' => array(),
'groups' => array(),
'pages' => array(),
'posts' => array(),
),
'jp_group' => 'seo-tools',
'validate_callback' => 'Jetpack_SEO_Titles::are_valid_title_formats',
'sanitize_callback' => 'Jetpack_SEO_Titles::sanitize_title_formats',
),
// VideoPress.
'videopress_private_enabled_for_site' => array(
'description' => esc_html__( 'Video Privacy: Restrict views to members of this site', 'jetpack' ),
'type' => 'boolean',
'default' => 0,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'videopress',
),
);
// Add modules to list so they can be toggled.
$modules = Jetpack::get_available_modules();
if ( is_array( $modules ) && ! empty( $modules ) ) {
$module_args = array(
'description' => '',
'type' => 'boolean',
'default' => 0,
'validate_callback' => __CLASS__ . '::validate_boolean',
'jp_group' => 'modules',
);
foreach ( $modules as $module ) {
$options[ $module ] = $module_args;
}
}
if ( is_array( $selector ) ) {
// Return only those options whose keys match $selector keys.
return array_intersect_key( $options, $selector );
}
if ( 'any' === $selector ) {
// Toggle module or update any module option or any general setting.
return $options;
}
// We're updating the options for a single module.
if ( empty( $selector ) ) {
$selector = self::get_module_requested();
}
$selected = array();
foreach ( $options as $option => $attributes ) {
// Not adding an isset( $attributes['jp_group'] ) because if it's not set, it must be fixed, otherwise options will fail.
if ( $selector === $attributes['jp_group'] ) {
$selected[ $option ] = $attributes;
}
}
return $selected;
}
/**
* Validates that the parameters are proper values that can be set during Jetpack onboarding.
*
* @since 5.4.0
*
* @deprecated since 13.9
*
* @param array $onboarding_data Values to check.
* @param WP_REST_Request $request The request sent to the WP REST API.
* @param string $param Name of the parameter passed to endpoint holding $value.
*
* @return bool|WP_Error
*/
public static function validate_onboarding( $onboarding_data, $request, $param ) { // phpcs:ignore VariableAnalysis.CodeAnalysis.VariableAnalysis.UnusedVariable
_deprecated_function( __METHOD__, '13.9' );
return true;
}
/**
* Validates that the parameter is either a pure boolean or a numeric string that can be mapped to a boolean.
*
* @since 4.3.0
*
* @param string|bool $value Value to check.
* @param WP_REST_Request $request The request sent to the WP REST API.
* @param string $param Name of the parameter passed to endpoint holding $value.
*
* @return bool|WP_Error
*/
public static function validate_boolean( $value, $request, $param ) {
// phpcs:ignore WordPress.PHP.StrictInArray.MissingTrueStrict -- Other code depends on loose comparison here.
if ( ! is_bool( $value ) && ! ( ctype_digit( (string) $value ) && in_array( $value, array( 0, 1 ) ) ) ) {
return new WP_Error(
'invalid_param',
sprintf(
/* Translators: Placeholder is a parameter name. */
esc_html__( '%s must be true, false, 0 or 1.', 'jetpack' ),
$param
)
);
}
return true;
}
/**
* Validates that the parameter is a positive integer.
*
* @since 4.3.0
*
* @param int $value Value to check.
* @param WP_REST_Request $request The request sent to the WP REST API.
* @param string $param Name of the parameter passed to endpoint holding $value.
*
* @return bool|WP_Error
*/
public static function validate_posint( $value, $request, $param ) {
if ( ! is_numeric( $value ) || $value <= 0 ) {
return new WP_Error(
'invalid_param',
sprintf(
/* Translators: Placeholder is a parameter name. */
esc_html__( '%s must be a positive integer.', 'jetpack' ),
$param
)
);
}
return true;
}
/**
* Validates that the parameter is a non-negative integer (includes 0).
*
* @since 10.4.0
*
* @param int $value Value to check.
* @param WP_REST_Request $request The request sent to the WP REST API.
* @param string $param Name of the parameter passed to endpoint holding $value.
*
* @return bool|WP_Error
*/
public static function validate_non_neg_int( $value, $request, $param ) {
if ( ! is_numeric( $value ) || $value < 0 ) {
return new WP_Error(
'invalid_param',
/* translators: %s: The literal parameter name. Should not be translated. */
sprintf( esc_html__( '%s must be a non-negative integer.', 'jetpack' ), $param )
);
}
return true;
}
/**
* Validates that the parameter belongs to a list of admitted values.
*
* @since 4.3.0
*
* @param string $value Value to check.
* @param WP_REST_Request $request The request sent to the WP REST API.
* @param string $param Name of the parameter passed to endpoint holding $value.
*
* @return bool|WP_Error
*/
public static function validate_list_item( $value, $request, $param ) {
$attributes = $request->get_attributes();
if ( ! isset( $attributes['args'][ $param ] ) || ! is_array( $attributes['args'][ $param ] ) ) {
return new WP_Error(
'invalid_param',
sprintf(
/* Translators: Placeholder is a parameter name. */
esc_html__( '%s not recognized', 'jetpack' ),
$param
)
);
}
$args = $attributes['args'][ $param ];
if ( ! empty( $args['enum'] ) ) {
// If it's an associative array, use the keys to check that the value is among those admitted.
