Code Coverage
 
Lines
Functions and Methods
Classes and Traits
Total
74.88%
158 / 211
60.00%
6 / 10
 CRAP
0.00%
0 / 1
jetpack_current_user_data
0.00%
0 / 44
0.00%
0 / 1
 72
Jetpack_Redux_State_Helper
94.61%
158 / 167
66.67%
6 / 9
 31.15
0.00%
0 / 1
 get_minimal_state
100.00%
4 / 4
100.00%
1 / 1
 1
 get_plugins_page_state
100.00%
8 / 8
100.00%
1 / 1
 1
 get_initial_state
97.78%
132 / 135
0.00%
0 / 1
 16
 get_dismissed_jetpack_notices
100.00%
3 / 3
100.00%
1 / 1
 1
 get_flattened_settings
100.00%
3 / 3
100.00%
1 / 1
 1
 get_update_modal_data
n/a
0 / 0
n/a
0 / 0
 1
 allow_post_embed_iframe
n/a
0 / 0
n/a
0 / 0
 2
 get_release_post_data
n/a
0 / 0
n/a
0 / 0
 1
 get_external_services_connect_urls
100.00%
4 / 4
100.00%
1 / 1
 2
 get_purchase_token
28.57%
2 / 7
0.00%
0 / 1
 6.28
 generate_purchase_token
0.00%
0 / 1
0.00%
0 / 1
 2
 get_site_image
100.00%
2 / 2
100.00%
1 / 1
 1
1<?php
2/**
3 * A utility class that generates the initial state for Redux in wp-admin.
4 * Modularized from `class.jetpack-react-page.php`.
5 *
6 * @package automattic/jetpack
7 */
8
9use Automattic\Jetpack\Blaze;
10use Automattic\Jetpack\Comments\Comments;
11use Automattic\Jetpack\Connection\Manager as Connection_Manager;
12use Automattic\Jetpack\Connection\Plugin_Storage as Connection_Plugin_Storage;
13use Automattic\Jetpack\Connection\REST_Connector;
14use Automattic\Jetpack\Constants;
15use Automattic\Jetpack\Current_Plan as Jetpack_Plan;
16use Automattic\Jetpack\Device_Detection\User_Agent_Info;
17use Automattic\Jetpack\Identity_Crisis;
18use Automattic\Jetpack\IP\Utils as IP_Utils;
19use Automattic\Jetpack\Licensing;
20use Automattic\Jetpack\Licensing\Endpoints as Licensing_Endpoints;
21use Automattic\Jetpack\My_Jetpack\Initializer as My_Jetpack_Initializer;
22use Automattic\Jetpack\Partner;
23use Automattic\Jetpack\Plugin\Jetpack_Script_Data;
24use Automattic\Jetpack\Publicize\Keyring_Helper;
25use Automattic\Jetpack\Stats\Options as Stats_Options;
26use Automattic\Jetpack\Status;
27use Automattic\Jetpack\Status\Host;
28
29/**
30 * Responsible for populating the initial Redux state.
31 */
32class Jetpack_Redux_State_Helper {
33    /**
34     * Generate minimal state for React to fetch its own data asynchronously after load
35     * This can improve user experience, reducing time spent on server requests before serving the page
36     * e.g. used by React Disconnect Dialog on plugins page where the full initial state is not needed
37     */
38    public static function get_minimal_state() {
39        return array(
40            'WP_API_root'  => esc_url_raw( rest_url() ),
41            'WP_API_nonce' => wp_create_nonce( 'wp_rest' ),
42        );
43    }
44
45    /**
46     * Generate the state for the plugins page: the minimal state plus what the deactivation survey needs.
47     *
48     * @since 16.3
49     *
50     * @return array
51     */
52    public static function get_plugins_page_state() {
53        $state = self::get_minimal_state();
54
55        $connection = new Connection_Manager();
56
57        $state['pluginDeactivation'] = array(
58            'siteId'                 => (int) Jetpack_Options::get_option( 'id' ),
59            'hasConnectedUser'       => $connection->has_connected_user(),
60            'isCurrentUserConnected' => $connection->is_user_connected(),
61        );
62
63        return $state;
64    }
65
66    /**
67     * Generate the initial state array to be used by the Redux store.
68     */
69    public static function get_initial_state() {
70        global $is_safari;
71
72        // Load API endpoint base classes and endpoints for getting the module list fed into the JS Admin Page.
