WPCOM_REST_API_V2_Endpoint_Transient

Complexity

Total Complexity

7

Size/Duplication

Total Lines	72
Duplicated Lines	0 %

Coupling/Cohesion

Components	0
Dependencies	1

Importance

Changes

0

4 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	5	1
A	register_routes()	0	22	1
A	delete_transient()	0	5	1
A	delete_transient_permissions_check()	0	15	4

<?php
/**
 * REST API endpoint for editing Jetpack Transients.
 *
 * @package automattic/jetpack
 * @since 9.7.0
 */

/**
 * Jetpack transients API.
 *
 * @since 9.7.0
 */
class WPCOM_REST_API_V2_Endpoint_Transient extends WP_REST_Controller {
	/**
	 * Constructor.
	 */
	public function __construct() {
		$this->namespace = 'wpcom/v2';
		$this->rest_base = 'transients';
		add_action( 'rest_api_init', array( $this, 'register_routes' ) );
	}

	/**
	 * Called automatically on `rest_api_init()`.
	 */
	public function register_routes() {
		// DELETE /sites/<blog-id>/transients/$name route.
		register_rest_route(
			$this->namespace,
			'/' . $this->rest_base . '/(?P<name>\w{1,172})',
			array(
				array(
					'methods'             => WP_REST_Server::DELETABLE,
					'callback'            => array( $this, 'delete_transient' ),
					'permission_callback' => array( $this, 'delete_transient_permissions_check' ),
					'args'                => array(
						'name' => array(
							'description'       => __( 'The name of the transient to delete.', 'jetpack' ),
							'required'          => true,
							'type'              => 'string',
							'sanitize_callback' => 'sanitize_text_field',
						),
					),
				),
			)
		);
	}

	/**
	 * Delete transient callback.
	 *
	 * @param \WP_REST_Request $request Full details about the request.
	 * @return array
	 */
	public function delete_transient( \WP_REST_Request $request ) {
		return array(
			'success' => delete_transient( $request->get_param( 'name' ) ),
		);
	}

	/**
	 * Check if the user has read access, the transient name starts with
	 * "jetpack_connected_user_data_", and that the user is editing
	 * their own transient.
	 *
	 * @param \WP_REST_Request $request Full details about the request.
	 * @return bool|WP_Error
	 */
	public function delete_transient_permissions_check( \WP_REST_Request $request ) {
		$transient_name = $request->get_param( 'name' );

		if ( current_user_can( 'read' ) &&
			false !== strpos( $transient_name, 'jetpack_connected_user_data_' ) &&
			get_current_user_id() === (int) substr( $transient_name, 28 ) ) {
				return true;
		} else {
			return new WP_Error(
				'authorization_required',

The call to WP_Error::__construct() has too many arguments starting with 'authorization_required'.

				__( 'Sorry, you are not allowed to delete this transient.', 'jetpack' ),
				array( 'status' => 403 )
			);
		}
	}
}

wpcom_rest_api_v2_load_plugin( 'WPCOM_REST_API_V2_Endpoint_Transient' );