From fff721dd185f5b97f7ae7a6e64189e55887ff590 Mon Sep 17 00:00:00 2001
From: Jake Vanderwerf <get@jakevanderwerf.ca>
Date: Sun, 05 Jul 2026 18:36:57 +0000
Subject: [PATCH] =Cleaning up the Square integration (still a bit more to do yet). Also majorly overhauled /rest/ files to ignore a rest request 'user' paramater, and rely on get_current_user_id() instead.
---
inc/rest/routes/VoteRoutes.php | 15 +++++++--------
1 files changed, 7 insertions(+), 8 deletions(-)
diff --git a/inc/rest/routes/VoteRoutes.php b/inc/rest/routes/VoteRoutes.php
index c0298ec..528cc2d 100644
--- a/inc/rest/routes/VoteRoutes.php
+++ b/inc/rest/routes/VoteRoutes.php
@@ -34,7 +34,6 @@
Route::for('vote')
->post([$this, 'handleVote'])
->args([
- 'user' => 'integer|required',
'id' => 'string|required',
'item_id' => 'integer|required',
'content' => 'string|required',
@@ -43,9 +42,6 @@
->auth('user')
->rateLimit(10)
->get([$this, 'getVotes'])
- ->args([
- 'user' => 'integer',
- ])
->auth('user')
->rateLimit(30)
->register();
@@ -70,9 +66,9 @@
return Response::validationError(['message' => __('Invalid item or vote attempt', 'jvb')]);
}
- $user = absint($request->get_param('user'));
- if (!$this->userCheck($user)) {
- return Response::validationError(['message' => __('User doesn\'t match. Bot?', 'jvb')]);
+ $user = get_current_user_id();
+ if (!$user) {
+ return $this->unauthorized();
}
$type = $registrar->getType()??false;
@@ -103,7 +99,10 @@
*/
public function getVotes(WP_REST_Request $request): WP_REST_Response
{
- $user = absint($request->get_param('user') ?? get_current_user_id());
+ $user = get_current_user_id();
+ if (!$user) {
+ return $this->unauthorized();
+ }
$cache = $this->cache->get($user);
if ($cache) {
--
Gitblit v1.10.0