73        require_once JETPACK__PLUGIN_DIR . '_inc/lib/core-api/class.jetpack-core-api-xmlrpc-consumer-endpoint.php';
74        require_once JETPACK__PLUGIN_DIR . '_inc/lib/core-api/class.jetpack-core-api-module-endpoints.php';
75        require_once JETPACK__PLUGIN_DIR . '_inc/lib/core-api/class.jetpack-core-api-site-endpoints.php';
76
77        $module_list_endpoint = new Jetpack_Core_API_Module_List_Endpoint();
78        $modules              = $module_list_endpoint->get_modules();
79
80        // Preparing translated fields for JSON encoding by transforming all HTML entities to
81        // respective characters.
82        foreach ( $modules as $slug => $data ) {
83            $modules[ $slug ]['name']              = html_entity_decode( $data['name'], ENT_QUOTES | ENT_SUBSTITUTE | ENT_HTML401 );
84            $modules[ $slug ]['description']       = html_entity_decode( $data['description'], ENT_QUOTES | ENT_SUBSTITUTE | ENT_HTML401 );
85            $modules[ $slug ]['short_description'] = html_entity_decode( $data['short_description'], ENT_QUOTES | ENT_SUBSTITUTE | ENT_HTML401 );
86            $modules[ $slug ]['long_description']  = html_entity_decode( $data['long_description'], ENT_QUOTES | ENT_SUBSTITUTE | ENT_HTML401 );
87        }
88
89        // "mock" a block module in order to get it searchable in the settings.
90        $modules['blocks']['module']                    = 'blocks';
91        $modules['blocks']['additional_search_queries'] = esc_html_x( 'blocks, block, gutenberg', 'Search terms', 'jetpack' );
92
93        // "mock" an Earn module in order to get it searchable in the settings.
94        $modules['earn']['module']                    = 'earn';
95        $modules['earn']['additional_search_queries'] = esc_html_x( 'earn, paypal, stripe, payments, pay', 'Search terms', 'jetpack' );
96
97        // Collecting roles that can view site stats.
98        $stats_roles   = array();
99        $enabled_roles = Stats_Options::get_option( 'roles' );
100
101        if ( ! function_exists( 'get_editable_roles' ) ) {
102            require_once ABSPATH . 'wp-admin/includes/user.php';
103        }
104        foreach ( get_editable_roles() as $slug => $role ) {
105            $stats_roles[ $slug ] = array(
106                'name'    => translate_user_role( $role['name'] ),
107                'canView' => is_array( $enabled_roles ) ? in_array( $slug, $enabled_roles, true ) : false,
108            );
109        }
110
111        // Get information about current theme.
112        $current_theme = wp_get_theme();
113
114        // Get last post, to build the link to Customizer in the Related Posts module.
115        $last_post = get_posts( array( 'posts_per_page' => 1 ) );
116        $last_post = isset( $last_post[0] ) && $last_post[0] instanceof WP_Post
117            ? get_permalink( $last_post[0]->ID )
118            : get_home_url();
119
120        $current_user_data = jetpack_current_user_data();
121
122        /**
123         * Adds information to the `connectionStatus` API field that is unique to the Jetpack React dashboard.
124         */
125        $connection_status = array(
126            'isInIdentityCrisis' => Identity_Crisis::validate_sync_error_idc_option(),
127            'sandboxDomain'      => JETPACK__SANDBOX_DOMAIN,
128
129            /**
130             * Filter to add connection errors
131             * Format: array( array( 'code' => '...', 'message' => '...', 'action' => '...' ), ... )
132             *
133             * @since 8.7.0
134             *
135             * @param array $errors Connection errors.
136             */
137            'errors'             => apply_filters( 'react_connection_errors_initial_state', array() ),
138        );
139
140        $connection_status = array_merge( REST_Connector::connection_status( false ), $connection_status );
141
142        $block_availability = Jetpack_Gutenberg::get_cached_availability();
143
144        return array(
145            'WP_API_root'                          => esc_url_raw( rest_url() ),
146            'WP_API_nonce'                         => wp_create_nonce( 'wp_rest' ),
147            'registrationNonce'                    => '', // Not used, keeping it for compatibility reasons, see https://github.com/Automattic/jetpack/pull/42076
148            'purchaseToken'                        => self::get_purchase_token(),
149            'pluginBaseUrl'                        => plugins_url( '', JETPACK__PLUGIN_FILE ),
150            'connectionStatus'                     => $connection_status,
151            'connectedPlugins'                     => Connection_Plugin_Storage::get_all(),
152            'connectUrl'                           => false == $current_user_data['isConnected'] // phpcs:ignore Universal.Operators.StrictComparisons.LooseEqual
153                ? Jetpack::init()->build_connect_url( true, false, false )
154                : '',
155            'dismissedNotices'                     => self::get_dismissed_jetpack_notices(),
156            'isDevVersion'                         => Jetpack::is_development_version(),
157            'currentVersion'                       => JETPACK__VERSION,
158            'is_gutenberg_available'               => true,
159            'getModules'                           => $modules,
160            'rawUrl'                               => ( new Status() )->get_site_suffix(),
161            'adminUrl'                             => esc_url( admin_url() ),
162            'siteTitle'                            => htmlspecialchars_decode( get_option( 'blogname' ), ENT_QUOTES ),
163            'stats'                                => array(
164                // data is populated asynchronously on page load.
