<?php

[0] Fix | Delete

/**

[1] Fix | Delete

* Cart token utility functions.

[2] Fix | Delete

*/

[3] Fix | Delete

[4] Fix | Delete

declare(strict_types=1);

[5] Fix | Delete

[6] Fix | Delete

namespace Automattic\WooCommerce\StoreApi\Utilities;

[7] Fix | Delete

[8] Fix | Delete

use Automattic\WooCommerce\StoreApi\Authentication;

[9] Fix | Delete

use Automattic\WooCommerce\StoreApi\Utilities\JsonWebToken;

[10] Fix | Delete

[11] Fix | Delete

/**

[12] Fix | Delete

* Cart token utility functions.

[13] Fix | Delete

*/

[14] Fix | Delete

class CartTokenUtils {

[15] Fix | Delete

/**

[16] Fix | Delete

* Generate a cart token.

[17] Fix | Delete

*

[18] Fix | Delete

* @param string $customer_id The customer ID.

[19] Fix | Delete

* @return string

[20] Fix | Delete

*/

[21] Fix | Delete

public static function get_cart_token( string $customer_id ): string {

[22] Fix | Delete

return JsonWebToken::create(

[23] Fix | Delete

array(

[24] Fix | Delete

'user_id' => $customer_id,

[25] Fix | Delete

'exp' => self::get_cart_token_expiration(),

[26] Fix | Delete

'iss' => 'store-api',

[27] Fix | Delete

),

[28] Fix | Delete

self::get_cart_token_secret()

[29] Fix | Delete

);

[30] Fix | Delete

}

[31] Fix | Delete

[32] Fix | Delete

/**

[33] Fix | Delete

* Validate the cart token.

[34] Fix | Delete

*

[35] Fix | Delete

* @param string $cart_token The cart token.

[36] Fix | Delete

* @return bool

[37] Fix | Delete

*/

[38] Fix | Delete

public static function validate_cart_token( string $cart_token ): bool {

[39] Fix | Delete

return JsonWebToken::validate( $cart_token, self::get_cart_token_secret() );

[40] Fix | Delete

}

[41] Fix | Delete

[42] Fix | Delete

/**

[43] Fix | Delete

* Get the cart token payload.

[44] Fix | Delete

*

[45] Fix | Delete

* @param string $cart_token The cart token.

[46] Fix | Delete

* @return array

[47] Fix | Delete

*/

[48] Fix | Delete

public static function get_cart_token_payload( string $cart_token ): array {

[49] Fix | Delete

$parts = JsonWebToken::get_parts( $cart_token )->payload;

[50] Fix | Delete

[51] Fix | Delete

return array(

[52] Fix | Delete

'user_id' => $parts->user_id ?? '',

[53] Fix | Delete

'exp' => $parts->exp ?? 0,

[54] Fix | Delete

'iss' => $parts->iss ?? '',

[55] Fix | Delete

);

[56] Fix | Delete

}

[57] Fix | Delete

[58] Fix | Delete

/**

[59] Fix | Delete

* Get the cart token secret.

[60] Fix | Delete

*

[61] Fix | Delete

* @return string

[62] Fix | Delete

*/

[63] Fix | Delete

private static function get_cart_token_secret(): string {

[64] Fix | Delete

return '@' . wp_salt();

[65] Fix | Delete

}

[66] Fix | Delete

[67] Fix | Delete

/**

[68] Fix | Delete

* Gets the expiration of the cart token. Defaults to 48h.

[69] Fix | Delete

*

[70] Fix | Delete

* @return int

[71] Fix | Delete

*/

[72] Fix | Delete

private static function get_cart_token_expiration(): int {

[73] Fix | Delete

/**

[74] Fix | Delete

* Filters the session expiration.

[75] Fix | Delete

*

[76] Fix | Delete

* @since 5.0.0

[77] Fix | Delete

* @param int $expiration Expiration in seconds.

[78] Fix | Delete

*/

[79] Fix | Delete

return time() + intval( apply_filters( 'wc_session_expiration', DAY_IN_SECONDS * 2 ) );

[80] Fix | Delete

}

[81] Fix | Delete

}

[82] Fix | Delete

[83] Fix | Delete