$enum = ( count( array_filter( array_keys( $args['enum'] ), 'is_string' ) ) > 0 )
? array_keys( $args['enum'] )
: $args['enum'];
$enum = array_map( 'strval', $enum );
if ( ! in_array( $value, $enum, true ) ) {
return new WP_Error(
'invalid_param_value',
sprintf(
/* Translators: first variable is the parameter passed to endpoint that holds the list item, the second is a list of admitted values. */
esc_html__( '%1$s must be one of %2$s', 'jetpack' ),
$param,
implode( ', ', $enum )
)
);
}
}
return true;
}
/**
* Validates that the parameter belongs to a list of admitted values.
*
* @since 4.3.0
*
* @param string $value Value to check.
* @param WP_REST_Request $request The request sent to the WP REST API.
* @param string $param Name of the parameter passed to endpoint holding $value.
*
* @return bool|WP_Error
*/
public static function validate_module_list( $value, $request, $param ) {
if ( ! is_array( $value ) ) {
return new WP_Error(
'invalid_param_value',
sprintf(
/* Translators: Placeholder is a parameter name. */
esc_html__( '%s must be an array', 'jetpack' ),
$param
)
);
}
$modules = Jetpack::get_available_modules();
if ( count( array_intersect( $value, $modules ) ) !== count( $value ) ) {
return new WP_Error(
'invalid_param_value',
sprintf(
/* Translators: Placeholder is a parameter name. */
esc_html__( '%s must be a list of valid modules', 'jetpack' ),
$param
)
);
}
return true;
}
/**
* Validates that the parameter is an alphanumeric or empty string (to be able to clear the field).
*
* @since 4.3.0
*
* @param string $value Value to check.
* @param WP_REST_Request $request The request sent to the WP REST API.
* @param string $param Name of the parameter passed to endpoint holding $value.
*
* @return bool|WP_Error
*/
public static function validate_alphanum( $value, $request, $param ) {
if ( ! empty( $value ) && ( ! is_string( $value ) || ! preg_match( '/^[a-z0-9]+$/i', $value ) ) ) {
return new WP_Error(
'invalid_param',
sprintf(
/* Translators: Placeholder is a parameter name. */
esc_html__( '%s must be an alphanumeric string.', 'jetpack' ),
$param
)
);
}
return true;
}
/**
* Validates that the parameter is a tag or id for a verification service, or an empty string (to be able to clear the field).
*
* @since 4.6.0
*
* @param string $value Value to check.
* @param WP_REST_Request $request The request sent to the WP REST API.
* @param string $param Name of the parameter passed to endpoint holding $value.
*
* @return bool|WP_Error
*/
public static function validate_verification_service( $value, $request, $param ) {
if ( ! empty( $value ) && ! ( is_string( $value ) && ( preg_match( '/^[a-z0-9_-]+$/i', $value ) || jetpack_verification_get_code( $value ) !== false ) ) ) {
return new WP_Error(
'invalid_param',
sprintf(
/* Translators: Placeholder is a verification string used to verify a service like Google Webmaster Console. */
esc_html__( '%s must be an alphanumeric string or a verification tag.', 'jetpack' ),
$param
)
);
}
return true;
}
/**
* Validates that the parameter is among the roles allowed for Stats.
*
* @since 4.3.0
*
* @param string|bool $value Value to check.
* @param WP_REST_Request $request The request sent to the WP REST API.
* @param string $param Name of the parameter passed to endpoint holding $value.
*
* @return bool|WP_Error
*/
public static function validate_stats_roles( $value, $request, $param ) {
if ( ! empty( $value ) && ! array_intersect( self::$stats_roles, $value ) ) {
return new WP_Error(
'invalid_param',
sprintf(
/* Translators: first variable is the name of a parameter passed to endpoint holding the role that will be checked, the second is a list of roles allowed to see stats. The parameter is checked against this list. */
esc_html__( '%1$s must be %2$s.', 'jetpack' ),
$param,
implode( ', ', self::$stats_roles )
)
);
}
return true;
}
/**
* Validates that the parameter is among the views where the Sharing can be displayed.
*
* @since 4.3.0
*
* @param string|bool $value Value to check.
* @param WP_REST_Request $request The request sent to the WP REST API.
* @param string $param Name of the parameter passed to endpoint holding $value.
*
* @return bool|WP_Error
*/
public static function validate_sharing_show( $value, $request, $param ) {
$views = array( 'index', 'post', 'page', 'attachment', 'jetpack-portfolio' );
if ( ! is_array( $value ) ) {
return new WP_Error(
'invalid_param',
sprintf(
/* Translators: Placeholder is a parameter name. */
esc_html__( '%s must be an array of post types.', 'jetpack' ),
$param
)
);
}
if ( ! array_intersect( $views, $value ) ) {
return new WP_Error(
'invalid_param',
sprintf(
/* Translators: first variable is the name of a parameter passed to endpoint holding the post type where Sharing will be displayed, the second is a list of post types where Sharing can be displayed */
esc_html__( '%1$s must be %2$s.', 'jetpack' ),
$param,
implode( ', ', $views )
)
);
}
return true;
}
/**
* Validates that the parameter is among the valid reply-to types for subscriptions.
*
* @since 4.3.0
*
* @param string|bool $value Value to check.
* @param WP_REST_Request $request The request sent to the WP REST API.
* @param string $param Name of the parameter passed to endpoint holding $value.
