fix(user): rebuild badge modal ajax flow

This commit is contained in:
2026-08-19 15:53:33 +08:00
parent 029df27b1d
commit 9c827ff493
14 changed files with 243 additions and 591 deletions
+151 -158
View File
@@ -20,8 +20,6 @@ class Badges {
private static ?array $dictionary_cache = null;
/** @var array<int,array{owned_map:array<string,string>,owned:list<string>,wear:string}> */
private static array $user_context_cache = [];
/** @var array<string,array<string,mixed>> */
private static array $list_cache = [];
private function __construct() {}
@@ -33,23 +31,27 @@ class Badges {
}
public function init(): void {
add_action('rest_api_init', [$this, 'register_routes']);
add_action('wp_ajax_aksrt_user_medal_info_modal', [$this, 'ajax_info_modal']);
add_action('wp_ajax_nopriv_aksrt_user_medal_info_modal', [$this, 'ajax_info_modal']);
add_action('wp_ajax_aksrt_single_medal_info_modal', [$this, 'ajax_single_modal']);
add_action('wp_ajax_nopriv_aksrt_single_medal_info_modal', [$this, 'ajax_single_modal']);
add_action('wp_ajax_aksrt_user_medal_manually_add_modal', [$this, 'ajax_grant_modal']);
add_action('wp_ajax_aksrt_user_medal_wear', [$this, 'ajax_wear']);
add_action('wp_ajax_nopriv_aksrt_user_medal_wear', [$this, 'ajax_wear']);
add_action('wp_ajax_aksrt_user_medal_manually_add', [$this, 'ajax_grant']);
add_action('wp_ajax_nopriv_aksrt_user_medal_manually_add', [$this, 'ajax_grant']);
add_action('wp_ajax_aksrt_user_medal_manually_remove', [$this, 'ajax_revoke']);
add_action('wp_ajax_nopriv_aksrt_user_medal_manually_remove', [$this, 'ajax_revoke']);
add_action('aksrt_badge_granted', [$this, 'on_badge_granted_notify'], 10, 3);
}
private static function clear_context(int $user_id = 0): void {
if ($user_id > 0) {
unset(self::$user_context_cache[$user_id]);
foreach (array_keys(self::$list_cache) as $key) {
if (strpos($key, $user_id . ':') === 0) {
unset(self::$list_cache[$key]);
}
}
do_action('aksrt_badges_changed', $user_id);
return;
}
self::$user_context_cache = [];
self::$list_cache = [];
}
public static function invalidate_cache(int $user_id = 0): void {
@@ -89,79 +91,6 @@ class Badges {
}
}
/**
* Register the canonical JSON badge routes.
*/
public function register_routes(): void {
register_rest_route('aksrt/v1', '/users/(?P<id>\d+)/badges', [
'methods' => 'GET',
'callback' => [$this, 'rest_list'],
'permission_callback' => '__return_true',
'args' => [
'id' => [
'type' => 'integer',
'required' => true,
'sanitize_callback' => 'absint',
],
],
]);
register_rest_route('aksrt/v1', '/users/me/badges/wear', [
'methods' => 'POST',
'callback' => [$this, 'rest_wear'],
'permission_callback' => static function () {
return is_user_logged_in();
},
'args' => [
'slug' => [
'type' => 'string',
'required' => true,
'sanitize_callback' => 'sanitize_key',
],
],
]);
register_rest_route('aksrt/v1', '/users/(?P<id>\d+)/badges/grant', [
'methods' => 'POST',
'callback' => [$this, 'rest_grant'],
'permission_callback' => [$this, 'rest_can_manually_set'],
'args' => [
'slug' => [
'type' => 'string',
'required' => true,
'sanitize_callback' => 'sanitize_key',
],
'id' => [
'type' => 'integer',
'required' => true,
'sanitize_callback' => 'absint',
],
],
]);
register_rest_route('aksrt/v1', '/users/(?P<id>\d+)/badges/revoke', [
'methods' => 'POST',
'callback' => [$this, 'rest_revoke'],
'permission_callback' => [$this, 'rest_can_manually_set'],
'args' => [
'slug' => [
'type' => 'string',
'required' => true,
'sanitize_callback' => 'sanitize_key',
],
'id' => [
'type' => 'integer',
'required' => true,
'sanitize_callback' => 'absint',
],
],
]);
}
public function rest_can_manually_set(): bool {
return self::can_manually_set(get_current_user_id());
}
public static function enabled(): bool {
if (!class_exists('\AKSRT\Settings\Settings')) {
@@ -412,27 +341,17 @@ class Badges {
return false;
}
/**
* Public DTO for REST / modals: catalog grouped by category with per-item
* ownership state. Unearned badges are only exposed to the owner (or to
* managers via $include_private), matching zibll visibility rules.
