<?php

/**

 * REST API: WP_REST_Font_Faces_Controller class

 *

 * @package WordPress

 * @subpackage REST_API

 * @since 6.5.0

 */

/**

 * Class to access font faces through the REST API.

 */

class WP_REST_Font_Faces_Controller extends WP_REST_Posts_Controller {

	/**

	 * The latest version of theme.json schema supported by the controller.

	 *

	 * @since 6.5.0

	 * @var int

	 */

	const LATEST_THEME_JSON_VERSION_SUPPORTED = 3;

	/**

	 * Whether the controller supports batching.

	 *

	 * @since 6.5.0

	 * @var false

	 */

	protected $allow_batch = false;

	/**

	 * Registers the routes for posts.

	 *

	 * @since 6.5.0

	 *

	 * @see register_rest_route()

	 */

	public function register_routes() {

		register_rest_route(

			$this->namespace,

			'/' . $this->rest_base,

			array(

				'args'   => array(

					'font_family_id' => array(

						'description' => __( 'The ID for the parent font family of the font face.' ),

						'type'        => 'integer',

						'required'    => true,

					),

				),

				array(

					'methods'             => WP_REST_Server::READABLE,

					'callback'            => array( $this, 'get_items' ),

					'permission_callback' => array( $this, 'get_items_permissions_check' ),

					'args'                => $this->get_collection_params(),

				),

				array(

					'methods'             => WP_REST_Server::CREATABLE,

					'callback'            => array( $this, 'create_item' ),

					'permission_callback' => array( $this, 'create_item_permissions_check' ),

					'args'                => $this->get_create_params(),

				),

				'schema' => array( $this, 'get_public_item_schema' ),

			)

		);

		register_rest_route(

			$this->namespace,

			'/' . $this->rest_base . '/(?P<id>[\d]+)',

			array(

				'args'   => array(

					'font_family_id' => array(

						'description' => __( 'The ID for the parent font family of the font face.' ),

						'type'        => 'integer',

						'required'    => true,

					),

					'id'             => array(

						'description' => __( 'Unique identifier for the font face.' ),

						'type'        => 'integer',

						'required'    => true,

					),

				),

				array(

					'methods'             => WP_REST_Server::READABLE,

					'callback'            => array( $this, 'get_item' ),

					'permission_callback' => array( $this, 'get_item_permissions_check' ),

					'args'                => array(

						'context' => $this->get_context_param( array( 'default' => 'view' ) ),

					),

				),

				array(

					'methods'             => WP_REST_Server::DELETABLE,

					'callback'            => array( $this, 'delete_item' ),

					'permission_callback' => array( $this, 'delete_item_permissions_check' ),

					'args'                => array(

						'force' => array(

							'type'        => 'boolean',

							'default'     => false,

							'description' => __( 'Whether to bypass Trash and force deletion.', 'default' ),

						),

					),

				),

				'schema' => array( $this, 'get_public_item_schema' ),

			)

		);

	}

	/**

	 * Checks if a given request has access to font faces.

	 *

	 * @since 6.5.0

	 *

	 * @param WP_REST_Request $request Full details about the request.

	 * @return true|WP_Error True if the request has read access, WP_Error object otherwise.

	 */

	public function get_items_permissions_check( $request ) {

		$post_type = get_post_type_object( $this->post_type );

		if ( ! current_user_can( $post_type->cap->read ) ) {

			return new WP_Error(

				'rest_cannot_read',

				__( 'Sorry, you are not allowed to access font faces.' ),

				array( 'status' => rest_authorization_required_code() )

			);

		}

		return true;

	}

	/**

	 * Checks if a given request has access to a font face.

	 *

	 * @since 6.5.0

	 *

	 * @param WP_REST_Request $request Full details about the request.

	 * @return true|WP_Error True if the request has read access, WP_Error object otherwise.

	 */

	public function get_item_permissions_check( $request ) {

		$post = $this->get_post( $request['id'] );

		if ( is_wp_error( $post ) ) {

			return $post;

		}

		if ( ! current_user_can( 'read_post', $post->ID ) ) {

			return new WP_Error(

				'rest_cannot_read',

				__( 'Sorry, you are not allowed to access this font face.' ),

				array( 'status' => rest_authorization_required_code() )

			);

		}

		return true;

	}

	/**

	 * Validates settings when creating a font face.

	 *

	 * @since 6.5.0

	 *

	 * @param string          $value   Encoded JSON string of font face settings.

	 * @param WP_REST_Request $request Request object.

	 * @return true|WP_Error True if the settings are valid, otherwise a WP_Error object.