*
* @return bool|WP_Error
*/
public static function validate_subscriptions_reply_to( $value, $request, $param ) {
require_once JETPACK__PLUGIN_DIR . 'modules/subscriptions/class-settings.php';
if ( ! empty( $value ) && ! Automattic\Jetpack\Modules\Subscriptions\Settings::is_valid_reply_to( $value ) ) {
return new WP_Error(
'invalid_param',
sprintf(
/* Translators: Placeholder is a parameter name. */
esc_html__( '%s must be a valid type.', 'jetpack' ),
$param
)
);
}
return true;
}
/**
* Validates that the parameter is among the valid reply-to types for subscriptions.
*
* @since 4.3.0
*
* @param string|bool $value Value to check.
* @param WP_REST_Request $request The request sent to the WP REST API.
* @param string $param Name of the parameter passed to endpoint holding $value.
*
* @return bool|WP_Error
*/
public static function validate_subscriptions_reply_to_name( $value, $request, $param ) {
if ( ! empty( $value ) && ! is_string( $value ) ) {
return new WP_Error(
'invalid_param',
sprintf(
/* Translators: Placeholder is a parameter name. */
esc_html__( '%s must be a valid type.', 'jetpack' ),
$param
)
);
}
return true;
}
/**
* Validates that the parameter is among the views where the Sharing can be displayed.
*
* @since 4.3.0
*
* @param string|bool $value {
* Value to check received by request.
*
* @type array $visible List of slug of services to share to that are displayed directly in the page.
* @type array $hidden List of slug of services to share to that are concealed in a folding menu.
* }
* @param WP_REST_Request $request The request sent to the WP REST API.
* @param string $param Name of the parameter passed to endpoint holding $value.
*
* @return bool|WP_Error
*/
public static function validate_services( $value, $request, $param ) {
if ( ! is_array( $value ) || ! isset( $value['visible'] ) || ! isset( $value['hidden'] ) ) {
return new WP_Error(
'invalid_param',
sprintf(
/* Translators: Placeholder is a parameter name. */
esc_html__( '%s must be an array with visible and hidden items.', 'jetpack' ),
$param
)
);
}
// Allow to clear everything.
if ( empty( $value['visible'] ) && empty( $value['hidden'] ) ) {
return true;
}
if ( ! class_exists( 'Sharing_Service' ) && ! include_once JETPACK__PLUGIN_DIR . 'modules/sharedaddy/sharing-service.php' ) {
return new WP_Error( 'invalid_param', esc_html__( 'Failed loading required dependency Sharing_Service.', 'jetpack' ) );
}
$sharer = new Sharing_Service();
$services = array_keys( $sharer->get_all_services() );
if (
( ! empty( $value['visible'] ) && ! array_intersect( $value['visible'], $services ) )
||
( ! empty( $value['hidden'] ) && ! array_intersect( $value['hidden'], $services ) ) ) {
return new WP_Error(
'invalid_param',
sprintf(
/* Translators: placeholder 1 is a parameter holding the services passed to endpoint, placeholder 2 is a list of all Jetpack Sharing services */
esc_html__( '%1$s visible and hidden items must be a list of %2$s.', 'jetpack' ),
$param,
implode( ', ', $services )
)
);
}
return true;
}
/**
* Validates that the parameter has enough information to build a custom sharing button.
*
* @since 4.3.0
*
* @param string|bool $value Value to check.
* @param WP_REST_Request $request The request sent to the WP REST API.
* @param string $param Name of the parameter passed to endpoint holding $value.
*
* @return bool|WP_Error
*/
public static function validate_custom_service( $value, $request, $param ) {
if ( ! is_array( $value ) || ! isset( $value['sharing_name'] ) || ! isset( $value['sharing_url'] ) || ! isset( $value['sharing_icon'] ) ) {
return new WP_Error(
'invalid_param',
sprintf(
/* Translators: Placeholder is a parameter name. */
esc_html__( '%s must be an array with sharing name, url and icon.', 'jetpack' ),
$param
)
);
}
// Allow to clear everything.
if ( empty( $value['sharing_name'] ) && empty( $value['sharing_url'] ) && empty( $value['sharing_icon'] ) ) {
return true;
}
if ( ! class_exists( 'Sharing_Service' ) && ! include_once JETPACK__PLUGIN_DIR . 'modules/sharedaddy/sharing-service.php' ) {
return new WP_Error( 'invalid_param', esc_html__( 'Failed loading required dependency Sharing_Service.', 'jetpack' ) );
}
if ( ( ! empty( $value['sharing_name'] ) && ! is_string( $value['sharing_name'] ) )
|| ( ! empty( $value['sharing_url'] ) && ! is_string( $value['sharing_url'] ) )
|| ( ! empty( $value['sharing_icon'] ) && ! is_string( $value['sharing_icon'] ) ) ) {
return new WP_Error(
'invalid_param',
sprintf(
/* Translators: Placeholder is a parameter name. */
esc_html__( '%s needs sharing name, url and icon.', 'jetpack' ),
$param
)
);
}
return true;
}
/**
* Validates that the parameter is a custom sharing service ID like 'custom-1461976264'.
*
* @since 4.3.0
*
* @param string $value Value to check.
* @param WP_REST_Request $request The request sent to the WP REST API.
* @param string $param Name of the parameter passed to endpoint holding $value.
