Ticket #20926: 20926.diff

wp-admin/admin-ajax.php

@@ -38 +38 @@
 
 $core_actions_get = array(
         'fetch-list', 'ajax-tag-search', 'wp-compression-test', 'imgedit-preview', 'oembed-cache',
-        'autocomplete-user', 'dashboard-widgets',
+        'autocomplete-user', 'dashboard-widgets', 'logged-in',
 );
 
 $core_actions_post = array(

wp-admin/includes/ajax-actions.php

@@ -212 +212 @@
         wp_die();
 }
 
+function wp_ajax_logged_in() {
+        wp_die( 1 );
+}
+
 /*
  * Ajax helper.
  */

wp-admin/js/customize-controls.dev.js

@@ -288 +288 @@
                 sensitivity: 2000,
 
                 initialize: function( params, options ) {
-                        var loaded   = false,
-                                ready    = false,
-                                deferred = $.Deferred(),
+                        var deferred = $.Deferred(),
                                 self     = this;
 
                         // This is the promise object.
@@ -304 +302 @@
 
                         this.add( 'previewUrl', params.previewUrl );
 
-                        this.bind( 'ready', function() {
+                        this.query = $.extend( params.query || {}, { customize_messenger_channel: this.channel() });
+
+                        this.run( deferred );
+                },
+
+                run: function( deferred ) {
+                        var self   = this,
+                                loaded = false,
+                                ready  = false;
+
+                        if ( this._ready )
+                                this.unbind( 'ready', this._ready );
+
+                        this._ready = function() {
                                 ready = true;
 
                                 if ( loaded )
                                         deferred.resolveWith( self );
-                        });
+                        };
 
-                        params.query = $.extend( params.query || {}, { customize_messenger_channel: this.channel() });
+                        this.bind( 'ready', this._ready );
 
                         this.request = $.ajax( this.previewUrl(), {
                                 type: 'POST',
-                                data: params.query,
+                                data: this.query,
                                 xhrFields: {
                                         withCredentials: true
                                 }
@@ -339 +350 @@
 
                                 // Check if the user is not logged in.
                                 if ( '0' === response ) {
-                                        deferred.rejectWith( self, [ 'logged out' ] );
+                                        self.login( deferred );
                                         return;
                                 }
 
@@ -360 +371 @@
                                 response = response.slice( 0, index ) + response.slice( index + signature.length );
 
                                 // Create the iframe and inject the html content.
-                                // Strip the signature from the request.
-                                response = response.slice( 0, index ) + response.slice( index + signature.length );
-
-                                // Create the iframe and inject the html content.
                                 self.iframe = $('<iframe />').appendTo( self.previewer.container );
 
                                 // Bind load event after the iframe has been added to the page;
@@ -388 +395 @@
                         });
                 },
 
+                login: function( deferred ) {
+                        var self = this,
+                                reject;
+
+                        reject = function() {
+                                deferred.rejectWith( self, [ 'logged out' ] );
+                        };
+
+                        if ( this.triedLogin )
+                                return reject();
+
+                        // Check if we have an admin cookie.
+                        $.get( api.settings.url.ajax, {
+                                action: 'logged-in'
+                        }).fail( reject ).done( function( response ) {
+                                var iframe;
+
+                                if ( '1' !== response )
+                                        reject();
+
+                                iframe = $('<iframe src="' + self.previewUrl() + '" />').hide();
+                                iframe.appendTo( self.previewer.container );
+                                iframe.load( function() {
+                                        self.triedLogin = true;
+
+                                        iframe.remove();
+                                        self.run( deferred );
+                                });
+                        });
+                },
+
                 destroy: function() {
                         api.Messenger.prototype.destroy.call( this );
                         this.request.abort();