Changeset 49276 for trunk/src/wp-includes/rest-api/endpoints/class-wp-rest-application-passwords-controller.php

Timestamp:

10/22/2020 03:04:23 PM (6 years ago)

Author:

TimothyBlynJacobs

Message:

App Passwords: Support an app_id to uniquely identify instances of an app.

Apps may now optionally include an app_id parameter when directing the user to the Authorize Application screen. This allows for instances of an application to be identified and potentially revoked or blocked.

Props TimothyBlynJacobs, georgestephanis.
Fixes #51583.

File:

• trunk/src/wp-includes/rest-api/endpoints/class-wp-rest-application-passwords-controller.php (modified) (3 diffs)

trunk/src/wp-includes/rest-api/endpoints/class-wp-rest-application-passwords-controller.php

@@ -413 +413 @@
                 );
 
+                if ( $request['app_id'] && ! $request['uuid'] ) {
+                        $prepared->app_id = $request['app_id'];
+                }
+
                 /**
                  * Filters an application password before it is inserted via the REST API.
@@ -442 +446 @@
                 $prepared = array(
                         'uuid'      => $item['uuid'],
+                        'app_id'    => empty( $item['app_id'] ) ? '' : $item['app_id'],
                         'name'      => $item['name'],
                         'created'   => gmdate( 'Y-m-d\TH:i:s', $item['created'] ),
@@ -616 +621 @@
                                         'readonly'    => true,
                                 ),
+                                'app_id'    => array(
+                                        'description' => __( 'A uuid provided by the application to uniquely identify it. It is recommended to use an UUID v5 with the URL or DNS namespace.' ),
+                                        'type'        => 'string',
+                                        'format'      => 'uuid',
+                                        'context'     => array( 'view', 'edit', 'embed' ),
+                                ),
                                 'name'      => array(
                                         'description' => __( 'The name of the application password.' ),