*
* @return bool|WP_Error
*/
public static function validate_custom_service_id( $value, $request, $param ) {
if ( ! empty( $value ) && ( ! is_string( $value ) || ! preg_match( '/custom\-[0-1]+/i', $value ) ) ) {
return new WP_Error(
'invalid_param',
sprintf(
/* Translators: Placeholder is a parameter name. */
esc_html__( "%s must be a string prefixed with 'custom-' and followed by a numeric ID.", 'jetpack' ),
$param
)
);
}
if ( ! class_exists( 'Sharing_Service' ) && ! include_once JETPACK__PLUGIN_DIR . 'modules/sharedaddy/sharing-service.php' ) {
return new WP_Error( 'invalid_param', esc_html__( 'Failed loading required dependency Sharing_Service.', 'jetpack' ) );
}
$sharer = new Sharing_Service();
$services = $sharer->get_all_services();
if ( ! empty( $value ) && ! isset( $services[ $value ] ) ) {
return new WP_Error(
'invalid_param',
sprintf(
/* Translators: Placeholder is a parameter name. */
esc_html__( '%s is not a registered custom sharing service.', 'jetpack' ),
$param
)
);
}
return true;
}
/**
* Validates that the parameter is a Twitter username or empty string (to be able to clear the field).
*
* @since 4.3.0
*
* @param string $value Value to check.
* @param WP_REST_Request $request The request sent to the WP REST API.
* @param string $param Name of the parameter passed to endpoint holding $value.
*
* @return bool|WP_Error
*/
public static function validate_twitter_username( $value, $request, $param ) {
if ( ! empty( $value ) && ( ! is_string( $value ) || ! preg_match( '/^@?\w{1,15}$/i', $value ) ) ) {
return new WP_Error(
'invalid_param',
sprintf(
/* Translators: Placeholder is a twitter name. */
esc_html__( '%s must be a Twitter username.', 'jetpack' ),
$param
)
);
}
return true;
}
/**
* Validates that the parameter is a string.
*
* @since 4.3.0
*
* @param string $value Value to check.
* @param WP_REST_Request $request The request sent to the WP REST API.
* @param string $param Name of the parameter passed to endpoint holding $value.
*
* @return bool|WP_Error
*/
public static function validate_string( $value, $request, $param ) {
if ( ! is_string( $value ) ) {
return new WP_Error(
'invalid_param',
sprintf(
/* Translators: Placeholder is a parameter name. */
esc_html__( '%s must be a string.', 'jetpack' ),
$param
)
);
}
return true;
}
/**
* Validates that the parameter is an array of strings.
*
* @param array $value Value to check.
* @param WP_REST_Request $request The request sent to the WP REST API.
* @param string $param Name of the parameter passed to the endpoint holding $value.
*
* @return bool|WP_Error
*/
public static function validate_array_of_strings( $value, $request, $param ) {
foreach ( $value as $array_item ) {
$validate = self::validate_string( $array_item, $request, $param );
if ( is_wp_error( $validate ) ) {
return $validate;
}
}
return true;
}
/**
* Validates the subscription_options parameter.
*
* @param array $values Value to check.
*
* @return bool|WP_Error
*/
public static function validate_subscription_options( $values ) {
if ( is_object( $values ) ) {
return new WP_Error(
'invalid_param',
/* Translators: subscription_options is a variable name, and shouldn't be translated. */
esc_html__( 'subscription_options must be an object.', 'jetpack' )
);
}
foreach ( array_keys( $values ) as $key ) {
if ( ! in_array( $key, array( 'welcome', 'invitation', 'comment_follow' ), true ) ) {
return new WP_Error(
'invalid_param',
sprintf(
/* Translators: Placeholder is the invalid param being sent. */
esc_html__( '%s is not one of the allowed members of subscription_options.', 'jetpack' ),
$key
)
);
}
}
return true;
}
/**
* Validates that the parameter is an array.
*
* @param array $values Value to check.
* @param WP_REST_Request $request The request sent to the WP REST API.
* @param string $param Name of the parameter passed to the endpoint holding $value.
*
* @return bool|WP_Error
*/
public static function validate_array( $values, $request, $param ) {
if ( ! is_array( $values ) ) {
return new WP_Error(
'invalid_param',
sprintf(
/* Translators: Placeholder is a parameter name. */
esc_html__( '%s must be an object.', 'jetpack' ),
$param
)
);
}
return true;
}
/**
* If for some reason the roles allowed to see Stats are empty (for example, user tampering with checkboxes),
* return an array with only 'administrator' as the allowed role and save it for 'roles' option.
*
* @since 4.3.0
*
* @param string|bool $value Value to check.
*
* @return bool|array
*/
public static function sanitize_stats_allowed_roles( $value ) {
if ( empty( $value ) ) {
return array( 'administrator' );
}
return $value;
}
/**
* Get the currently accessed route and return the module slug in it.
*
* @since 4.3.0
*
* @param string $route Regular expression for the endpoint with the module slug to return.
*
* @return array|string
*/
public static function get_module_requested( $route = '/module/(?P<slug>[a-z\-]+)' ) {
if ( empty( $GLOBALS['wp']->query_vars['rest_route'] ) ) {
return '';
}
preg_match( "#$route#", $GLOBALS['wp']->query_vars['rest_route'], $module );
if ( empty( $module['slug'] ) ) {
return '';
}
return $module['slug'];
}
/**
* Adds extra information for modules.
*
* @since 4.3.0
*
* @param string|array $modules Can be a single module or a list of modules.
* @param null|string $slug Slug of the module in the first parameter.
