wp-multisite-waas/inc/managers/class-customer-manager.php

<?php
/**
 * Customer Manager
 *
 * Handles processes related to Customers.
 *
 * @package WP_Ultimo
 * @subpackage Managers/Customer_Manager
 * @since 2.0.0
 */

namespace WP_Ultimo\Managers;

use WP_Ultimo\Checkout\Checkout;
use WP_Ultimo\Models\Customer;
use WP_Ultimo\Database\Memberships\Membership_Status;

// Exit if accessed directly
defined('ABSPATH') || exit;

/**
 * Handles processes related to webhooks.
 *
 * @since 2.0.0
 */
class Customer_Manager extends Base_Manager {

	use \WP_Ultimo\Apis\Rest_Api;
	use \WP_Ultimo\Apis\WP_CLI;
	use \WP_Ultimo\Traits\Singleton;

	/**
	 * The manager slug.
	 *
	 * @since 2.0.0
	 * @var string
	 */
	protected $slug = 'customer';

	/**
	 * The model class associated to this manager.
	 *
	 * @since 2.0.0
	 * @var string
	 */
	protected $model_class = \WP_Ultimo\Models\Customer::class;

	/**
	 * Instantiate the necessary hooks.
	 *
	 * @since 2.0.0
	 * @return void
	 */
	public function init(): void {

		$this->enable_rest_api();

		$this->enable_wp_cli();

		add_action(
			'init',
			function () {
				Event_Manager::register_model_events(
					'customer',
					__('Customer', 'wp-multisite-waas'),
					['created', 'updated']
				);
			}
		);
		add_action('wp_login', [$this, 'log_ip_and_last_login'], 10, 2);

		add_filter('heartbeat_send', [$this, 'on_heartbeat_send']);

		add_action('wu_transition_customer_email_verification', [$this, 'transition_customer_email_verification'], 10, 3);

		add_action('init', [$this, 'maybe_verify_email_address']);

		add_action('wu_maybe_create_customer', [$this, 'maybe_add_to_main_site'], 10, 2);

		add_action('wp_ajax_wu_resend_verification_email', [$this, 'handle_resend_verification_email']);
	}

	/**
	 * Handle the resend verification email ajax action.
	 *
	 * @since 2.0.4
	 * @return void
	 */
	public function handle_resend_verification_email(): void {

		if ( ! check_ajax_referer('wu_resend_verification_email_nonce', false, false)) {
			wp_send_json_error(new \WP_Error('not-allowed', __('Error: you are not allowed to perform this action.', 'wp-multisite-waas')));

			exit;
		}

		$customer = wu_get_current_customer();

		if ( ! $customer) {
			wp_send_json_error(new \WP_Error('customer-not-found', __('Error: customer not found.', 'wp-multisite-waas')));

			exit;
		}

		$customer->send_verification_email();

		wp_send_json_success();

		exit;
	}

	/**
	 * Handle heartbeat response sent.
	 *
	 * @since 2.0.0
	 *
	 * @param array $response The Heartbeat response.
	 * @return array $response The Heartbeat response
	 */
	public function on_heartbeat_send($response) {

		$this->log_ip_and_last_login(wp_get_current_user());

		return $response;
	}

	/**
	 * Saves the IP address and last_login date onto the user.
	 *
	 * @since 2.0.0
	 *
	 * @param \WP_User $user The WP User object of the user that logged in.
	 * @return void
	 */
	public function log_ip_and_last_login($user): void {

		if ( ! is_a($user, '\WP_User')) {
			$user = get_user_by('login', $user);
		}

		if ( ! $user) {
			return;
		}

		$customer = wu_get_customer_by_user_id($user->ID);

		if ( ! $customer) {
			return;
		}

		$customer->update_last_login();
	}

	/**
	 * Watches the change in customer verification status to take action when needed.
	 *
	 * @since 2.0.0
	 *
	 * @param string  $old_status The old status of the customer verification.
	 * @param string  $new_status The new status of the customer verification.
	 * @param integer $customer_id Customer ID.
	 * @return void
	 */
	public function transition_customer_email_verification($old_status, $new_status, $customer_id): void {

		if ('pending' !== $new_status) {
			return;
		}

		$customer = wu_get_customer($customer_id);

		if ($customer) {
			$customer->send_verification_email();
		}
	}

	/**
	 * Verifies a customer by checking the email key.
	 *
	 * If only one membership is available and that's pending,
	 * we set it to active. That will trigger the publication of
	 * pending websites as well.
	 *
	 * @since 2.0.0
	 * @return void
	 */
	public function maybe_verify_email_address(): void {

