Changeset 54122 for trunk/src/wp-admin/includes/post.php

Timestamp:

09/11/2022 08:44:50 PM (2 years ago)

Author:

joemcgill

Message:

Editor: Refresh nones for metaboxes after reauthentication.

This fixes an issue where metaboxes fail to save after a session expires and a user logs in again via the heartbeat API.

Props LinSoftware.
Fixes #52584.

File:

• trunk/src/wp-admin/includes/post.php (modified) (1 diff)

trunk/src/wp-admin/includes/post.php

@@ -2335 +2335 @@
     }
 
+    /*
+     * Refresh nonces used by the meta box loader.
+     *
+     * The logic is very similar to that provided by post.js for the classic editor.
+     */
+    $script = "( function( $ ) {
+        var check, timeout;
+
+        function schedule() {
+            check = false;
+            window.clearTimeout( timeout );
+            timeout = window.setTimeout( function() { check = true; }, 300000 );
+        }
+
+        $( document ).on( 'heartbeat-send.wp-refresh-nonces', function( e, data ) {
+            var post_id, \$authCheck = $( '#wp-auth-check-wrap' );
+
+            if ( check || ( \$authCheck.length && ! \$authCheck.hasClass( 'hidden' ) ) ) {
+                if ( ( post_id = $( '#post_ID' ).val() ) && $( '#_wpnonce' ).val() ) {
+                    data['wp-refresh-metabox-loader-nonces'] = {
+                        post_id: post_id
+                    };
+                }
+            }
+        }).on( 'heartbeat-tick.wp-refresh-nonces', function( e, data ) {
+            var nonces = data['wp-refresh-metabox-loader-nonces'];
+
+            if ( nonces ) {
+                if ( nonces.replace ) {
+                    if ( nonces.replace.metabox_loader_nonce && window._wpMetaBoxUrl && wp.url ) {
+                        window._wpMetaBoxUrl= wp.url.addQueryArgs( window._wpMetaBoxUrl, { 'meta-box-loader-nonce': nonces.replace.metabox_loader_nonce } );
+                    }
+
+                    if ( nonces.replace._wpnonce ) {
+                        $( '#_wpnonce' ).val( nonces.replace._wpnonce );
+                    }
+                }
+            }
+        }).ready( function() {
+            schedule();
+        });
+    } )( jQuery );";
+    wp_add_inline_script( 'heartbeat', $script );
+
     // Reset meta box data.
     $wp_meta_boxes = $_original_meta_boxes;