*
* @return array|string
*/
public static function prepare_modules_for_response( $modules = '', $slug = null ) {
global $wp_rewrite;
/** This filter is documented in modules/sitemaps/sitemaps.php */
$location = apply_filters( 'jetpack_sitemap_location', '' );
if ( $wp_rewrite->using_index_permalinks() ) {
$sitemap_url = home_url( '/index.php' . $location . '/sitemap.xml' );
$news_sitemap_url = home_url( '/index.php' . $location . '/news-sitemap.xml' );
} elseif ( $wp_rewrite->using_permalinks() ) {
$sitemap_url = home_url( $location . '/sitemap.xml' );
$news_sitemap_url = home_url( $location . '/news-sitemap.xml' );
} else {
$sitemap_url = home_url( $location . '/?jetpack-sitemap=sitemap.xml' );
$news_sitemap_url = home_url( $location . '/?jetpack-sitemap=news-sitemap.xml' );
}
if ( $slug === null && isset( $modules['sitemaps'] ) ) {
// Is a list of modules.
$modules['sitemaps']['extra']['sitemap_url'] = $sitemap_url;
$modules['sitemaps']['extra']['news_sitemap_url'] = $news_sitemap_url;
} elseif ( 'sitemaps' === $slug ) {
// It's a single module.
$modules['extra']['sitemap_url'] = $sitemap_url;
$modules['extra']['news_sitemap_url'] = $news_sitemap_url;
}
return $modules;
}
/**
* Remove 'validate_callback' item from options available for module.
* Fetch current option value and add to array of module options.
* Prepare values of module options that need special handling, like those saved in wpcom.
*
* @since 4.3.0
*
* @param string $module Module slug.
* @return array
*/
public static function prepare_options_for_response( $module = '' ) {
$options = self::get_updateable_data_list( $module );
if ( ! is_array( $options ) || empty( $options ) ) {
return $options;
}
// Some modules need special treatment.
switch ( $module ) {
case 'monitor':
// Status of user notifications.
$options['monitor_receive_notifications']['current_value'] = self::cast_value( self::get_remote_value( 'monitor', 'monitor_receive_notifications' ), $options['monitor_receive_notifications'] );
break;
case 'post-by-email':
// Email address.
$options['post_by_email_address']['current_value'] = self::cast_value( self::get_remote_value( 'post-by-email', 'post_by_email_address' ), $options['post_by_email_address'] );
break;
case 'protect':
// Protect.
$options['jetpack_protect_key']['current_value'] = get_site_option( 'jetpack_protect_key', false );
$options['jetpack_protect_global_whitelist']['current_value'] = Brute_Force_Protection_Shared_Functions::format_allow_list();
break;
case 'related-posts':
// It's local, but it must be broken apart since it's saved as an array.
$options = self::split_options( $options, Jetpack_Options::get_option( 'relatedposts' ) );
break;
case 'verification-tools':
// It's local, but it must be broken apart since it's saved as an array.
$options = self::split_options( $options, get_option( 'verification_services_codes' ) );
break;
case 'google-analytics':
$wga = get_option( 'jetpack_wga' );
$code = '';
if ( is_array( $wga ) && array_key_exists( 'code', $wga ) ) {
$code = $wga['code'];
}
$options['google_analytics_tracking_id']['current_value'] = $code;
break;
case 'sharedaddy':
// It's local, but it must be broken apart since it's saved as an array.
if ( ! class_exists( 'Sharing_Service' ) && ! include_once JETPACK__PLUGIN_DIR . 'modules/sharedaddy/sharing-service.php' ) {
break;
}
$sharer = new Sharing_Service();
$options = self::split_options( $options, $sharer->get_global_options() );
$options['sharing_services']['current_value'] = $sharer->get_blog_services();
$other_sharedaddy_options = array( 'jetpack-twitter-cards-site-tag', 'sharedaddy_disable_resources', 'sharing_delete_service' );
foreach ( $other_sharedaddy_options as $key ) {
$default_value = isset( $options[ $key ]['default'] ) ? $options[ $key ]['default'] : '';
$current_value = get_option( $key, $default_value );
$options[ $key ]['current_value'] = self::cast_value( $current_value, $options[ $key ] );
}
break;
case 'stats':
// It's local, but it must be broken apart since it's saved as an array.
$options = self::split_options( $options, Stats_Options::get_options() );
break;
default:
// These option are just stored as plain WordPress options.
foreach ( $options as $key => $value ) {
$default_value = isset( $options[ $key ]['default'] ) ? $options[ $key ]['default'] : '';
$current_value = get_option( $key, $default_value );
$options[ $key ]['current_value'] = self::cast_value( $current_value, $options[ $key ] );
}
}
// At this point some options have current_value not set because they're options
// that only get written on update, so we set current_value to the default one.
foreach ( $options as $key => $value ) {
// We don't need validate_callback in the response.
if ( isset( $options[ $key ]['validate_callback'] ) ) {
unset( $options[ $key ]['validate_callback'] );
}
$default_value = isset( $options[ $key ]['default'] ) ? $options[ $key ]['default'] : '';
if ( ! array_key_exists( 'current_value', $options[ $key ] ) ) {
$options[ $key ]['current_value'] = self::cast_value( $default_value, $options[ $key ] );
}
}
return $options;
}
/**
* Splits module options saved as arrays like relatedposts or verification_services_codes into separate options to be returned in the response.
*
* @since 4.3.0
*
* @param array $separate_options Array of options admitted by the module.
* @param array $grouped_options Option saved as array to be splitted.
* @param string $prefix Optional prefix for the separate option keys.