165                'data'  => array(
166                    'general' => false,
167                    'day'     => false,
168                    'week'    => false,
169                    'month'   => false,
170                ),
171                'roles' => $stats_roles,
172            ),
173            'aff'                                  => Partner::init()->get_partner_code( Partner::AFFILIATE_CODE ),
174            'partnerSubsidiaryId'                  => Partner::init()->get_partner_code( Partner::SUBSIDIARY_CODE ),
175            'settings'                             => self::get_flattened_settings(),
176            'userData'                             => array(
177                'currentUser' => $current_user_data,
178            ),
179            'siteData'                             => array(
180                'blog_id'                    => Jetpack_Options::get_option( 'id', 0 ),
181                'icon'                       => has_site_icon()
182                    ? apply_filters( 'jetpack_photon_url', get_site_icon_url(), array( 'w' => 64 ) )
183                    : '',
184                'representativeImage'        => self::get_site_image(),
185                'siteVisibleToSearchEngines' => '1' == get_option( 'blog_public' ), // phpcs:ignore Universal.Operators.StrictComparisons.LooseEqual
186                /**
187                 * Whether promotions are visible or not.
188                 *
189                 * @since 4.8.0
190                 *
191                 * @param bool $are_promotions_active Status of promotions visibility. True by default.
192                 */
193                'showPromotions'             => apply_filters( 'jetpack_show_promotions', true ),
194                'plan'                       => Jetpack_Plan::get(),
195                'showBackups'                => Jetpack::show_backups_ui(),
196                'showScan'                   => Jetpack::show_scan_ui(),
197                /** This filter is documented in my-jetpack/src/class-initializer.php */
198                'showMyJetpack'              => My_Jetpack_Initializer::should_initialize(),
199                'isMultisite'                => is_multisite(),
200                // Set when Jetpack or the standalone plugin registered the Backup page on this request.
201                'hasBackupPage'              => (bool) did_action( 'jetpack_backup_initialized' ),
202                'dateFormat'                 => get_option( 'date_format' ),
203                'isSharingBlockAvailable'    => isset( $block_availability['sharing-buttons'] )
204                    && $block_availability['sharing-buttons']['available'],
205                'isLikeBlockAvailable'       => isset( $block_availability['like'] )
206                    && $block_availability['like']['available'],
207                'isCommentBlocksAvailable'   => Comments::is_enabled(),
208            ),
209            'themeData'                            => array(
210                'name'         => $current_theme->get( 'Name' ),
211                'stylesheet'   => $current_theme->get_stylesheet(),
212                'hasUpdate'    => (bool) get_theme_update_available( $current_theme ),
213                'isBlockTheme' => (bool) $current_theme->is_block_theme(),
214                'support'      => array(
215                    'infinite-scroll' => Jetpack_Script_Data::theme_supports_infinite_scroll(),
216                    'widgets'         => current_theme_supports( 'widgets' ),
217                    'webfonts'        => wp_theme_has_theme_json()
218                        && ( function_exists( 'wp_register_webfont_provider' ) || function_exists( 'wp_register_webfonts' ) ),
219                ),
220            ),
221            'jetpackStateNotices'                  => array(
222                'messageCode'      => Jetpack::state( 'message' ),
223                'errorCode'        => Jetpack::state( 'error' ),
224                'errorDescription' => Jetpack::state( 'error_description' ),
225            ),
226            'tracksUserData'                       => Jetpack_Tracks_Client::get_connected_user_tracks_identity(),
227            // Don't suggest the fallback address when the configured trusted header can't be resolved.
228            'currentIp'                            => method_exists( IP_Utils::class, 'is_trusted_header_unresolved' ) && IP_Utils::is_trusted_header_unresolved() ? false : IP_Utils::get_ip(),
229            'lastPostUrl'                          => esc_url( $last_post ),
230            'externalServicesConnectUrls'          => self::get_external_services_connect_urls(),
231            'calypsoEnv'                           => ( new Host() )->get_calypso_env(),
232            'isSafari'                             => $is_safari || User_Agent_Info::is_opera_desktop(), // @todo Rename isSafari everywhere.
