Changeset 10029 for sites/trunk/wordpress.org/public_html/wp-content/themes/pub/wporg-login/functions-restapi.php

Timestamp:

07/07/2020 08:02:03 AM (6 years ago)

Author:

dd32

Message:

Login: Allow users to resend the signup confirmation email.

To trigger this, either the user needs to click the resend link on the post-signup profile-info page, or attempt to sign up again using the same username or email.

The emails are rate limited depending on the age of the account, and also based on some WordPress.org anti-spam measures.

See #5278.

File:

• sites/trunk/wordpress.org/public_html/wp-content/themes/pub/wporg-login/functions-restapi.php (modified) (6 diffs)

sites/trunk/wordpress.org/public_html/wp-content/themes/pub/wporg-login/functions-restapi.php

@@ -19 +19 @@
         'callback' => 'wporg_login_rest_email_in_use'
     ) );
+
+    register_rest_route( 'wporg/v1', '/resend-confirmation-email/?', array(
+        'methods'  => WP_REST_Server::EDITABLE,
+        'callback' => 'wporg_login_rest_resend_confirmation_email'
+    ) );
 }
 add_action( 'rest_api_init', 'wporg_login_rest_routes' );
@@ -31 +36 @@
         return [
             'available' => false,
-            'error' => __( 'That username is already in use.', 'wporg' ) . '<br>' . __( 'Is it yours? <a href="/lostpassword">Reset your password</a>.', 'wporg' ),
+            'error' => __( 'That username is already in use.', 'wporg' ) . '<br>' .
+                __( 'Is it yours? <a href="/lostpassword">Reset your password</a>.', 'wporg' ),
             'avatar' => get_avatar( $user, 64 ),
         ];
@@ -40 +46 @@
         return [
             'available' => false,
-            'error' => __( 'That username is already in use.', 'wporg' ) . '<br>' . __( 'The registration is still pending, please check your email for the confirmation link.', 'wporg' ),
+            'error' => __( 'That username is already in use.', 'wporg' ) . '<br>' .
+                __( 'The registration is still pending, please check your email for the confirmation link.', 'wporg' ) . '<br>' .
+                '<a href="#" class="resend">' . __( 'Resend confirmation email.', 'wporg' ) . '</a>',
             'avatar' => get_avatar( $pending->user_email, 64 ),
         ];
@@ -65 +73 @@
         return [
             'available' => false,
-            'error' => __( 'That email address already has an account.', 'wporg' ) . '<br>' . __( 'Is it yours? <a href="/lostpassword">Reset your password</a>.', 'wporg' ),
+            'error' => __( 'That email address already has an account.', 'wporg' ) . '<br>' .
+                __( 'Is it yours? <a href="/lostpassword">Reset your password</a>.', 'wporg' ),
             'avatar' => get_avatar( $user, 64 ),
         ];
@@ -74 +83 @@
         return [
             'available' => false,
-            'error' => __( 'That email address already has an account.', 'wporg' ) . '<br>' . __( 'The registration is still pending, please check your email for the confirmation link.', 'wporg' ),
+            'error' => __( 'That email address already has an account.', 'wporg' ) . '<br>' .
+                __( 'The registration is still pending, please check your email for the confirmation link.', 'wporg' ) . '<br>' .
+                '<a href="#" class="resend">' . __( 'Resend confirmation email.', 'wporg' ) . '</a>',
             'avatar' => get_avatar( $email, 64 ),
         ];
@@ -91 +102 @@
     return [ 'available' => true ];
 }
+
+/*
+ * Resend a confirmation email to create an account.
+ * 
+ * This API intentionally doesn't report if it performs the action, always returning the success message.
+ */
+function wporg_login_rest_resend_confirmation_email( $request ) {
+    $account = $request['account'];
+
+    $success_message = sprintf(
+        __( 'Please check your email %s for a confirmation link to set your password.', 'wporg' ),
+        '<code>' . esc_html( $account ) . '</code>'
+    );
+
+    $pending_user = wporg_get_pending_user( $request['account'] );
+    if ( ! $pending_user || $pending_user['created'] ) {
+        return $success_message;
+    }
+
+    // Allow for w.org plugins to block the action.
+    if ( null !== ( $pre_register_error = apply_filters( 'wporg_login_pre_registration', null, $pending_user['user_login'], $pending_user['user_email'], $pending_user['meta']['user_mailinglist'] ) ) ) {
+        return $success_message;
+    }
+
+    // Only one email per..
+    // - 1 minute for brand new accounts (<15min)
+    // - 5 minutes for new accounts (<1hr)
+    // - 3 hours there after
+    list( $requested_time, ) = explode( ':', $pending_user['user_activation_key'] );
+    $time_limit = 3 * HOUR_IN_SECONDS;
+
+    if ( time() - strtotime( $pending_user['user_registered'] ) < HOUR_IN_SECONDS ) {
+        $time_limit = 5 * MINUTE_IN_SECONDS;
+    }
+
+    if ( time() - strtotime( $pending_user['user_registered'] ) < 15 * MINUTE_IN_SECONDS ) {
+        $time_limit = MINUTE_IN_SECONDS;
+    }
+
+    if ( ( time() - $requested_time ) < $time_limit ) {
+        return $success_message;
+    }
+
+    wporg_login_send_confirmation_email( $pending_user );
+
+    return $success_message;
+}