*
* @return array
*/
public static function split_options( $separate_options, $grouped_options, $prefix = '' ) {
if ( is_array( $grouped_options ) ) {
foreach ( $grouped_options as $key => $value ) {
$option_key = $prefix . $key;
if ( isset( $separate_options[ $option_key ] ) ) {
$separate_options[ $option_key ]['current_value'] = self::cast_value( $grouped_options[ $key ], $separate_options[ $option_key ] );
}
}
}
return $separate_options;
}
/**
* Perform a casting to the value specified in the option definition.
*
* @since 4.3.0
*
* @param mixed $value Value to cast to the proper type.
* @param array $definition Type to cast the value to.
*
* @return bool|float|int|string
*/
public static function cast_value( $value, $definition ) {
if ( 'NULL' === $value ) {
return null;
}
if ( isset( $definition['type'] ) ) {
switch ( $definition['type'] ) {
case 'boolean':
if ( 'true' === $value || 'on' === $value ) {
return true;
} elseif ( 'false' === $value || 'off' === $value ) {
return false;
}
$value = (bool) $value;
break;
case 'integer':
$value = (int) $value;
break;
case 'float':
$value = (float) $value;
break;
case 'string':
$value = (string) $value;
break;
}
}
return $value;
}
/**
* Get a value not saved locally.
*
* @since 4.3.0
*
* @param string $module Module slug.
* @param string $option Option name.
*
* @return bool Whether user is receiving notifications or not.
*/
public static function get_remote_value( $module, $option ) {
if ( in_array( $module, array( 'post-by-email' ), true ) ) {
$option .= get_current_user_id();
}
// If option doesn't exist, 'does_not_exist' will be returned.
$value = get_option( $option, 'does_not_exist' );
// If option exists, just return it.
if ( 'does_not_exist' !== $value ) {
return $value;
}
// Only check a remote option if Jetpack is connected.
if ( ! Jetpack::is_connection_ready() ) {
return false;
}
// Do what is necessary for each module.
switch ( $module ) {
case 'monitor':
// Load the class to use the method. If class can't be found, do nothing.
if ( ! class_exists( 'Jetpack_Monitor' ) && ! include_once Jetpack::get_module_path( $module ) ) {
return false;
}
$value = Jetpack_Monitor::user_receives_notifications( false );
break;
case 'post-by-email':
// Load the class to use the method. If class can't be found, do nothing.
if ( ! class_exists( 'Jetpack_Post_By_Email' ) && ! include_once Jetpack::get_module_path( $module ) ) {
return false;
}
$value = Jetpack_Post_By_Email::init()->get_post_by_email_address();
if ( null === $value ) {
$value = 'NULL'; // sentinel value so it actually gets set.
}
break;
}
// Normalize value to boolean.
if ( is_wp_error( $value ) || $value === null ) {
$value = false;
}
// Save option to use it next time.
update_option( $option, $value );
return $value;
}
/**
* Get number of plugin updates available.
*
* @since 4.3.0
*
* @return mixed|WP_Error Number of plugin updates available. Otherwise, a WP_Error instance with the corresponding error.
*/
public static function get_plugin_update_count() {
$updates = wp_get_update_data();
if ( isset( $updates['counts'] ) && isset( $updates['counts']['plugins'] ) ) {
$count = $updates['counts']['plugins'];
if ( 0 === $count ) {
$response = array(
'code' => 'success',
'message' => esc_html__( 'All plugins are up-to-date. Keep up the good work!', 'jetpack' ),
'count' => 0,
);
} else {
$response = array(
'code' => 'updates-available',
'message' => esc_html(
sprintf(
/* Translators: placeholders are numbers. */
_n( '%s plugin needs updating.', '%s plugins need updating.', $count, 'jetpack' ),
$count
)
),
'count' => $count,
);
}
return rest_ensure_response( $response );
}
return new WP_Error( 'not_found', esc_html__( 'Could not check updates for plugins on this site.', 'jetpack' ), array( 'status' => 404 ) );
}
/**
* Get plugins data in site.
*
* @since 4.2.0
*
* @return WP_REST_Response|WP_Error List of plugins in the site. Otherwise, a WP_Error instance with the corresponding error.
*/
public static function get_plugins() {
$plugins = Plugins_Installer::get_plugins();
if ( ! empty( $plugins ) ) {
return rest_ensure_response( $plugins );
}
return new WP_Error( 'not_found', esc_html__( 'Unable to list plugins.', 'jetpack' ), array( 'status' => 404 ) );
}
/**
* Install a specific plugin and optionally activates it.
*
* @since 8.9.0
*
* @param WP_REST_Request $request {
* Array of parameters received by request.
*
* @type string $slug Plugin slug.
* @type string $status Plugin status.
* @type string $source Where did the plugin installation request originate.
* }
*
* @return WP_REST_Response|WP_Error A response object if the installation and / or activation was successful, or a WP_Error object if it failed.
*/
public static function install_plugin( $request ) {
$plugin = stripslashes( $request['slug'] );
// Let's make sure the plugin isn't already installed.
$plugin_id = Plugins_Installer::get_plugin_id_by_slug( $plugin );
// If not installed, let's install now.
if ( ! $plugin_id ) {
$result = Plugins_Installer::install_plugin( $plugin );
if ( is_wp_error( $result ) ) {
return new WP_Error(
'install_plugin_failed',
sprintf(
/* translators: %1$s: plugin name. -- %2$s: error message. */
__( 'Unable to install %1$s: %2$s ', 'jetpack' ),
$plugin,
$result->get_error_message()
),
array( 'status' => 500 )
);
}
}
/*
* We may want to activate the plugin as well.
