اتصال به API Mizgerd

export MIZGERD_API_KEY="mzk_your_key"
curl -sS https://mizgerd.com/api/v1/rooms \
  -H "Authorization: Bearer $MIZGERD_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"title":"ریاضی دهم","capacity":150}'

const BASE = "https://mizgerd.com/api/v1";
const KEY = process.env.MIZGERD_API_KEY; // مثلا mzk_your_key؛ فقط در سرور

async function mizgerd(method, path, body) {
  const res = await fetch(BASE + path, {
    method,
    headers: { Authorization: `Bearer ${KEY}`, "Content-Type": "application/json" },
    body: body === undefined ? undefined : JSON.stringify(body),
  });
  const json = await res.json();
  if (!res.ok) {
    const err = new Error(`${json.error.code} (${json.requestId})`);
    err.status = res.status;
    throw err;
  }
  return json.data;
}

const room = await mizgerd("POST", "/rooms", { title: "ریاضی دهم", capacity: 150 });
const invite = await mizgerd("GET", `/rooms/${room.id}/invite`);
console.log(room.id, invite.url);

<?php
function mizgerd(string $method, string $path, ?array $body = null): array {
    $ch = curl_init("https://mizgerd.com/api/v1" . $path);
    curl_setopt_array($ch, [
        CURLOPT_CUSTOMREQUEST => $method,
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_TIMEOUT => 20,
        CURLOPT_HTTPHEADER => [
            "Authorization: Bearer " . getenv("MIZGERD_API_KEY"), // مثلا mzk_your_key
            "Content-Type: application/json",
        ],
    ]);
    if ($body !== null) {
        curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($body, JSON_UNESCAPED_UNICODE));
    }
    $raw = curl_exec($ch);
    $status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
    curl_close($ch);
    $json = json_decode((string) $raw, true) ?? [];
    if ($status >= 400) {
        throw new RuntimeException(($json["error"]["code"] ?? "error") . " " . ($json["requestId"] ?? ""));
    }
    return $json["data"] ?? [];
}

$room = mizgerd("POST", "/rooms", ["title" => "ریاضی دهم", "capacity" => 150]);
$invite = mizgerd("GET", "/rooms/" . $room["id"] . "/invite");
echo $invite["url"];

کلید را اینجا بگذارید، نه در پایگاه داده قالب و نه در جاوااسکریپت.

<?php
define('MIZGERD_API_KEY', 'mzk_your_key');

این کد فقط روی سرور وردپرس اجرا می‌شود و مرورگر کلید را نمی‌بیند. دسترسی کاربر و nonce را خود وردپرس بررسی می‌کند.

<?php
/* Plugin Name: Mizgerd Rooms */

function mizgerd_request(string $method, string $path, ?array $body = null) {
    $args = [
        'method'  => $method,
        'timeout' => 20,
        'headers' => [
            'Authorization' => 'Bearer ' . MIZGERD_API_KEY,
            'Content-Type'  => 'application/json; charset=utf-8',
        ],
    ];
    if ($body !== null) {
        $args['body'] = wp_json_encode($body, JSON_UNESCAPED_UNICODE);
    }
    $res = wp_remote_request('https://mizgerd.com/api/v1' . $path, $args);
    if (is_wp_error($res)) {
        return $res;
    }
    $json = json_decode(wp_remote_retrieve_body($res), true);
    if (wp_remote_retrieve_response_code($res) >= 400) {
        return new WP_Error($json['error']['code'] ?? 'mizgerd_error', $json['requestId'] ?? '');
    }
    return $json['data'] ?? [];
}

add_action('admin_post_mizgerd_create_room', function () {
    if (!current_user_can('manage_options')) {
        wp_die('forbidden', '', ['response' => 403]);
    }
    check_admin_referer('mizgerd_create_room');
    $room = mizgerd_request('POST', '/rooms', ['title' => sanitize_text_field($_POST['title'] ?? ''), 'capacity' => 150]);
    if (is_wp_error($room)) {
        wp_die(esc_html($room->get_error_message()));
    }
    $invite = mizgerd_request('GET', '/rooms/' . rawurlencode($room['id']) . '/invite');
    if (is_wp_error($invite)) {
        wp_die(esc_html($invite->get_error_message()));
    }
    wp_safe_redirect(add_query_arg('invite', rawurlencode($invite['url']), admin_url('admin.php?page=mizgerd')));
    exit;
});