Changeset 3763844 for gen-wave/trunk/src/Core/AgentAuth.php

Timestamp:

10/25/2026 12:38:56 AM (3 days ago)

Author:

ofirs1988

Message:

Update to version 1.2.2 from GitHub

File:

• gen-wave/trunk/src/Core/AgentAuth.php (modified) (5 diffs)

gen-wave/trunk/src/Core/AgentAuth.php

@@ -28 +28 @@
     }
 
+    /**
+     * The verify-domain challenge is answered only while this site is talking to
+     * the panel (connect, disconnect): a short window opened before the request
+     * and closed after it. Five minutes covers a slow panel; it closes itself.
+     */
+    private const CHALLENGE_WINDOW = 'genwave_challenge_open';
+
+    public static function openChallenge(): void
+    {
+        set_transient(self::CHALLENGE_WINDOW, 1, 5 * MINUTE_IN_SECONDS);
+    }
+
+    public static function closeChallenge(): void
+    {
+        delete_transient(self::CHALLENGE_WINDOW);
+    }
+
+    public static function challengeOpen(): bool
+    {
+        return (bool) get_transient(self::CHALLENGE_WINDOW);
+    }
+
     /** True once the site has completed the signed connect. */
     public static function isConnected(): bool
@@ -45 +67 @@
         }
 
+        // The panel calls back to verify-domain during this request: answer it now, and only now.
+        self::openChallenge();
         $response = wp_remote_post(self::panelUrl() . '/api/plugin/connect', [
             'headers' => ['Content-Type' => 'application/json', 'Accept' => 'application/json'],
@@ -56 +80 @@
         ]);
 
+        self::closeChallenge();
+
         if (is_wp_error($response)) {
             return ['success' => false, 'message' => $response->get_error_message()];
@@ -93 +119 @@
 
         if (!empty($licenseKey)) {
+            self::openChallenge();
             wp_remote_post(self::panelUrl() . '/api/plugin/disconnect', [
                 'headers' => ['Content-Type' => 'application/json', 'Accept' => 'application/json'],
@@ -102 +129 @@
                 'sslverify' => ! preg_match('#(localhost|127\.0\.0\.1|\.local)#', self::panelUrl()),
             ]);
+            self::closeChallenge();
         }