	 */

	public function validate_create_font_face_settings( $value, $request ) {

		$settings = json_decode( $value, true );

		// Check settings string is valid JSON.

		if ( null === $settings ) {

			return new WP_Error(

				'rest_invalid_param',

				__( 'font_face_settings parameter must be a valid JSON string.' ),

				array( 'status' => 400 )

			);

		}

		// Check that the font face settings match the theme.json schema.

		$schema             = $this->get_item_schema()['properties']['font_face_settings'];

		$has_valid_settings = rest_validate_value_from_schema( $settings, $schema, 'font_face_settings' );

		if ( is_wp_error( $has_valid_settings ) ) {

			$has_valid_settings->add_data( array( 'status' => 400 ) );

			return $has_valid_settings;

		}

		// Check that none of the required settings are empty values.

		$required = $schema['required'];

		foreach ( $required as $key ) {

			if ( isset( $settings[ $key ] ) && ! $settings[ $key ] ) {

				return new WP_Error(

					'rest_invalid_param',

					/* translators: %s: Name of the missing font face settings parameter, e.g. "font_face_settings[src]". */

					sprintf( __( '%s cannot be empty.' ), "font_face_setting[ $key ]" ),

					array( 'status' => 400 )

				);

			}

		}

		$srcs  = is_array( $settings['src'] ) ? $settings['src'] : array( $settings['src'] );

		$files = $request->get_file_params();

		foreach ( $srcs as $src ) {

			// Check that each src is a non-empty string.

			$src = ltrim( $src );

			if ( empty( $src ) ) {

				return new WP_Error(

					'rest_invalid_param',

					/* translators: %s: Font face source parameter name: "font_face_settings[src]". */

					sprintf( __( '%s values must be non-empty strings.' ), 'font_face_settings[src]' ),

					array( 'status' => 400 )

				);

			}

			// Check that srcs are valid URLs or file references.

			if ( false === wp_http_validate_url( $src ) && ! isset( $files[ $src ] ) ) {

				return new WP_Error(

					'rest_invalid_param',

					/* translators: 1: Font face source parameter name: "font_face_settings[src]", 2: The invalid src value. */

					sprintf( __( '%1$s value "%2$s" must be a valid URL or file reference.' ), 'font_face_settings[src]', $src ),

					array( 'status' => 400 )

				);

			}

		}

		// Check that each file in the request references a src in the settings.

		foreach ( array_keys( $files ) as $file ) {

			if ( ! in_array( $file, $srcs, true ) ) {

				return new WP_Error(

					'rest_invalid_param',

					/* translators: 1: File key (e.g. "file-0") in the request data, 2: Font face source parameter name: "font_face_settings[src]". */

					sprintf( __( 'File %1$s must be used in %2$s.' ), $file, 'font_face_settings[src]' ),

					array( 'status' => 400 )

				);

			}

		}

		return true;

	}

	/**

	 * Sanitizes the font face settings when creating a font face.

	 *

	 * @since 6.5.0

	 *

	 * @param string $value Encoded JSON string of font face settings.

	 * @return array Decoded and sanitized array of font face settings.

	 */

	public function sanitize_font_face_settings( $value ) {

		// Settings arrive as stringified JSON, since this is a multipart/form-data request.

		$settings = json_decode( $value, true );

		$schema   = $this->get_item_schema()['properties']['font_face_settings']['properties'];

		// Sanitize settings based on callbacks in the schema.

		foreach ( $settings as $key => $value ) {

			$sanitize_callback = $schema[ $key ]['arg_options']['sanitize_callback'];

			$settings[ $key ]  = call_user_func( $sanitize_callback, $value );

		}

		return $settings;

	}

	/**

	 * Retrieves a collection of font faces within the parent font family.

	 *

	 * @since 6.5.0

	 *

	 * @param WP_REST_Request $request Full details about the request.

	 * @return WP_REST_Response|WP_Error Response object on success, or WP_Error object on failure.

	 */

	public function get_items( $request ) {

		$font_family = $this->get_parent_font_family_post( $request['font_family_id'] );

		if ( is_wp_error( $font_family ) ) {

			return $font_family;

		}

		return parent::get_items( $request );

	}

	/**

	 * Retrieves a single font face within the parent font family.

	 *

	 * @since 6.5.0

	 *

	 * @param WP_REST_Request $request Full details about the request.

	 * @return WP_REST_Response|WP_Error Response object on success, or WP_Error object on failure.

	 */

	public function get_item( $request ) {

		$post = $this->get_post( $request['id'] );

		if ( is_wp_error( $post ) ) {

			return $post;

		}

		// Check that the font face has a valid parent font family.