		$email_verify_key = wu_request('email-verification-key');

		if ( ! $email_verify_key) {
			return;
		}

		$customer_hash = wu_request('customer');

		$customer_to_verify = wu_get_customer_by_hash($customer_hash);

		if ( ! is_user_logged_in()) {
			wp_die(
				sprintf(
					/* translators: the placeholder is the login URL */
					wp_kses_post(__('You must be authenticated in order to verify your email address. <a href=%s>Click here</a> to access your account.', 'wp-multisite-waas')),
					esc_attr(
						wp_login_url(
							add_query_arg(
								[
									'email-verification-key' => $email_verify_key,
									'customer' => $customer_hash,
								]
							)
						)
					)
				)
			);
		}

		if ( ! $customer_to_verify) {
			wp_die(wp_kses_post(__('<strong>ERROR:</strong> Invalid verification key.', 'wp-multisite-waas')));
		}

		$current_customer = wu_get_current_customer();

		if ( ! $current_customer) {
			wp_die(wp_kses_post(__('<strong>Error:</strong> Invalid verification key.', 'wp-multisite-waas')));
		}

		if ($current_customer->get_id() !== $customer_to_verify->get_id()) {
			wp_die(esc_html__('Invalid verification key.', 'wp-multisite-waas'));
		}

		if ($customer_to_verify->get_email_verification() !== 'pending') {
			wp_die(esc_html__('Invalid verification key.', 'wp-multisite-waas'));
		}

		$key = $customer_to_verify->get_verification_key();

		if ( ! $key) {
			wp_die(wp_kses_post(__('<strong>Error:</strong> Invalid verification key.', 'wp-multisite-waas')));
		}

		if ($key !== $email_verify_key) {
			wp_die(esc_html__('Invalid verification key.', 'wp-multisite-waas'));
		}

		/*
		 * Uff! If we got here, we can verify the customer.
		 */
		$customer_to_verify->disable_verification_key();
		$customer_to_verify->set_email_verification('verified');
		$customer_to_verify->save();

		/*
		 * Checks for memberships and pending sites.
		 */
		$memberships = $customer_to_verify->get_memberships();

		/*
		 * We can only take action if the customer has
		 * only one membership, otherwise we can't be sure about
		 * which one to manage.
		 */
		if (count($memberships) === 1) {
			$membership = current($memberships);

			/*
			 * Only publish pending memberships
			 */
			if ($membership->get_status() === Membership_Status::PENDING) {
				$membership->publish_pending_site_async();

				if ($membership->get_date_trial_end() <= gmdate('Y-m-d 23:59:59')) {
					$membership->set_status(Membership_Status::ACTIVE);
				}

				$membership->save();
			} elseif ($membership->get_status() === Membership_Status::TRIALING) {
				$membership->publish_pending_site_async();
			}

			$payments = $membership->get_payments();

			if ($payments) {
				$redirect_url = add_query_arg(
					[
						'payment' => $payments[0]->get_hash(),
						'status'  => 'done',
					],
					wu_get_registration_url()
				);

				wp_safe_redirect($redirect_url);

				exit;
			}
		}

		wp_safe_redirect(get_admin_url($customer_to_verify->get_primary_site_id()));

		exit;
	}

	/**
	 * Maybe adds the customer to the main site.
	 *
	 * @since 2.0.0
	 *
	 * @param Customer $customer The customer object.
	 * @param Checkout $checkout The checkout object.
	 * @return void
	 */
	public function maybe_add_to_main_site($customer, $checkout): void {

		if ( ! wu_get_setting('add_users_to_main_site')) {
			return;
		}

		$user_id = $customer->get_user_id();

		$is_already_user = is_user_member_of_blog($user_id, wu_get_main_site_id());

		if (false === $is_already_user) {
			$role = wu_get_setting('main_site_default_role', 'subscriber');

			add_user_to_blog(wu_get_main_site_id(), $user_id, $role);
		}
	}
}