The conditionals. */ public static function get_conditionals() { return [ AI_Conditional::class, Old_Premium_AI_Conditional::class ]; } /** * Class constructor. * * @param Consent_Handler $consent_handler The consent handler. * @param Token_Manager $token_manager The token manager. * @param Logger $logger The logger. */ public function __construct( Consent_Handler $consent_handler, Token_Manager $token_manager, Logger $logger ) { $this->consent_handler = $consent_handler; // @TODO: Remove the token manager as soon as we don't care about BC, because it's no longer used. $this->token_manager = $token_manager; $this->logger = $logger; } /** * Registers routes with WordPress. * * @return void */ public function register_routes() { \register_rest_route( self::ROUTE_NAMESPACE, self::ROUTE_PREFIX, [ 'methods' => 'POST', 'args' => [ 'consent' => [ 'required' => true, 'type' => 'boolean', 'description' => 'Whether the consent to use AI-based services has been given by the user.', ], ], 'callback' => [ $this, 'consent' ], 'permission_callback' => [ $this, 'check_permissions' ], ], ); } /** * Runs the callback to store the consent given by the user to use AI-based services. * * @param WP_REST_Request $request The request object. * * @return WP_REST_Response The response of the callback action. */ public function consent( WP_REST_Request $request ): WP_REST_Response { $user_id = \get_current_user_id(); $consent = (bool) $request->get_param( 'consent' ); try { if ( $consent ) { // Store the consent at user level. $this->consent_handler->grant_consent( $user_id ); } else { // Revoke the consent locally and remotely (this also invalidates the JWT tokens). $this->consent_handler->revoke_consent( $user_id ); } } catch ( Remote_Request_Exception | RuntimeException $e ) { $status_code = ( $e instanceof Remote_Request_Exception ) ? $e->getCode() : 500; $this->logger->error( $e->getMessage(), [ 'exception' => $e ] ); return new WP_REST_Response( ( $consent ) ? 'Failed to give consent.' : 'Failed to revoke consent.', $status_code ); } return new WP_REST_Response( ( $consent ) ? 'Consent successfully given.' : 'Consent successfully revoked.' ); } /** * Checks: * - if the user is logged * - if the user can edit posts * * @return bool Whether the user is logged in, can edit posts and the feature is active. */ public function check_permissions(): bool { $user = \wp_get_current_user(); if ( $user === null || $user->ID < 1 ) { return false; } return \user_can( $user, 'edit_posts' ); } }