		$font_family = $this->get_parent_font_family_post( $request['font_family_id'] );

		if ( is_wp_error( $font_family ) ) {

			return $font_family;

		}

		if ( (int) $font_family->ID !== (int) $post->post_parent ) {

			return new WP_Error(

				'rest_font_face_parent_id_mismatch',

				/* translators: %d: A post id. */

				sprintf( __( 'The font face does not belong to the specified font family with id of "%d".' ), $font_family->ID ),

				array( 'status' => 404 )

			);

		}

		return parent::get_item( $request );

	}

	/**

	 * Creates a font face for the parent font family.

	 *

	 * @since 6.5.0

	 *

	 * @param WP_REST_Request $request Full details about the request.

	 * @return WP_REST_Response|WP_Error Response object on success, or WP_Error object on failure.

	 */

	public function create_item( $request ) {

		$font_family = $this->get_parent_font_family_post( $request['font_family_id'] );

		if ( is_wp_error( $font_family ) ) {

			return $font_family;

		}

		// Settings have already been decoded by ::sanitize_font_face_settings().

		$settings    = $request->get_param( 'font_face_settings' );

		$file_params = $request->get_file_params();

		// Check that the necessary font face properties are unique.

		$query = new WP_Query(

			array(

				'post_type'              => $this->post_type,

				'posts_per_page'         => 1,

				'title'                  => WP_Font_Utils::get_font_face_slug( $settings ),

				'update_post_meta_cache' => false,

				'update_post_term_cache' => false,

			)

		);

		if ( ! empty( $query->posts ) ) {

			return new WP_Error(

				'rest_duplicate_font_face',

				__( 'A font face matching those settings already exists.' ),

				array( 'status' => 400 )

			);

		}

		// Move the uploaded font asset from the temp folder to the fonts directory.

		if ( ! function_exists( 'wp_handle_upload' ) ) {

			require_once ABSPATH . 'wp-admin/includes/file.php';

		}

		$srcs           = is_string( $settings['src'] ) ? array( $settings['src'] ) : $settings['src'];

		$processed_srcs = array();

		$font_file_meta = array();

		foreach ( $srcs as $src ) {

			// If src not a file reference, use it as is.

			if ( ! isset( $file_params[ $src ] ) ) {

				$processed_srcs[] = $src;

				continue;

			}

			$file      = $file_params[ $src ];

			$font_file = $this->handle_font_file_upload( $file );

			if ( is_wp_error( $font_file ) ) {

				return $font_file;

			}

			$processed_srcs[] = $font_file['url'];

			$font_file_meta[] = $this->relative_fonts_path( $font_file['file'] );

		}

		// Store the updated settings for prepare_item_for_database to use.

		$settings['src'] = count( $processed_srcs ) === 1 ? $processed_srcs[0] : $processed_srcs;

		$request->set_param( 'font_face_settings', $settings );

		// Ensure that $settings data is slashed, so values with quotes are escaped.

		// WP_REST_Posts_Controller::create_item uses wp_slash() on the post_content.

		$font_face_post = parent::create_item( $request );

		if ( is_wp_error( $font_face_post ) ) {

			return $font_face_post;

		}

		$font_face_id = $font_face_post->data['id'];

		foreach ( $font_file_meta as $font_file_path ) {

			add_post_meta( $font_face_id, '_wp_font_face_file', $font_file_path );

		}

		return $font_face_post;

	}

	/**

	 * Deletes a single font face.

	 *

	 * @since 6.5.0

	 *

	 * @param WP_REST_Request $request Full details about the request.

	 * @return WP_REST_Response|WP_Error Response object on success, or WP_Error object on failure.

	 */

	public function delete_item( $request ) {

		$post = $this->get_post( $request['id'] );

		if ( is_wp_error( $post ) ) {

			return $post;

		}

		$font_family = $this->get_parent_font_family_post( $request['font_family_id'] );

		if ( is_wp_error( $font_family ) ) {

			return $font_family;

		}

		if ( (int) $font_family->ID !== (int) $post->post_parent ) {

			return new WP_Error(

				'rest_font_face_parent_id_mismatch',

				/* translators: %d: A post id. */

				sprintf( __( 'The font face does not belong to the specified font family with id of "%d".' ), $font_family->ID ),

				array( 'status' => 404 )

			);

		}

		$force = isset( $request['force'] ) ? (bool) $request['force'] : false;

		// We don't support trashing for font faces.

		if ( ! $force ) {

			return new WP_Error(

				'rest_trash_not_supported',

				/* translators: %s: force=true */

				sprintf( __( 'Font faces do not support trashing. Set "%s" to delete.' ), 'force=true' ),

				array( 'status' => 501 )

			);

		}