Fix: QA issues

Author: up1512001

assets/src/admin/patterns/components/SiteSelection.js

@@ -93,10 +93,12 @@ const SiteSelection = ( {
 			} )
 			.map( ( site ) => site.id );
 
+		setIsSiteSelected( selectableSiteIds.length > 0 );
 		editPost( { meta: { brand_site: selectableSiteIds } } );
 	};
 
 	const deselectAllSites = () => {
+		setIsSiteSelected( false );
 		editPost( { meta: { brand_site: [] } } );
 	};
 

assets/src/components/SiteModal.js

@@ -110,12 +110,13 @@ const SiteModal = ( { formData, setFormData, onSubmit, onClose, editing, origina
 		try {
 			// Perform health-check
 			const healthCheck = await fetch(
-				`${ formData.url }/wp-json/onedesign/v1/health-check`,
+				`${ formData.url }/wp-json/onedesign/v1/health-check?timestamp=${ Date.now() }`,
 				{
 					method: 'GET',
 					headers: {
 						'Content-Type': 'application/json',
 						'X-OneDesign-Token': formData.api_key,
+						'X-OneDesign-Source': 'Settings',
 					},
 				},
 			);

assets/src/hooks/useSitesManagement.js

@@ -38,6 +38,7 @@ const useSitesManagement = ( { NONCE, API_NAMESPACE } ) => {
 								headers: {
 									'Content-Type': 'application/json',
 									'X-OneDesign-Token': siteApiKey,
+									'X-OneDesign-Source': 'Patterns-Templates-Sharing',
 								},
 							},
 						);

inc/Modules/Core/Rest.php

@@ -40,6 +40,7 @@ public function allowed_cors_headers( $headers ): array {
 			$headers,
 			[
 				'X-OneDesign-Token',
+				'X-OneDesign-Source',
 			]
 		);
 	}

inc/Modules/Rest/Abstract_REST_Controller.php

@@ -101,6 +101,14 @@ public function check_api_permissions( $request ) {
 		// If it's a healthcheck with no governing site, allow it and set the governing site.
 		if ( empty( $governing_site_url ) ) {
 			if ( '/' . $this->namespace . '/health-check' === $request->get_route() ) {
+
+				// Need to check x-onedesign-source header to confirm request source is from settings page as we are performing health check before sharing patterns/templates.
+				$source = $request->get_header( 'X_ONEDESIGN_SOURCE' );
+				$source = ! empty( $source ) ? sanitize_text_field( wp_unslash( $source ) ) : '';
+				if ( 'Settings' !== $source ) {
+					return false;
+				}
+
 				Settings::set_parent_site_url( $request_origin );
 				return true;
 			}