*
* @return array{enabled:bool,public_display:bool,is_self:bool,can_wear:bool,user_id:int,wear:string,count:int,show_unearned:bool,categories:list<array{cat_name:string,items:list<array{slug:string,label:string,desc:string,icon_url:string,owned:bool,wear:bool,time:string}>}>}
*/
/** Build the privacy-aware catalog used by the server-rendered modal. */
public static function list_for_user(int $user_id, bool $include_private = false): array {
$enabled = self::enabled();
$public = self::public_display();
$viewer = get_current_user_id();
$is_self = $viewer > 0 && $viewer === $user_id;
$is_manager = self::can_manually_set($viewer);
$cache_key = $user_id . ':' . ($include_private ? 'private' : 'public') . ':' . $viewer . ':' . (int) $enabled . ':' . (int) $public;
if (array_key_exists($cache_key, self::$list_cache)) {
return self::$list_cache[$cache_key];
}
$can_see = $include_private || $public || $is_self || $is_manager;
if (!$enabled || !$can_see || $user_id <= 0) {
return self::$list_cache[$cache_key] = [
return [
'enabled' => $enabled,
'public_display' => $public,
'is_self' => $is_self,
@@ -481,6 +400,7 @@ class Badges {
'owned' => $has,
'wear' => $has && $slug === $wear,
'time' => $has && $show_private ? (string) $owned_map[$slug] : '',
'get_type' => sanitize_key((string) ($row['get_type'] ?? 'manually_add')),
];
// Owned first within each category (zibll is-has / no-has order).
if ($has) {
@@ -499,7 +419,7 @@ class Badges {
];
}
return self::$list_cache[$cache_key] = [
return [
'enabled' => true,
'public_display' => $public,
'is_self' => $is_self,
@@ -512,80 +432,153 @@ class Badges {
];
}
public function rest_list(\WP_REST_Request $request) {
$user_id = (int) $request['id'];
if ($user_id <= 0 || !get_userdata($user_id)) {
return new \WP_Error('aksrt_badge_user', __('用户不存在', 'aksrt'), ['status' => 404]);
private static function ajax_nonce(): string { return 'aksrt_public_nonce'; }
private static function ajax_error(string $message): void {
wp_send_json_error(['message' => $message]);
}
private static function ajax_require_nonce(): void {
$nonce = isset($_REQUEST['nonce']) ? sanitize_text_field(wp_unslash((string) $_REQUEST['nonce'])) : '';
if (!$nonce || !wp_verify_nonce($nonce, self::ajax_nonce())) {
self::ajax_error(__('请求已过期,请刷新页面后重试', 'aksrt'));
}
}
private static function ajax_user_id(): int {
return isset($_REQUEST['id']) ? absint($_REQUEST['id']) : 0;
}
private static function ajax_slug(): string {
return isset($_REQUEST['slug']) ? sanitize_key(wp_unslash((string) $_REQUEST['slug'])) : '';
}
private static function icon_html(array $item, string $class = 'img-icon medal-icon'): string {
$icon = esc_url((string) ($item['icon_url'] ?? ''));
$label = esc_attr((string) ($item['label'] ?? __('徽章', 'aksrt')));
if ($icon !== '') {
return '<img' . (function_exists('aksrt_get_lazy_attr') ? aksrt_get_lazy_attr('lazy_other', $icon, $class) : ' src="' . $icon . '" class="' . esc_attr($class) . '"') . ' alt="' . $label . '">';
}
return '<span class="medal-icon medal-icon--fa"><i class="fa fas fa-trophy" aria-hidden="true"></i></span>';
}
private static function item_by_slug(array $data, string $slug): array {
foreach ((array) ($data['categories'] ?? []) as $category) {
foreach ((array) ($category['items'] ?? []) as $item) {
if ((string) ($item['slug'] ?? '') === $slug) return $item;
}
}
return [];
}
private static function modal_header(int $user_id, string $text): string {
$avatar = function_exists('aksrt_get_avatar_html') ? aksrt_get_avatar_html($user_id, 42, ['class' => 'medal-modal__avatar']) : get_avatar($user_id, 42);
return '<div class="medal-modal__head">' . $avatar . '<div class="medal-modal__title">' . $text . '</div></div>';
}
private static function modal_info_html(int $user_id): string {
$user = get_userdata($user_id);
