|
1 /** |
|
2 * @output wp-admin/js/auth-app.js |
|
3 */ |
|
4 |
|
5 /* global authApp */ |
|
6 |
|
7 ( function( $, authApp ) { |
|
8 var $appNameField = $( '#app_name' ), |
|
9 $approveBtn = $( '#approve' ), |
|
10 $rejectBtn = $( '#reject' ), |
|
11 $form = $appNameField.closest( 'form' ), |
|
12 context = { |
|
13 userLogin: authApp.user_login, |
|
14 successUrl: authApp.success, |
|
15 rejectUrl: authApp.reject |
|
16 }; |
|
17 |
|
18 $approveBtn.on( 'click', function( e ) { |
|
19 var name = $appNameField.val(), |
|
20 appId = $( 'input[name="app_id"]', $form ).val(); |
|
21 |
|
22 e.preventDefault(); |
|
23 |
|
24 if ( $approveBtn.prop( 'aria-disabled' ) ) { |
|
25 return; |
|
26 } |
|
27 |
|
28 if ( 0 === name.length ) { |
|
29 $appNameField.trigger( 'focus' ); |
|
30 return; |
|
31 } |
|
32 |
|
33 $approveBtn.prop( 'aria-disabled', true ).addClass( 'disabled' ); |
|
34 |
|
35 var request = { |
|
36 name: name |
|
37 }; |
|
38 |
|
39 if ( appId.length > 0 ) { |
|
40 request.app_id = appId; |
|
41 } |
|
42 |
|
43 /** |
|
44 * Filters the request data used to Authorize an Application Password request. |
|
45 * |
|
46 * @since 5.6.0 |
|
47 * |
|
48 * @param {Object} request The request data. |
|
49 * @param {Object} context Context about the Application Password request. |
|
50 * @param {string} context.userLogin The user's login username. |
|
51 * @param {string} context.successUrl The URL the user will be redirected to after approving the request. |
|
52 * @param {string} context.rejectUrl The URL the user will be redirected to after rejecting the request. |
|
53 */ |
|
54 request = wp.hooks.applyFilters( 'wp_application_passwords_approve_app_request', request, context ); |
|
55 |
|
56 wp.apiRequest( { |
|
57 path: '/wp/v2/users/me/application-passwords?_locale=user', |
|
58 method: 'POST', |
|
59 data: request |
|
60 } ).done( function( response, textStatus, jqXHR ) { |
|
61 |
|
62 /** |
|
63 * Fires when an Authorize Application Password request has been successfully approved. |
|
64 * |
|
65 * In most cases, this should be used in combination with the {@see 'wp_authorize_application_password_form_approved_no_js'} |
|
66 * action to ensure that both the JS and no-JS variants are handled. |
|
67 * |
|
68 * @since 5.6.0 |
|
69 * |
|
70 * @param {Object} response The response from the REST API. |
|
71 * @param {string} response.password The newly created password. |
|
72 * @param {string} textStatus The status of the request. |
|
73 * @param {jqXHR} jqXHR The underlying jqXHR object that made the request. |
|
74 */ |
|
75 wp.hooks.doAction( 'wp_application_passwords_approve_app_request_success', response, textStatus, jqXHR ); |
|
76 |
|
77 var raw = authApp.success, |
|
78 url, message, $notice; |
|
79 |
|
80 if ( raw ) { |
|
81 url = raw + ( -1 === raw.indexOf( '?' ) ? '?' : '&' ) + |
|
82 'site_url=' + encodeURIComponent( authApp.site_url ) + |
|
83 '&user_login=' + encodeURIComponent( authApp.user_login ) + |
|
84 '&password=' + encodeURIComponent( response.password ); |
|
85 |
|
86 window.location = url; |
|
87 } else { |
|
88 message = wp.i18n.sprintf( |
|
89 /* translators: %s: Application name. */ |
|
90 '<label for="new-application-password-value">' + wp.i18n.__( 'Your new password for %s is:' ) + '</label>', |
|
91 '<strong></strong>' |
|
92 ) + ' <input id="new-application-password-value" type="text" class="code" readonly="readonly" value="" />'; |
|
93 $notice = $( '<div></div>' ) |
|
94 .attr( 'role', 'alert' ) |
|
95 .attr( 'tabindex', -1 ) |
|
96 .addClass( 'notice notice-success notice-alt' ) |
|
97 .append( $( '<p></p>' ).addClass( 'application-password-display' ).html( message ) ) |
|
98 .append( '<p>' + wp.i18n.__( 'Be sure to save this in a safe location. You will not be able to retrieve it.' ) + '</p>' ); |
|
99 |
|
100 // We're using .text() to write the variables to avoid any chance of XSS. |
|
101 $( 'strong', $notice ).text( response.name ); |
|
102 $( 'input', $notice ).val( response.password ); |
|
103 |
|
104 $form.replaceWith( $notice ); |
|
105 $notice.trigger( 'focus' ); |
|
106 } |
|
107 } ).fail( function( jqXHR, textStatus, errorThrown ) { |
|
108 var errorMessage = errorThrown, |
|
109 error = null; |
|
110 |
|
111 if ( jqXHR.responseJSON ) { |
|
112 error = jqXHR.responseJSON; |
|
113 |
|
114 if ( error.message ) { |
|
115 errorMessage = error.message; |
|
116 } |
|
117 } |
|
118 |
|
119 var $notice = $( '<div></div>' ) |
|
120 .attr( 'role', 'alert' ) |
|
121 .addClass( 'notice notice-error' ) |
|
122 .append( $( '<p></p>' ).text( errorMessage ) ); |
|
123 |
|
124 $( 'h1' ).after( $notice ); |
|
125 |
|
126 $approveBtn.removeProp( 'aria-disabled', false ).removeClass( 'disabled' ); |
|
127 |
|
128 /** |
|
129 * Fires when an Authorize Application Password request encountered an error when trying to approve the request. |
|
130 * |
|
131 * @since 5.6.0 |
|
132 * @since 5.6.1 Corrected action name and signature. |
|
133 * |
|
134 * @param {Object|null} error The error from the REST API. May be null if the server did not send proper JSON. |
|
135 * @param {string} textStatus The status of the request. |
|
136 * @param {string} errorThrown The error message associated with the response status code. |
|
137 * @param {jqXHR} jqXHR The underlying jqXHR object that made the request. |
|
138 */ |
|
139 wp.hooks.doAction( 'wp_application_passwords_approve_app_request_error', error, textStatus, errorThrown, jqXHR ); |
|
140 } ); |
|
141 } ); |
|
142 |
|
143 $rejectBtn.on( 'click', function( e ) { |
|
144 e.preventDefault(); |
|
145 |
|
146 /** |
|
147 * Fires when an Authorize Application Password request has been rejected by the user. |
|
148 * |
|
149 * @since 5.6.0 |
|
150 * |
|
151 * @param {Object} context Context about the Application Password request. |
|
152 * @param {string} context.userLogin The user's login username. |
|
153 * @param {string} context.successUrl The URL the user will be redirected to after approving the request. |
|
154 * @param {string} context.rejectUrl The URL the user will be redirected to after rejecting the request. |
|
155 */ |
|
156 wp.hooks.doAction( 'wp_application_passwords_reject_app', context ); |
|
157 |
|
158 // @todo: Make a better way to do this so it feels like less of a semi-open redirect. |
|
159 window.location = authApp.reject; |
|
160 } ); |
|
161 |
|
162 $form.on( 'submit', function( e ) { |
|
163 e.preventDefault(); |
|
164 } ); |
|
165 }( jQuery, authApp ) ); |