Ticket #45753: 45753.3.diff

src/wp-includes/rest-api.php

@@ -604 +604 @@
  * @param mixed           $response Current response, either response or `null` to indicate pass-through.
  * @param WP_REST_Server  $handler  ResponseHandler instance (usually WP_REST_Server).
  * @param WP_REST_Request $request  The request that was used to make current response.
+ *
  * @return WP_REST_Response Modified response, either response or `null` to indicate pass-through.
  */
 function rest_handle_options_request( $response, $handler, $request ) {
@@ -615 +616 @@
         $data     = array();
 
         foreach ( $handler->get_routes() as $route => $endpoints ) {
-                $match = preg_match( '@^' . $route . '$@i', $request->get_route() );
+                $match = preg_match( '@^' . $route . '$@i', $request->get_route(), $matches );
 
                 if ( ! $match ) {
                         continue;
                 }
 
+                $args = array();
+                foreach ( $matches as $param => $value ) {
+                        if ( ! is_int( $param ) ) {
+                                $args[ $param ] = $value;
+                        }
+                }
+
+                foreach ( $endpoints as $endpoint ) {
+                        // Remove the redundant preg_match argument.
+                        unset( $args[0] );
+
+                        $request->set_url_params( $args );
+                        $request->set_attributes( $endpoint );
+                }
+
                 $data = $handler->get_data_for_route( $route, $endpoints, 'help' );
                 $response->set_matched_route( $route );
                 break;
         }
 
         $response->set_data( $data );
+
         return $response;
 }
 

tests/phpunit/tests/rest-api/rest-attachments-controller.php

@@ -208 +208 @@
                 $this->assertEquals( array( 'context', 'id' ), $keys );
         }
 
+        /**
+         * @ticket 43701
+         */
+        public function test_allow_header_sent_on_options_request() {
+                $id1      = $this->factory->attachment->create_object(
+                        $this->test_file,
+                        0,
+                        array(
+                                'post_mime_type' => 'image/jpeg',
+                                'post_excerpt'   => 'A sample caption',
+                        )
+                );
+                $request  = new WP_REST_Request( 'OPTIONS', sprintf( '/wp/v2/media/%d', $id1 ) );
+                $response = rest_get_server()->dispatch( $request );
+                $response = apply_filters( 'rest_post_dispatch', $response, rest_get_server(), $request );
+                $headers  = $response->get_headers();
+
+                $this->assertNotEmpty( $headers['Allow'] );
+                $this->assertEquals( $headers['Allow'], 'GET' );
+
+                wp_set_current_user( self::$editor_id );
+                $request  = new WP_REST_Request( 'OPTIONS', sprintf( '/wp/v2/media/%d', $id1 ) );
+                $response = rest_get_server()->dispatch( $request );
+                $response = apply_filters( 'rest_post_dispatch', $response, rest_get_server(), $request );
+                $headers  = $response->get_headers();
+
+                $this->assertNotEmpty( $headers['Allow'] );
+                $this->assertEquals( $headers['Allow'], 'GET, POST, PUT, PATCH, DELETE' );
+        }
+
         public function test_get_items() {
                 wp_set_current_user( 0 );
                 $id1            = $this->factory->attachment->create_object(

tests/phpunit/tests/rest-api/rest-posts-controller.php

@@ -189 +189 @@
                 $this->assertEquals( array( 'context', 'id', 'password' ), $keys );
         }
 
+        /**
+         * @ticket 43701
+         */
+        public function test_allow_header_sent_on_options_request() {
+                $request  = new WP_REST_Request( 'OPTIONS', sprintf( '/wp/v2/posts/%d', self::$post_id ) );
+                $response = rest_get_server()->dispatch( $request );
+                $response = apply_filters( 'rest_post_dispatch', $response, rest_get_server(), $request );
+                $headers  = $response->get_headers();
+
+                $this->assertNotEmpty( $headers['Allow'] );
+                $this->assertEquals( $headers['Allow'], 'GET' );
+
+                wp_set_current_user( self::$editor_id );
+                $request  = new WP_REST_Request( 'OPTIONS', sprintf( '/wp/v2/posts/%d', self::$post_id ) );
+                $response = rest_get_server()->dispatch( $request );
+                $response = apply_filters( 'rest_post_dispatch', $response, rest_get_server(), $request );
+                $headers  = $response->get_headers();
+
+                $this->assertNotEmpty( $headers['Allow'] );
+                $this->assertEquals( $headers['Allow'], 'GET, POST, PUT, PATCH, DELETE' );
+        }
+
         public function test_get_items() {
                 $request  = new WP_REST_Request( 'GET', '/wp/v2/posts' );
                 $response = rest_get_server()->dispatch( $request );