' . esc_html( $description ) . '
'; } } /** * Displays a select/drop-down input field on the options page * * @param string $option_name the name of the plugin option. * @param string $description description to display under option. * @return void */ public function options_page_select_input_action( $option_name, $description = false ) { $option_value = get_option( $option_name, AhJwtAuthSettings::DEFAULTS[ $option_name ] ); printf( '' ); if ( false !== $description ) { echo '' . esc_html( $description ) . '
'; } } /** * Displays a checkbox input field on the options page * * @param string $option_name the name of the plugin option. * @param string $label the label displayed next to the checkbox. * @param string $description description to display under option. * @return void */ public function options_page_checkbox_input_action( $option_name, $label, $description = false ) { $option_value = get_option( $option_name, AhJwtAuthSettings::DEFAULTS[ $option_name ] ); printf( '', esc_attr( $option_name ), checked( '1', $option_value, false ), esc_html( $label ) ); if ( false !== $description ) { echo '' . esc_html( $description ) . '
'; } } /** * Sets up actions for plugin settings * * @return void */ public function register_settings_action() { add_settings_section( 'ahjwtauth-sign-in-widget-options-section', '', null, 'ahjwtauth-sign-in-widget', ); register_setting( 'ahjwtauth-sign-in-widget', AhJwtAuthSettings::PRIVATE_SECRET, array( 'type' => 'string', 'show_in_rest' => false, 'sanitize_callback' => 'sanitize_textarea_field', 'default' => AhJwtAuthSettings::DEFAULTS[ AhJwtAuthSettings::PRIVATE_SECRET ], ), ); register_setting( 'ahjwtauth-sign-in-widget', AhJwtAuthSettings::JWKS_URL, array( 'type' => 'string', 'show_in_rest' => true, 'sanitize_callback' => 'esc_url_raw', 'default' => AhJwtAuthSettings::DEFAULTS[ AhJwtAuthSettings::JWKS_URL ], ), ); register_setting( 'ahjwtauth-sign-in-widget', AhJwtAuthSettings::JWT_HEADER, array( 'type' => 'string', 'show_in_rest' => true, 'sanitize_callback' => 'sanitize_text_field', 'default' => AhJwtAuthSettings::DEFAULTS[ AhJwtAuthSettings::JWT_HEADER ], ), ); register_setting( 'ahjwtauth-sign-in-widget', AhJwtAuthSettings::AUDIENCE, array( 'type' => 'string', 'show_in_rest' => true, 'sanitize_callback' => 'sanitize_text_field', 'default' => AhJwtAuthSettings::DEFAULTS[ AhJwtAuthSettings::AUDIENCE ], ), ); register_setting( 'ahjwtauth-sign-in-widget', AhJwtAuthSettings::ISSUER, array( 'type' => 'string', 'show_in_rest' => true, 'sanitize_callback' => 'sanitize_text_field', 'default' => AhJwtAuthSettings::DEFAULTS[ AhJwtAuthSettings::ISSUER ], ), ); register_setting( 'ahjwtauth-sign-in-widget', AhJwtAuthSettings::USER_ROLE, array( 'type' => 'string', 'show_in_rest' => true, 'sanitize_callback' => function ( $value ) { $valid_roles = wp_roles()->get_names(); if ( array_key_exists( $value, $valid_roles ) ) { return $value; } return AhJwtAuthSettings::DEFAULTS[ AhJwtAuthSettings::USER_ROLE ]; }, 'default' => AhJwtAuthSettings::DEFAULTS[ AhJwtAuthSettings::USER_ROLE ], ), ); register_setting( 'ahjwtauth-sign-in-widget', AhJwtAuthSettings::DISABLE_USER_CREATION, array( 'type' => 'string', 'show_in_rest' => true, 'default' => AhJwtAuthSettings::DEFAULTS[ AhJwtAuthSettings::DISABLE_USER_CREATION ], 'sanitize_callback' => function ( $value ) { return '1' === $value ? '1' : '0'; }, ), ); register_setting( 'ahjwtauth-sign-in-widget', AhJwtAuthSettings::FAIL_CLOSED, array( 'type' => 'string', 'show_in_rest' => true, 