bumb version 1.0.20

digitoimistodude · Sep 12, 2023 · d084b14 · d084b14
1 parent 9b90d94
commit d084b14
Show file tree

Hide file tree

Showing 10 changed files with 14 additions and 2 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,3 +1,7 @@
+### 1.0.20: 2023-09-12
+## Added
+* Added nonce to allow usage of logged in user during rest api calls.
+
 ### 1.0.19: 2023-02-24
 ## Added
 * Set focus to search text field if url has a parameter with its name

diff --git a/README.md b/README.md
diff --git a/air-search.php b/air-search.php
@@ -40,6 +40,7 @@ function enqueue_scripts() {
     'disable_checkbox_auto_search' => apply_filters( 'air_search_disable_checkbox_auto_search', false ),
     'disable_select_auto_search' => apply_filters( 'air_search_disable_select_auto_search', false ),
     'search_on_empty' => wp_json_encode( get_location_search_on_empty_setting() ),
+    'nonce'           => wp_create_nonce( 'wp_rest' ),
   ] );
 } // end enqueue_scripts
 

diff --git a/composer.json b/composer.json
@@ -8,7 +8,7 @@
     "plugin"
   ],
   "license": "GPL-3.0+",
-  "version": "1.0.19",
+  "version": "1.0.20",
   "authors": [
     {
       "name": "Digitoimisto Dude Oy",

diff --git a/helpers.php b/helpers.php
diff --git a/index.php b/index.php
diff --git a/phpcs.xml b/phpcs.xml
diff --git a/query.php b/query.php
diff --git a/scripts.js b/scripts.js
@@ -136,7 +136,14 @@ function formSubmitEvent() {
 
 async function callApi(searchText, location, args, searchFieldName = 's') {
   const apiBase = 'air-search/v1/';
-  const res = await fetch(`${air_search_settings.rest_api_base}${apiBase + location}/${searchText}${args}`, { method: 'GET' });
+  const res = await fetch(`${air_search_settings.rest_api_base}${apiBase + location}/${searchText}${args}`, {
+    method: 'GET',
+    credentials: 'same-origin',
+    headers: new Headers({
+      'Content-Type': 'application/json',
+      'X-WP-Nonce': air_search_settings.nonce,
+    }),
+  });
 
   let urlArgs = `${args}airloc=${location}`;
   if (searchText) {

diff --git a/templates/air-search-item-default.php b/templates/air-search-item-default.php