if (!$user) return '<div class="medal-modal__empty">' . esc_html__('用户不存在', 'aksrt') . '</div>';
if (!self::enabled()) return '<div class="medal-modal__empty">' . esc_html__('徽章系统未启用', 'aksrt') . '</div>';
$data = self::list_for_user($user_id);
$response = rest_ensure_response(['success' => true, 'data' => $data]);
return self::rest_no_store($response);
$name = $user_id === get_current_user_id() ? __('我的徽章', 'aksrt') : sprintf(__('%s的徽章', 'aksrt'), $user->display_name);
$wear = self::item_by_slug($data, (string) ($data['wear'] ?? ''));
if ($wear) $name .= self::icon_html($wear, 'img-icon medal-icon ml3');
elseif (!(int) ($data['count'] ?? 0)) $name .= '<span class="badg-sm badg c-red ml6">' . esc_html__('暂无徽章', 'aksrt') . '</span>';
$html = '<div class="medal-modal">' . self::modal_header($user_id, '<span class="em09">' . wp_kses_post($name) . '</span>') . '<div class="mini-scrollbar scroll-y max-vh5 medal-modal__scroll">';
$has = false;
foreach ((array) ($data['categories'] ?? []) as $category) {
$cards = '';
foreach ((array) ($category['items'] ?? []) as $item) {
if (empty($item['owned']) && empty($data['show_unearned'])) continue;
$has = true;
$card = '<div class="medal-card' . (!empty($item['owned']) ? ' is-has' : ' no-has') . '">' . self::icon_html($item) . '<div class="muted-color px12 mt6">' . esc_html((string) $item['label']) . '</div></div>';
$url = add_query_arg(['action' => 'aksrt_single_medal_info_modal', 'name' => $item['slug'], 'user_id' => $user_id], admin_url('admin-ajax.php'));
$cards .= '<div class="medal-list"><a class="single-medal-info aksrt-modal-link" data-aksrt-modal="remote" data-aksrt-modal-url="' . esc_url($url) . '" data-aksrt-modal-class="modal-mini" data-aksrt-modal-mobile-bottom="true" data-aksrt-modal-cache="false" href="' . esc_url($url) . '">' . $card . '</a></div>';
}
if ($cards) $html .= '<div class="medal-cat-box muted-box mb20"><div class="mb20"><b class="medal-cat-name">' . esc_html((string) $category['cat_name']) . '</b></div><div class="medal-list-box">' . $cards . '</div></div>';
}
if (!$has) $html .= '<div class="medal-modal__empty">' . esc_html__('暂无徽章', 'aksrt') . '</div>';
$html .= '</div>';
if ($user_id !== get_current_user_id()) {
$mine = add_query_arg(['action' => 'aksrt_user_medal_info_modal', 'id' => get_current_user_id()], admin_url('admin-ajax.php'));
$grant = add_query_arg(['action' => 'aksrt_user_medal_manually_add_modal', 'id' => $user_id], admin_url('admin-ajax.php'));
$buttons = '';
if (get_current_user_id()) $buttons .= '<a class="but aksrt-modal-link" data-aksrt-modal="remote" data-aksrt-modal-url="' . esc_url($mine) . '" data-aksrt-modal-cache="false" href="' . esc_url($mine) . '">' . esc_html__('查看我的徽章', 'aksrt') . '</a>';
if (self::can_manually_set()) $buttons .= '<a class="but c-blue aksrt-modal-link" data-aksrt-modal="remote" data-aksrt-modal-url="' . esc_url($grant) . '" data-aksrt-modal-cache="false" href="' . esc_url($grant) . '">' . esc_html__('授予徽章', 'aksrt') . '</a>';
if ($buttons !== '') $html .= '<div class="medal-modal__buts">' . $buttons . '</div>';
}
$html .= '</div>';
return $html;
}
public function rest_wear(\WP_REST_Request $request) {
$params = $request->get_json_params();
if (!is_array($params)) {
$params = $request->get_params();
private static function modal_single_html(int $user_id, string $slug): string {
if (!$user_id || !get_userdata($user_id)) return '<div class="medal-modal__empty">' . esc_html__('用户不存在', 'aksrt') . '</div>';
if (!self::enabled()) return '<div class="medal-modal__empty">' . esc_html__('徽章系统未启用', 'aksrt') . '</div>';
$data = self::list_for_user($user_id);
$item = self::item_by_slug($data, $slug);
if (!$item) return '<div class="medal-modal__empty">' . esc_html__('参数传入错误或没有此徽章', 'aksrt') . '</div>';
$state = '';