233            'doNotUseConnectionIframe'             => Constants::is_true( 'JETPACK_SHOULD_NOT_USE_CONNECTION_IFRAME' ),
234            'licensing'                            => array(
235                'error'                   => Licensing::instance()->last_error(),
236                'showLicensingUi'         => Licensing::instance()->is_licensing_input_enabled(),
237                'userCounts'              => Licensing_Endpoints::get_user_license_counts(),
238                'activationNoticeDismiss' => Licensing::instance()->get_license_activation_notice_dismiss(),
239            ),
240            'useMyJetpackLicensingUI'              => My_Jetpack_Initializer::is_licensing_ui_enabled(),
241            'isOdysseyStatsEnabled'                => Stats_Options::get_option( 'enable_odyssey_stats' ),
242            'shouldInitializeBlaze'                => Blaze::should_initialize(),
243            'isBlazeDashboardEnabled'              => Blaze::is_dashboard_enabled(),
244            // The composed AI gate chain (host, and the master where its rollout
245            // is active) — what the editor enforces, for settings UI that must
246            // not contradict it.
247            'isAiEnabled'                          => Jetpack_AI_Settings::is_ai_enabled(),
248            // The AI SEO feature, gates folded in: controls that drive only its
249            // automatic half must follow it too.
250            'isAiSeoEnabled'                       => Jetpack_AI_Settings::is_ai_seo_enabled(),
251            'isSubscriptionSiteEnabled'            => apply_filters( 'jetpack_subscription_site_enabled', false ),
252            'newsletterDateExample'                => gmdate( get_option( 'date_format' ), time() ),
253            'subscriptionSiteEditSupported'        => $current_theme->is_block_theme(),
254
255            /*
256             * This filter is already documented in jetpack/modules/subscriptions.php.
257             * Defaults on for every site; hosts can opt out with the filter.
258             */
259            'isWpAdminSubscriberManagementEnabled' => apply_filters(
260                'jetpack_wp_admin_subscriber_management_enabled',
261                true
262            ),
263        );
264    }
265
266    /**
267     * Gets array of any Jetpack notices that have been dismissed.
268     *
269     * @return mixed|void
270     */
271    public static function get_dismissed_jetpack_notices() {
272        $jetpack_dismissed_notices = get_option( 'jetpack_dismissed_notices', array() );
273        /**
274         * Array of notices that have been dismissed.
275         *
276         * @param array $jetpack_dismissed_notices If empty, will not show any Jetpack notices.
277         */
278        $dismissed_notices = apply_filters( 'jetpack_dismissed_notices', $jetpack_dismissed_notices );
279        return $dismissed_notices;
280    }
281
282    /**
283     * Returns an array of modules and settings both as first class members of the object.
284     *
285     * @return array flattened settings with modules.
286     */
287    public static function get_flattened_settings() {
288        $core_api_endpoint = new Jetpack_Core_API_Data();
289        $settings          = $core_api_endpoint->get_all_options();
290        return $settings->data;
291    }
292
293    /**
294     * Returns the release post content and image data as an associative array.
295     *
296     * The update modal that consumed this data has been removed, so there is nothing to return.
297     *
298     * @deprecated 16.2
299     *
300     * @return null
301     */
302    public static function get_update_modal_data() {
303        _deprecated_function( __METHOD__, 'jetpack-16.2' );
304        return null;
305    }
306
307    /**
308     * Temporarily allow post content to contain iframes, e.g. for videopress.
309     *
310     * Only ever used while sanitizing the release post for the removed update modal.
311     *
312     * @deprecated 16.2
313     *
314     * @param string $tags    The tags.
315     * @param string $context The context.
316     */
317    public static function allow_post_embed_iframe( $tags, $context ) {
318        _deprecated_function( __METHOD__, 'jetpack-16.2' );
319
320        if ( 'post' === $context ) {
321            $tags['iframe'] = array(
322                'src'             => true,
323                'height'          => true,
324                'width'           => true,
325                'frameborder'     => true,
326                'allowfullscreen' => true,
327            );
328        }
329
330        return $tags;
331    }
332
333    /**
334     * Obtains the release post from the Jetpack release post blog.
335     *
336     * The release post blog has had no post tagged for a current Jetpack version since 2023, and the
337     * update modal that consumed this has been removed, so this no longer makes a remote request.
338     *
339     * @deprecated 16.2
340     *
341     * @return null
342     */
343    public static function get_release_post_data() {
344        _deprecated_function( __METHOD__, 'jetpack-16.2' );
345        return null;
346    }
347
348    /**
349     * Get external services connect URLs.
