Changeset 43939 for branches/5.0/src/wp-admin/includes/misc.php

Timestamp:

11/22/2018 07:39:02 PM (6 years ago)

Author:

youknowriad

Message:

Block Editor: Refresh nonces used by wp.apiFetch.

Adds heartbeat nonces refreshing support to wp.apiFetch requests.

Props pento, adamsilverstein, dd32, desrosj.
Fixes #45113.

File:

• branches/5.0/src/wp-admin/includes/misc.php (modified) (1 diff)

branches/5.0/src/wp-admin/includes/misc.php

@@ -1021 +1021 @@
                 '_wpnonce' => wp_create_nonce( 'update-post_' . $post_id ),
             ),
-            'heartbeatNonce' => wp_create_nonce( 'heartbeat-nonce' ),
         );
     }
 
+    return $response;
+}
+
+/**
+ * Add the latest Heartbeat and REST-API nonce to the Heartbeat response.
+ *
+ * @since 5.0.0
+ *
+ * @param array  $response  The Heartbeat response.
+ * @return array The Heartbeat response.
+ */
+function wp_refresh_heartbeat_nonces( $response ) {
+    // Refresh the Rest API nonce.
+    $response['rest_nonce'] = wp_create_nonce( 'wp_rest' );
+    // TEMPORARY: Compat with api-fetch library
+    $response['rest-nonce'] = $response['rest_nonce'];
+
+    // Refresh the Heartbeat nonce.
+    $response['heartbeat_nonce'] = wp_create_nonce( 'heartbeat-nonce' );
     return $response;
 }