class.wpcom-json-api-render-embed-endpoint.php 2.8 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475
  1. <?php
  2. new WPCOM_JSON_API_Render_Embed_Endpoint( array(
  3. 'description' => "Get a rendered embed for a site. Note: The current user must have publishing access.",
  4. 'group' => 'sites',
  5. 'stat' => 'embeds:render',
  6. 'method' => 'GET',
  7. 'path' => '/sites/%s/embeds/render',
  8. 'path_labels' => array(
  9. '$site' => '(int|string) Site ID or domain',
  10. ),
  11. 'query_parameters' => array(
  12. 'embed_url' => '(string) The query-string encoded embed URL to render. Required. Only accepts one at a time.',
  13. ),
  14. 'response_format' => array(
  15. 'embed_url' => '(string) The embed_url that was passed in for rendering.',
  16. 'result' => '(html) The rendered HTML result of the embed.',
  17. ),
  18. 'example_request' => 'https://public-api.wordpress.com/rest/v1/sites/apiexamples.wordpress.com/embeds/render?embed_url=https%3A%2F%2Fwww.youtube.com%2Fwatch%3Fv%3DSQEQr7c0-dw',
  19. 'example_request_data' => array(
  20. 'headers' => array(
  21. 'authorization' => 'Bearer YOUR_API_TOKEN'
  22. ),
  23. )
  24. ) );
  25. class WPCOM_JSON_API_Render_Embed_Endpoint extends WPCOM_JSON_API_Render_Endpoint {
  26. // /sites/%s/embeds/render -> $blog_id
  27. function callback( $path = '', $blog_id = 0 ) {
  28. $blog_id = $this->api->switch_to_blog_and_validate_user( $this->api->get_blog_id( $blog_id ) );
  29. if ( is_wp_error( $blog_id ) ) {
  30. return $blog_id;
  31. }
  32. if ( ! current_user_can( 'edit_posts' ) ) {
  33. return new WP_Error( 'unauthorized', __( 'Your token must have permission to post on this blog.', 'jetpack' ), 403 );
  34. }
  35. $args = $this->query_args();
  36. $embed_url = trim( $args['embed_url'] );
  37. // quick validation
  38. if ( ! preg_match_all( '|^\s*(https?://[^\s"]+)\s*$|im', $embed_url, $matches ) ) {
  39. return new WP_Error( 'invalid_embed_url', __( 'The embed_url parameter must be a valid URL.', 'jetpack' ), 400 );
  40. }
  41. if ( count( $matches[1] ) > 1 ) {
  42. return new WP_Error( 'invalid_embed', __( 'Only one embed can be rendered at a time.', 'jetpack' ), 400 );
  43. }
  44. $embed_url = array_shift( $matches[1] );
  45. $parts = parse_url( $embed_url );
  46. if ( ! $parts ) {
  47. return new WP_Error( 'invalid_embed_url', __( 'The embed_url parameter must be a valid URL.', 'jetpack' ), 400 );
  48. }
  49. global $wp_embed;
  50. $render = $this->process_render( array( $this, 'do_embed' ), $embed_url );
  51. // if nothing happened, then the shortcode does not exist.
  52. $is_an_embed = ( $embed_url != $render['result'] && $wp_embed->maybe_make_link( $embed_url ) != $render['result'] );
  53. if ( ! $is_an_embed ) {
  54. return new WP_Error( 'invalid_embed', __( 'The requested URL is not an embed.', 'jetpack' ), 400 );
  55. }
  56. // our output for this endpoint..
  57. $return['embed_url'] = $embed_url;
  58. $return['result'] = $render['result'];
  59. $return = $this->add_assets( $return, $render['loaded_scripts'], $render['loaded_styles'] );
  60. return $return;
  61. }
  62. }