Changeset 49276 for trunk/src/wp-admin/includes/user.php

Timestamp:

10/22/2020 03:04:23 PM (4 years ago)

Author:

TimothyBlynJacobs

Message:

App Passwords: Support an app_id to uniquely identify instances of an app.

Apps may now optionally include an app_id parameter when directing the user to the Authorize Application screen. This allows for instances of an application to be identified and potentially revoked or blocked.

Props TimothyBlynJacobs, georgestephanis.
Fixes #51583.

File:

• trunk/src/wp-admin/includes/user.php (modified) (2 diffs)

trunk/src/wp-admin/includes/user.php

@@ -605 +605 @@
  *
  *     @type string $app_name    The suggested name of the application.
+ *     @type string $app_id      A uuid provided by the application to uniquely identify it.
  *     @type string $success_url The url the user will be redirected to after approving the application.
  *     @type string $reject_url  The url the user will be redirected to after rejecting the application.
@@ -636 +637 @@
     }
 
+    if ( ! empty( $request['app_id'] ) && ! wp_is_uuid( $request['app_id'] ) ) {
+        $error->add(
+            'invalid_app_id',
+            __( 'The app id must be a uuid.' )
+        );
+    }
+
     /**
      * Fires before application password errors are returned.