if (!empty($item['owned']) && !empty($item['time'])) $state = '<div class="c-blue px12 mt10">' . esc_html(sprintf(__('%s 获得', 'aksrt'), $item['time'])) . '</div>';
elseif (empty($item['owned'])) $state = '<div class="c-yellow px12 mt20">' . esc_html__('暂未获得', 'aksrt') . '</div>';
$html = '<div class="medal-modal medal-modal--single"><div class="medal-single-card"><div class="medal-single-bg"><img src="' . esc_url(get_theme_file_uri('/assets/img/medal/medal-background.svg')) . '" alt=""></div><div class="relative">' . self::icon_html($item) . '<div class="mt20">' . esc_html($item['label']) . '</div><div class="muted-2-color px12 mt10">' . esc_html($item['desc']) . '</div>' . $state . '</div></div>';
if ($user_id === get_current_user_id() && !empty($item['owned'])) {
if (!empty($item['wear'])) $html .= '<div class="box-body"><span class="badg btn-block c-blue">' . esc_html__('当前佩戴此徽章', 'aksrt') . '</span></div>';
else $html .= '<div class="box-body"><a href="javascript:;" class="but btn-block radius jb-blue aksrt-badge-action" data-aksrt-badge-action="wear" data-slug="' . esc_attr($slug) . '">' . esc_html__('佩戴此徽章', 'aksrt') . '</a></div>';
} elseif ($user_id !== get_current_user_id() && self::can_manually_set() && !empty($item['owned'])) {
$html .= '<div class="box-body"><a href="javascript:;" class="but btn-block radius c-red aksrt-badge-action" data-aksrt-badge-action="revoke" data-user-id="' . (int) $user_id . '" data-slug="' . esc_attr($slug) . '">' . esc_html__('收回此徽章', 'aksrt') . '</a></div>';
} elseif ($user_id !== get_current_user_id() && self::can_manually_set() && empty($item['owned']) && (($item['get_type'] ?? '') === 'manually_add')) {
$html .= '<div class="box-body"><a href="javascript:;" class="but btn-block radius c-blue aksrt-badge-action" data-aksrt-badge-action="grant" data-user-id="' . (int) $user_id . '" data-slug="' . esc_attr($slug) . '">' . esc_html__('授予此徽章', 'aksrt') . '</a></div>';
}
$slug = sanitize_key((string) ($params['slug'] ?? ''));
$result = self::wear(get_current_user_id(), $slug);
if (is_wp_error($result)) {
return $result;
}
return self::rest_no_store(rest_ensure_response([
'success' => true,
'data' => self::list_for_user(get_current_user_id(), true),
'message' => __('已佩戴徽章', 'aksrt'),
]));
return $html . '</div>';
}
public function rest_grant(\WP_REST_Request $request) {
$user_id = (int) $request['id'];
if ($user_id <= 0 || !get_userdata($user_id)) {
return new \WP_Error('aksrt_badge_user', __('用户不存在', 'aksrt'), ['status' => 404]);
public function ajax_info_modal(): void { echo self::modal_info_html(self::ajax_user_id()); exit; }
public function ajax_single_modal(): void { echo self::modal_single_html(absint($_REQUEST['user_id'] ?? 0), sanitize_key(wp_unslash((string) ($_REQUEST['name'] ?? '')))); exit; }
public function ajax_grant_modal(): void {
$user_id = self::ajax_user_id();
if (!$user_id || !get_userdata($user_id)) { echo '<div class="medal-modal__empty">' . esc_html__('用户不存在', 'aksrt') . '</div>'; exit; }
if (!self::enabled()) { echo '<div class="medal-modal__empty">' . esc_html__('徽章系统未启用', 'aksrt') . '</div>'; exit; }
if (!self::can_manually_set()) { echo '<div class="medal-modal__empty">' . esc_html__('您没有此权限', 'aksrt') . '</div>'; exit; }
$data = self::list_for_user($user_id, true);
$html = '<div class="medal-modal">' . self::modal_header($user_id, '<span class="em09">' . sprintf(__('为%s授予新的徽章', 'aksrt'), esc_html(get_the_author_meta('display_name', $user_id))) . '</span>') . '<div class="mini-scrollbar scroll-y max-vh5 medal-modal__scroll">';
$has = false;
foreach ((array) ($data['categories'] ?? []) as $category) {
$cards = '';
foreach ((array) ($category['items'] ?? []) as $item) {
if (($item['get_type'] ?? '') !== 'manually_add') continue;
$has = true;
$action = !empty($item['owned']) ? 'revoke' : 'grant';
