Changeset 44275 for trunk/src/wp-admin/includes/misc.php

Timestamp:

12/17/2018 07:27:08 PM (6 years ago)

Author:

desrosj

Message:

Block Editor: Refresh nonces used by wp.apiFetch.

Adds heartbeat nonces refreshing support to wp.apiFetch requests.

Props pento, adamsilverstein, dd32, desrosj, youknowriad.

Merges [43939] into trunk.

Fixes #45113.

Location:

trunk

Files:

• . (modified) (1 prop)
• src/wp-admin/includes/misc.php (modified) (2 diffs)

trunk/src/wp-admin/includes/misc.php

@@ -1055 +1055 @@
 
         $response['wp-refresh-post-nonces'] = array(
-            'replace'        => array(
+            'replace' => array(
                 'getpermalinknonce'    => wp_create_nonce( 'getpermalink' ),
                 'samplepermalinknonce' => wp_create_nonce( 'samplepermalink' ),
@@ -1062 +1062 @@
                 '_wpnonce'             => wp_create_nonce( 'update-post_' . $post_id ),
             ),
-            'heartbeatNonce' => wp_create_nonce( 'heartbeat-nonce' ),
         );
     }
 
+    return $response;
+}
+
+/**
+ * Add the latest Heartbeat and REST-API nonce to the Heartbeat response.
+ *
+ * @since 5.0.0
+ *
+ * @param array  $response  The Heartbeat response.
+ * @return array The Heartbeat response.
+ */
+function wp_refresh_heartbeat_nonces( $response ) {
+    // Refresh the Rest API nonce.
+    $response['rest_nonce'] = wp_create_nonce( 'wp_rest' );
+    // TEMPORARY: Compat with api-fetch library
+    $response['rest-nonce'] = $response['rest_nonce'];
+
+    // Refresh the Heartbeat nonce.
+    $response['heartbeat_nonce'] = wp_create_nonce( 'heartbeat-nonce' );
     return $response;
 }