Invite links: page selector + auto-redirect for stray tokens #19

Merged
thatguygriff merged 2 commits from fix/invite-registration-page-selector into main 2026-06-07 13:43:34 +00:00
3 changed files with 50 additions and 4 deletions
Showing only changes of commit 372f981a08 - Show all commits
+1
View File
@@ -41,6 +41,7 @@ recorded in `us_policy_acceptances` with `registration_type = account` and
## Admin Interface
**Invites** in wp-admin (`manage_students`, studio admin only):
- Select the **registration page** (the page hosting `[us_student_register]`), stored in the `us_registration_page_id` option; invitation links point there (falling back to the home page if unset)
- Invite an email (creates a pending invite + link)
- List pending invites; revoke an invite
+11
View File
@@ -5,6 +5,11 @@ namespace Unsupervised\Schedular\Auth;
class RegistrationController {
/**
* Option storing the page ID that hosts the [us_student_register] shortcode.
*/
public const OPTION_PAGE = 'us_registration_page_id';
public function __construct( private InviteRepository $invites ) {}
public function renderPage(): void {
@@ -17,6 +22,8 @@ class RegistrationController {
}
$pendingInvites = $this->invites->findPending();
$registrationPageId = (int) get_option( self::OPTION_PAGE, 0 );
$registrationPageUrl = $registrationPageId > 0 ? (string) get_permalink( $registrationPageId ) : '';
include USC_PLUGIN_DIR . 'templates/admin/invites.php';
}
@@ -26,6 +33,10 @@ class RegistrationController {
// phpcs:disable WordPress.Security.NonceVerification.Missing
$action = sanitize_key( wp_unslash( $_POST['usc_action'] ?? '' ) );
if ( 'set_page' === $action ) {
update_option( self::OPTION_PAGE, absint( $_POST['registration_page_id'] ?? 0 ) );
}
if ( 'invite' === $action ) {
$email = sanitize_email( wp_unslash( $_POST['email'] ?? '' ) );
+37 -3
View File
@@ -5,12 +5,46 @@ if (! defined('ABSPATH')) {
exit;
}
/** @var list<\Unsupervised\Schedular\Auth\Invite> $pendingInvites */
/**
* @var list<\Unsupervised\Schedular\Auth\Invite> $pendingInvites
* @var int $registrationPageId
* @var string $registrationPageUrl
*/
?>
<div class="wrap">
<h1><?php esc_html_e('Invites', 'unsupervised-schedular'); ?></h1>
<p class="description"><?php esc_html_e('Invite a student by email, then send them the registration link below. They complete signup and accept any required policies through the [us_student_register] page.', 'unsupervised-schedular'); ?></p>
<h2><?php esc_html_e('Registration Page', 'unsupervised-schedular'); ?></h2>
<form method="post">
<?php wp_nonce_field('usc_invite_action'); ?>
<input type="hidden" name="usc_action" value="set_page">
<table class="form-table">
<tr>
<th><label for="registration_page_id"><?php esc_html_e('Page with the registration form', 'unsupervised-schedular'); ?></label></th>
<td>
<?php
wp_dropdown_pages(
[
'name' => 'registration_page_id',
'id' => 'registration_page_id',
'selected' => $registrationPageId,
'show_option_none' => esc_html__('— Select a page —', 'unsupervised-schedular'),
'option_none_value' => '0',
]
);
?>
<p class="description"><?php esc_html_e('Choose the page that contains the [us_student_register] shortcode. Invitation links point here.', 'unsupervised-schedular'); ?></p>
</td>
</tr>
</table>
<?php submit_button(esc_html__('Save Page', 'unsupervised-schedular'), 'secondary'); ?>
</form>
<?php if ($registrationPageUrl === '') : ?>
<div class="notice notice-warning inline"><p><?php esc_html_e('No registration page is set yet — invitation links will fall back to the site home page. Select a page above.', 'unsupervised-schedular'); ?></p></div>
<?php endif; ?>
<h2><?php esc_html_e('Invite a Student', 'unsupervised-schedular'); ?></h2>
<form method="post">
<?php wp_nonce_field('usc_invite_action'); ?>
@@ -38,13 +72,13 @@ if (! defined('ABSPATH')) {
</tr>
</thead>
<tbody>
<?php $linkBase = $registrationPageUrl !== '' ? $registrationPageUrl : home_url('/'); ?>
<?php foreach ($pendingInvites as $invite) : ?>
<?php $link = esc_url(add_query_arg('us_invite', $invite->token, home_url('/'))); ?>
<?php $link = esc_url(add_query_arg('us_invite', $invite->token, $linkBase)); ?>
<tr>
<td><?php echo esc_html($invite->email); ?></td>
<td>
<input type="text" class="large-text code" readonly value="<?php echo esc_attr($link); ?>" onclick="this.select()">
<span class="description"><?php esc_html_e('Point this token (?us_invite=…) at the page containing the registration shortcode.', 'unsupervised-schedular'); ?></span>
</td>
<td>
<form method="post" style="display:inline;">