$label = $action === 'revoke' ? __('收回', 'aksrt') : __('授予', 'aksrt');
$cards .= '<div class="medal-grant-item"><div class="medal-card">' . self::icon_html($item) . '<div class="mt6 em09">' . esc_html($item['label']) . '</div><div class="muted-2-color px12 mt6">' . esc_html($item['desc']) . '</div></div><a href="javascript:;" class="but btn-block radius px12 c-' . ($action === 'revoke' ? 'red' : 'blue') . ' mt6 aksrt-badge-action" data-aksrt-badge-action="' . esc_attr($action) . '" data-user-id="' . (int) $user_id . '" data-slug="' . esc_attr($item['slug']) . '">' . esc_html($label) . '</a></div>';
}
if ($cards) $html .= '<div class="medal-cat-box muted-box mb20"><div class="mb20"><b class="medal-cat-name">' . esc_html($category['cat_name']) . '</b></div><div class="medal-list-box medal-list-box--grant">' . $cards . '</div></div>';
}
$params = $request->get_json_params();
if (!is_array($params)) {
$params = $request->get_params();
}
$slug = sanitize_key((string) ($params['slug'] ?? ''));
$result = self::grant($user_id, $slug, get_current_user_id());
if (is_wp_error($result)) {
return $result;
}
return self::rest_no_store(rest_ensure_response([
'success' => true,
'data' => self::list_for_user($user_id, true),
'message' => __('已授予徽章', 'aksrt'),
]));
if (!$has) $html .= '<div class="medal-modal__empty">' . esc_html__('暂无可授予的徽章', 'aksrt') . '</div>';
echo $html . '</div></div>';
exit;
}
public function rest_revoke(\WP_REST_Request $request) {
$user_id = (int) $request['id'];
if ($user_id <= 0 || !get_userdata($user_id)) {
return new \WP_Error('aksrt_badge_user', __('用户不存在', 'aksrt'), ['status' => 404]);
}
$params = $request->get_json_params();
if (!is_array($params)) {
$params = $request->get_params();
}
$slug = sanitize_key((string) ($params['slug'] ?? ''));
$result = self::revoke($user_id, $slug, get_current_user_id());
if (is_wp_error($result)) {
return $result;
}
return self::rest_no_store(rest_ensure_response([
'success' => true,
'data' => self::list_for_user($user_id, true),
'message' => __('已收回徽章', 'aksrt'),
]));
}
private static function rest_no_store(\WP_REST_Response $response): \WP_REST_Response {
$response->header('Cache-Control', 'no-store, private');
$response->header('Pragma', 'no-cache');
return $response;
private function ajax_mutation(string $operation): void {
self::ajax_require_nonce();
if (!is_user_logged_in()) self::ajax_error(__('请先登录', 'aksrt'));
if (!self::enabled()) self::ajax_error(__('徽章系统未启用', 'aksrt'));
$user_id = $operation === 'wear' ? get_current_user_id() : self::ajax_user_id();
$slug = self::ajax_slug();
if (!$user_id || !get_userdata($user_id) || !$slug) self::ajax_error(__('参数传入错误', 'aksrt'));
if ($operation !== 'wear' && !self::can_manually_set()) self::ajax_error(__('暂无此权限', 'aksrt'));
$item = self::item_by_slug(self::list_for_user($user_id, true), $slug);
if (!$item) self::ajax_error(__('徽章不存在', 'aksrt'));
if ($operation === 'grant' && ($item['get_type'] ?? '') !== 'manually_add') self::ajax_error(__('该徽章不可手动授予', 'aksrt'));
if ($operation === 'revoke' && empty($item['owned'])) self::ajax_error(__('用户未获得该徽章', 'aksrt'));
$result = $operation === 'wear' ? self::wear($user_id, $slug) : ($operation === 'grant' ? self::grant($user_id, $slug, get_current_user_id()) : self::revoke($user_id, $slug, get_current_user_id()));
if (is_wp_error($result)) self::ajax_error($result->get_error_message());
$message = ['wear' => __('已佩戴徽章', 'aksrt'), 'grant' => __('已授予徽章', 'aksrt'), 'revoke' => __('已收回徽章', 'aksrt')][$operation];
wp_send_json_success(['message' => $message, 'reload' => true]);
}
public function ajax_wear(): void { $this->ajax_mutation('wear'); }
public function ajax_grant(): void { $this->ajax_mutation('grant'); }
public function ajax_revoke(): void { $this->ajax_mutation('revoke'); }
/**