'default' => AhJwtAuthSettings::DEFAULTS[ AhJwtAuthSettings::FAIL_CLOSED ], 'sanitize_callback' => function ( $value ) { return '1' === $value ? '1' : '0'; }, ), ); add_settings_field( AhJwtAuthSettings::PRIVATE_SECRET, 'JWT Private Secret', function () { $this->options_page_text_input_action( AhJwtAuthSettings::PRIVATE_SECRET, 'text', __( 'Paste your JWT private secret here.', 'ah-jwt-auth' ), __( 'This secret is used for verifying the token (use this field or the "JWKS URL", not both).', 'ah-jwt-auth' ), ); }, 'ahjwtauth-sign-in-widget', 'ahjwtauth-sign-in-widget-options-section' ); add_settings_field( AhJwtAuthSettings::JWKS_URL, 'JWKS URL', function () { $this->options_page_text_input_action( AhJwtAuthSettings::JWKS_URL, 'text', __( 'Enter the JWKS URL to validate the JWT.', 'ah-jwt-auth' ), __( 'The retrieved JWKS is used for verifying the token (use this field or the "JWT Private Secret", not both)', 'ah-jwt-auth' ), ); }, 'ahjwtauth-sign-in-widget', 'ahjwtauth-sign-in-widget-options-section', ); add_settings_field( AhJwtAuthSettings::JWT_HEADER, 'JWT Header', function () { $this->options_page_text_input_action( AhJwtAuthSettings::JWT_HEADER, 'text', __( 'Enter the HTTP header that contains the JWT.', 'ah-jwt-auth' ), __( 'The JWT will be retrieved from the specified HTTP header. This defaults to the "Authorization" header.', 'ah-jwt-auth' ), ); }, 'ahjwtauth-sign-in-widget', 'ahjwtauth-sign-in-widget-options-section', ); add_settings_field( AhJwtAuthSettings::ISSUER, 'JWT Issuer', function () { $this->options_page_text_input_action( AhJwtAuthSettings::ISSUER, 'text', __( 'Enter the expected iss claim value.', 'ah-jwt-auth' ), __( 'If set, incoming JWTs must include a matching iss claim. Leave empty to disable issuer validation.', 'ah-jwt-auth' ), ); }, 'ahjwtauth-sign-in-widget', 'ahjwtauth-sign-in-widget-options-section', ); add_settings_field( AhJwtAuthSettings::AUDIENCE, 'JWT Audience', function () { $this->options_page_text_input_action( AhJwtAuthSettings::AUDIENCE, 'text', __( 'Enter the expected aud claim value.', 'ah-jwt-auth' ), __( 'If set, incoming JWTs must include a matching aud claim. Leave empty to disable audience validation.', 'ah-jwt-auth' ), ); }, 'ahjwtauth-sign-in-widget', 'ahjwtauth-sign-in-widget-options-section', ); add_settings_field( AhJwtAuthSettings::USER_ROLE, 'Default User Role', function () { $this->options_page_select_input_action( AhJwtAuthSettings::USER_ROLE, __( 'Select the role for an auto-created user if a role claim is not found in the JWT.', 'ah-jwt-auth' ), ); }, 'ahjwtauth-sign-in-widget', 'ahjwtauth-sign-in-widget-options-section', ); add_settings_field( AhJwtAuthSettings::DISABLE_USER_CREATION, 'Automatic User Creation', function () { $this->options_page_checkbox_input_action( AhJwtAuthSettings::DISABLE_USER_CREATION, __( 'Disable automatic user creation', 'ah-jwt-auth' ), __( 'Require users to be manually provisioned before they can sign in with a valid JWT.', 'ah-jwt-auth' ), ); }, 'ahjwtauth-sign-in-widget', 'ahjwtauth-sign-in-widget-options-section', ); add_settings_field( AhJwtAuthSettings::FAIL_CLOSED, 'Enforce Strict Auth (Fail-Closed)', function () { $this->options_page_checkbox_input_action( AhJwtAuthSettings::FAIL_CLOSED, __( 'Enable strict Fail-Closed mode', 'ah-jwt-auth' ), __( 'Require a valid JWT for all unauthenticated traffic. If a token is invalid, expired, or entirely missing, block access immediately.', 'ah-jwt-auth' ), ); }, 'ahjwtauth-sign-in-widget', 'ahjwtauth-sign-in-widget-options-section', ); } }