Martin Slachta
63 lines
2.6 KiB
PHP
63 lines
2.6 KiB
PHP
<?php
|
|
|
|
class RsvTimetableReservationController {
|
|
use RsvPagedResponseTrait;
|
|
|
|
private $namespace = 'reservations/v1';
|
|
private $resource_name = '/timetable/(?P<id>\d+)/reservation';
|
|
|
|
public function register_routes(): void {
|
|
register_rest_route($this->namespace, $this->resource_name, [
|
|
'methods' => 'GET',
|
|
'callback' => [$this, 'by_timetable'],
|
|
'permission_callback' => [RsvRestPolicy::class, 'admin'],
|
|
]);
|
|
|
|
register_rest_route($this->namespace, '/timetable-reservation/accept/(?P<code>[a-zA-Z0-9]+)', [
|
|
'methods' => 'GET',
|
|
'callback' => [$this, 'accept'],
|
|
// Capability URL: authorised by the secret confirmation code, which
|
|
// accept() validates against the database before changing state.
|
|
'permission_callback' => [RsvRestPolicy::class, 'open'],
|
|
]);
|
|
|
|
register_rest_route($this->namespace, '/timetable-reservation/refuse/(?P<code>[a-zA-Z0-9]+)', [
|
|
'methods' => 'GET',
|
|
'callback' => [$this, 'refuse'],
|
|
// Capability URL: authorised by the secret confirmation code, which
|
|
// refuse() validates against the database before changing state.
|
|
'permission_callback' => [RsvRestPolicy::class, 'open'],
|
|
]);
|
|
}
|
|
|
|
public function by_timetable(WP_REST_Request $request): WP_REST_Response {
|
|
[$skip, $limit] = self::paging($request);
|
|
$timetable_id = (int) $request->get_param('id');
|
|
$service = new RsvTimetableReservationService();
|
|
return $this->paged_response(
|
|
$service->get_by_timetable($timetable_id, $limit, $skip),
|
|
$service->count_by_timetable($timetable_id)
|
|
);
|
|
}
|
|
|
|
function accept(WP_REST_Request $request) {
|
|
try {
|
|
$service = new RsvTimetableReservationService();
|
|
$service->accept($request->get_param('code'));
|
|
return new WP_REST_Response(['status' => 'accepted'], 200);
|
|
} catch (InvalidArgumentException $e) {
|
|
return new WP_REST_Response(['error' => 'Invalid or expired confirmation code.'], 404);
|
|
}
|
|
}
|
|
|
|
function refuse(WP_REST_Request $request) {
|
|
try {
|
|
$service = new RsvTimetableReservationService();
|
|
$service->refuse($request->get_param('code'));
|
|
return new WP_REST_Response(['status' => 'refused'], 200);
|
|
} catch (InvalidArgumentException $e) {
|
|
return new WP_REST_Response(['error' => 'Invalid or expired confirmation code.'], 404);
|
|
}
|
|
}
|
|
}
|