* Let's check for the status parameter in the request to find out.
* If none was passed (or something other than active), let's return now.
*/
if ( empty( $request['status'] ) || 'active' !== $request['status'] ) {
return rest_ensure_response(
array(
'code' => 'success',
'message' => esc_html(
sprintf(
/* translators: placeholder is a plugin name. */
__( 'Installed %s', 'jetpack' ),
$plugin
)
),
)
);
}
/*
* Proceed with plugin activation.
* Let's check again for the plugin's ID if we don't already have it.
*/
if ( ! $plugin_id ) {
$plugin_id = Plugins_Installer::get_plugin_id_by_slug( $plugin );
if ( ! $plugin_id ) {
return new WP_Error(
'unable_to_determine_installed_plugin',
__( 'Unable to determine what plugin was installed.', 'jetpack' ),
array( 'status' => 500 )
);
}
}
$source = ! empty( $request['source'] ) ? stripslashes( $request['source'] ) : 'rest_api';
$plugin_args = array(
'plugin' => substr( $plugin_id, 0, - 4 ),
'status' => 'active',
'source' => $source,
);
return self::activate_plugin( $plugin_args );
}
/**
* Activate a specific plugin.
*
* @since 8.9.0
*
* @param WP_REST_Request $request {
* Array of parameters received by request.
*
* @type string $plugin Plugin long slug (slug/index-file)
* @type string $status Plugin status. We only support active in Jetpack.
* @type string $source Where did the plugin installation request originate.
* }
*
* @return WP_REST_Response|WP_Error A response object if the activation was successful, or a WP_Error object if the activation failed.
*/
public static function activate_plugin( $request ) {
/*
* We need an "active" status parameter to be passed to the request
* just like the core plugins endpoind we'll eventually switch to.
*/
if ( empty( $request['status'] ) || 'active' !== $request['status'] ) {
return new WP_Error(
'missing_status_parameter',
esc_html__( 'Status parameter missing.', 'jetpack' ),
array( 'status' => 403 )
);
}
$plugins = Plugins_Installer::get_plugins();
if ( empty( $plugins ) ) {
return new WP_Error( 'no_plugins_found', esc_html__( 'This site has no plugins.', 'jetpack' ), array( 'status' => 404 ) );
}
if ( empty( $request['plugin'] ) ) {
return new WP_Error( 'no_plugin_specified', esc_html__( 'You did not specify a plugin.', 'jetpack' ), array( 'status' => 404 ) );
}
$plugin = $request['plugin'] . '.php';
// Is the plugin installed?
if ( ! array_key_exists( $plugin, $plugins ) ) {
return new WP_Error(
'plugin_not_found',
esc_html(
sprintf(
/* translators: placeholder is a plugin slug. */
__( 'Plugin %s is not installed.', 'jetpack' ),
$plugin
)
),
array( 'status' => 404 )
);
}
// Is the plugin active already?
$status = Plugins_Installer::get_plugin_status( $plugin );
if ( in_array( $status, array( 'active', 'network-active' ), true ) ) {
return new WP_Error(
'plugin_already_active',
esc_html(
sprintf(
/* translators: placeholder is a plugin slug. */
__( 'Plugin %s is already active.', 'jetpack' ),
$plugin
)
),
array( 'status' => 404 )
);
}
// Now try to activate the plugin.
$activated = activate_plugin( $plugin );
if ( is_wp_error( $activated ) ) {
return $activated;
} else {
$source = ! empty( $request['source'] ) ? stripslashes( $request['source'] ) : 'rest_api';
/**
* Fires when Jetpack installs a plugin for you.
*
* @since 8.9.0
*
* @param string $plugin_file Plugin file.
* @param string $source Where did the plugin installation originate.
*/
do_action( 'jetpack_activated_plugin', $plugin, $source );
return rest_ensure_response(
array(
'code' => 'success',
'message' => sprintf(
/* translators: placeholder is a plugin name. */
esc_html__( 'Activated %s', 'jetpack' ),
$plugin
),
)
);
}
}
/**
* Check if a plugin can be activated.
*
* @since 8.9.0
*
* @param string|bool $value Value to check.
* @param WP_REST_Request $request The request sent to the WP REST API.
* @param string $param Name of the parameter passed to endpoint holding $value.
*/
public static function validate_activate_plugin( $value, $request, $param ) { // phpcs:ignore VariableAnalysis.CodeAnalysis.VariableAnalysis.UnusedVariable
return 'active' === $value;
}
/**
* Get data about the queried plugin. Currently it only returns whether the plugin is active or not.
*
* @since 4.2.0
*
* @param WP_REST_Request $request {
* Array of parameters received by request.
*
* @type string $slug Plugin slug with the syntax 'plugin-directory/plugin-main-file.php'.
* }
*
* @return bool|WP_Error True if module was activated. Otherwise, a WP_Error instance with the corresponding error.
