feat: woographql_viewable_order_types hook added (#741)

* feat: woographql_viewable_order_types hook added

* chore: WPCS compliance met

Author: kidunot89

includes/model/class-order.php

@@ -64,14 +64,26 @@ protected function get_restricted_cap() {
 		return $cap;
 	}
 
+	/**
+	 * Return order types viewable by proven ownership.
+	 *
+	 * @return array
+	 */
+	protected function get_viewable_order_types() {
+		return apply_filters(
+			'woographql_viewable_order_types',
+			[ 'shop_order' ],
+		);
+	}
+
 	/**
 	 * Whether or not the customer of the order matches the current user.
 	 *
 	 * @return bool
 	 */
 	protected function owner_matches_current_user() {
 		// Get Customer ID.
-		if ( 'shop_order' === $this->post_type ) {
+		if ( in_array( $this->post_type, $this->get_viewable_order_types(), true ) ) {
 			$customer_id = $this->wc_data->get_customer_id();
 		} else {
 			$customer_id = get_post_meta( '_customer_user', $this->wc_data->get_parent_id(), true );
@@ -94,7 +106,7 @@ protected function owner_matches_current_user() {
 	 * @return bool
 	 */
 	public function guest_order_customer_matches_current_user() {
-		if ( 'shop_order' === $this->post_type ) {
+		if ( in_array( $this->post_type, $this->get_viewable_order_types(), true ) ) {
 			$customer_email = $this->wc_data->get_billing_email();
 		} else {
 			$customer_email = get_post_meta( '_billing_email', $this->wc_data->get_parent_id(), true );

includes/type/object/class-customer-type.php

@@ -227,14 +227,14 @@ public static function register() {
 		register_graphql_fields(
 			'Customer',
 			[
-				'availablePaymentMethods' => [
+				'availablePaymentMethods'   => [
 					'type'        => [ 'list_of' => 'PaymentToken' ],
 					'description' => __( 'Customer\'s stored payment tokens.', 'wp-graphql-woocommerce' ),
 					'resolve'     => function( $source ) {
 						if ( get_current_user_id() === $source->ID ) {
 							return array_values( \WC_Payment_Tokens::get_customer_tokens( $source->ID ) );
 						}
-	
+
 						throw new UserError( __( 'Not authorized to view this user\'s payment methods.', 'wp-graphql-woocommerce' ) );
 					},
 				],
@@ -251,7 +251,7 @@ function ( $token ) {
 							);
 							return $tokens;
 						}
-	
+
 						throw new UserError( __( 'Not authorized to view this user\'s payment methods.', 'wp-graphql-woocommerce' ) );
 					},
 				],
@@ -268,7 +268,7 @@ function ( $token ) {
 							);
 							return $tokens;
 						}
-	
+
 						throw new UserError( __( 'Not authorized to view this user\'s payment methods.', 'wp-graphql-woocommerce' ) );
 					},
 				],