350     */
351    public static function get_external_services_connect_urls() {
352        $connect_urls = array();
353        foreach ( Keyring_Helper::SERVICES as $service_name => $service_info ) {
354            $connect_urls[ $service_name ] = Keyring_Helper::connect_url( $service_name, $service_info['for'] );
355        }
356        return $connect_urls;
357    }
358
359    /**
360     * Gets a purchase token that is used for Jetpack logged out visitor checkout.
361     * The purchase token should be appended to all CTA url's that lead to checkout.
362     *
363     * @since 9.8.0
364     * @return string|boolean
365     */
366    public static function get_purchase_token() {
367        if ( ! Jetpack::current_user_can_purchase() ) {
368            return false;
369        }
370
371        $purchase_token = Jetpack_Options::get_option( 'purchase_token', false );
372
373        if ( $purchase_token ) {
374            return $purchase_token;
375        }
376        // If the purchase token is not saved in the options table yet, then add it.
377        Jetpack_Options::update_option( 'purchase_token', self::generate_purchase_token(), true );
378        return Jetpack_Options::get_option( 'purchase_token', false );
379    }
380
381    /**
382     * Generates a purchase token that is used for Jetpack logged out visitor checkout.
383     *
384     * @since 9.8.0
385     * @return string
386     */
387    public static function generate_purchase_token() {
388        return wp_generate_password( 12, false );
389    }
390
391    /**
392     * Get a representative image for the site.
393     *
394     * @since 15.0
395     *
396     * @return string
397     */
398    public static function get_site_image(): string {
399        // Get the dynamic image generated for the Open Graph Meta tags.
400        require_once JETPACK__PLUGIN_DIR . 'functions.opengraph.php';
401        return jetpack_og_get_fallback_social_image( 200, 200 )['src'];
402    }
403}
404
405// phpcs:disable Universal.Files.SeparateFunctionsFromOO.Mixed -- TODO: Move these functions to some other file.
406
407/**
408 * Gather data about the current user.
409 *
410 * @since 4.1.0
411 *
412 * @return array
413 */
414function jetpack_current_user_data() {
415    $jetpack_connection = new Connection_Manager( 'jetpack' );
416
417    $current_user      = wp_get_current_user();
418    $is_user_connected = $jetpack_connection->is_user_connected( $current_user->ID );
419    $is_master_user    = $is_user_connected && (int) $current_user->ID && (int) Jetpack_Options::get_option( 'master_user' ) === (int) $current_user->ID;
420    $dotcom_data       = $jetpack_connection->get_connected_user_data();
421
422    // Add connected user gravatar to the returned dotcom_data.
423    // Probably we shouldn't do this when $dotcom_data is false, but we have been since 2016 so
424    // clients probably expect that by now.
425    if ( false === $dotcom_data ) {
426        $dotcom_data = array();
427    }
428    $dotcom_data['avatar'] = ( ! empty( $dotcom_data['email'] ) ?
429        get_avatar_url(
430            $dotcom_data['email'],
431            array(
432                'size'    => 64,
433                'default' => 'mysteryman',
434            )
435        )
436        : false );
437
438    $current_user_data = array(
439        'isConnected' => $is_user_connected,
440        'isMaster'    => $is_master_user,
441        'username'    => $current_user->user_login,
442        'displayName' => $current_user->display_name,
443        'email'       => $current_user->user_email,
444        'id'          => $current_user->ID,
445        'wpcomUser'   => $dotcom_data,
446        'gravatar'    => get_avatar_url( $current_user->ID ),
447        'permissions' => array(
448            'admin_page'         => current_user_can( 'jetpack_admin_page' ),
449            'connect'            => current_user_can( 'jetpack_connect' ),
450            'connect_user'       => current_user_can( 'jetpack_connect_user' ),
451            'disconnect'         => current_user_can( 'jetpack_disconnect' ),
452            'manage_modules'     => current_user_can( 'jetpack_manage_modules' ),
453            'network_admin'      => current_user_can( 'jetpack_network_admin_page' ),
454            'network_sites_page' => current_user_can( 'jetpack_network_sites_page' ),
455            'edit_posts'         => current_user_can( 'edit_posts' ),
456            'publish_posts'      => current_user_can( 'publish_posts' ),
457            'manage_options'     => current_user_can( 'manage_options' ),
458            'view_stats'         => current_user_can( 'view_stats' ),
459            'manage_plugins'     => current_user_can( 'install_plugins' )
460                                    && current_user_can( 'activate_plugins' )
461                                    && current_user_can( 'update_plugins' )
462                                    && current_user_can( 'delete_plugins' ),
463        ),
464    );
465
466    return $current_user_data;
467}