*/
public static function get_plugin( $request ) {
$plugins = Plugins_Installer::get_plugins();
if ( empty( $plugins ) ) {
return new WP_Error( 'no_plugins_found', esc_html__( 'This site has no plugins.', 'jetpack' ), array( 'status' => 404 ) );
}
$plugin = stripslashes( $request['plugin'] );
if ( ! array_key_exists( $plugin, $plugins ) ) {
return new WP_Error(
'plugin_not_found',
esc_html(
sprintf(
/* Translators: placeholder is a plugin name. */
__( 'Plugin %s is not installed.', 'jetpack' ),
$plugin
)
),
array( 'status' => 404 )
);
}
$plugin_data = $plugins[ $plugin ];
$plugin_data['active'] = in_array( Plugins_Installer::get_plugin_status( $plugin ), array( 'active', 'network-active' ), true );
return rest_ensure_response(
array(
'code' => 'success',
'message' => esc_html__( 'Plugin found.', 'jetpack' ),
'data' => $plugin_data,
)
);
}
/**
* Returns the Jetpack CRM data.
*
* @return WP_REST_Response A response object containing the Jetpack CRM data.
*/
public static function get_jetpack_crm_data() {
$jetpack_crm_data = ( new Jetpack_CRM_Data() )->get_crm_data();
return rest_ensure_response( $jetpack_crm_data );
}
/**
* Activates Jetpack CRM's Jetpack Forms extension.
*
* @param WP_REST_Request $request The request sent to the WP REST API.
* @return WP_REST_Response|WP_Error A response object if the extension activation was successful, or a WP_Error object if it failed.
*/
public static function activate_crm_jetpack_forms_extension( $request ) {
if ( ! isset( $request['extension'] ) || 'jetpackforms' !== $request['extension'] ) {
return new WP_Error( 'invalid_param', esc_html__( 'Missing or invalid extension parameter.', 'jetpack' ), array( 'status' => 404 ) );
}
$result = ( new Jetpack_CRM_Data() )->activate_crm_jetpackforms_extension();
if ( is_wp_error( $result ) ) {
return $result;
}
return rest_ensure_response( array( 'code' => 'success' ) );
}
/**
* Verifies that the current user has the required permission for accessing the CRM data.
*
* @return true|WP_Error Returns true if the user has the required capability, else a WP_Error object.
*/
public static function jetpack_crm_data_permission_check() {
if ( current_user_can( 'publish_posts' ) ) {
return true;
}
return new WP_Error(
'invalid_user_permission_jetpack_crm_data',
REST_Connector::get_user_permissions_error_msg(),
array( 'status' => rest_authorization_required_code() )
);
}
/**
* Verifies that the current user has the required capability for activating Jetpack CRM extensions.
*
* @return true|WP_Error Returns true if the user has the required capability, else a WP_Error object.
*/
public static function activate_crm_extensions_permission_check() {
// phpcs:ignore WordPress.WP.Capabilities.Unknown
if ( current_user_can( 'admin_zerobs_manage_options' ) ) {
return true;
}
return new WP_Error(
'invalid_user_permission_activate_jetpack_crm_ext',
REST_Connector::get_user_permissions_error_msg(),
array( 'status' => rest_authorization_required_code() )
);
}
/**
* Set hasSeenWCConnectionModal to true when the site has displayed it
*
* @since 10.4.0
*
* @return bool
*/
public static function set_has_seen_wc_connection_modal() {
$updated_option = Jetpack_Options::update_option( 'has_seen_wc_connection_modal', true );
return rest_ensure_response( array( 'success' => $updated_option ) );
}
/**
* Fetch introdution offers.
*
* @since 10.9
*
* @return array|WP_Error
*/
public static function get_intro_offers() {
$site_id = Jetpack_Options::get_option( 'id' );
if ( ! $site_id ) {
return new WP_Error(
'site_id_missing',
esc_html__( 'Site ID is missing.', 'jetpack' ),
array( 'status' => 400 )
);
}
$response = Client::wpcom_json_api_request_as_user(
'/introductory-offers',
'2',
array(
'method' => 'GET',
'headers' => array(
'X-Forwarded-For' => ( new Visitor() )->get_ip( true ),
),
)
);
$response_code = wp_remote_retrieve_response_code( $response );
if ( 200 !== $response_code ) {
return new WP_Error(
'intro_offers_fetch_failed',
esc_html__( 'Could not retrieve intro offers.', 'jetpack' ),
array( 'status' => $response_code )
);
}
$data = json_decode( wp_remote_retrieve_body( $response ) );
if ( ! isset( $data ) ) {
return new WP_Error(
'intro_offers_error',
esc_html__( 'Could not parse intro offers.', 'jetpack' ),
array( 'status' => 204 ) // no content.
);
}
return rest_ensure_response(
array(
'code' => 'success',
'data' => $data,
)
);
}
/**
* Return the list of available features.
*
* @return array
*/
public static function get_features_available() {
$raw_modules = Jetpack::get_available_modules();
$modules = array();
foreach ( $raw_modules as $module ) {
$modules[] = Jetpack::get_module_slug( $module );
}
return $modules;
}
/**
* Returns what features are enabled. Uses the slug of the modules files.
*
* @return array
*/
public static function get_features_enabled() {
$raw_modules = Jetpack::get_active_modules();
$modules = array();
foreach ( $raw_modules as $module ) {
$modules[] = Jetpack::get_module_slug( $module );
}
return $modules;
}
/**
* Verify that the API client is allowed to replace user token.
*
* @since 1.29.0
*
* @return bool|WP_Error
*/
public static function get_features_permission_check() {
if ( ! Rest_Authentication::is_signed_with_blog_token() ) {
$message = esc_html__(
'You do not have the correct user permissions to perform this action. Please contact your site admin if you think this is a mistake.',
'jetpack'
);
return new WP_Error( 'invalid_permission_fetch_features', $message, array( 'status' => rest_authorization_required_code() ) );
}
return true;
}
} // class end