Add files via upload

Author: zerosonesfun

assets/banner-1544x500.png

@@ -47,9 +47,11 @@ function peaceprotocol_receive_peace($request) {
     $target_site = sanitize_url($request->get_param('target_site'));
     $message = sanitize_textarea_field($request->get_param('message'));
     $token = sanitize_text_field($request->get_param('token'));
+    $from_site = sanitize_url($request->get_param('from_site'));
 
     // error_log('Peace Protocol REST: Target site: ' . $target_site);
     // error_log('Peace Protocol REST: Token: ' . $token);
+    // error_log('Peace Protocol REST: From site: ' . $from_site);
 
     // Validate token
     $identity = peaceprotocol_validate_token($token);
@@ -66,15 +68,19 @@ function peaceprotocol_receive_peace($request) {
         return new WP_Error('user_banned', 'You are banned from sending peace', array('status' => 403));
     }
 
+    // Use from_site if provided, otherwise fall back to token's site_url
+    $sending_site = $from_site ?: $identity['site_url'];
+    
     // error_log('Peace Protocol REST: Identity validated: ' . print_r($identity, true));
+    // error_log('Peace Protocol REST: Using sending site: ' . $sending_site);
 
     // Save Peace Log directly (don't call send_peace_to_site which would create infinite loop)
     $log_id = wp_insert_post([
         'post_type' => 'peaceprotocol_log',
-        'post_title' => 'Peace from ' . $identity['site_url'],
+        'post_title' => 'Peace from ' . $sending_site,
         'post_content' => $message,
         'post_status' => 'publish',
-        'meta_input' => ['from_site' => $identity['site_url'], 'note' => $message]
+        'meta_input' => ['from_site' => $sending_site, 'note' => $message]
     ]);
 
     // error_log('Peace Protocol REST: Peace log created with ID: ' . $log_id);
@@ -1536,7 +1542,7 @@ function getIdentities() {
             }
 
             $identity = array(
-                'site_url' => get_site_url(),
+                'site_url' => $federated_site,
                 'token' => $active_token
             );
 
@@ -1647,7 +1653,7 @@ function peaceprotocol_ajax_send_peace() {
     }
 
     $identity = array(
-        'site_url' => get_site_url(),
+        'site_url' => $federated_site,
         'token' => $active_token
     );
 
@@ -2004,7 +2010,8 @@ function peaceprotocol_send_peace_to_site($target_site, $message, $identity) {
         'body' => json_encode(array(
             'target_site' => $target_site,
             'message' => $message,
-            'token' => $identity['token']
+            'token' => $identity['token'],
+            'from_site' => $identity['site_url']
         )),
         'timeout' => 2
     ));

assets/icon-256x256.png

@@ -3,7 +3,7 @@
  * Plugin Name: Peace Protocol
  * Plugin URI: https://wilcosky.com/peace-protocol
  * Description: A decentralized way for WordPress admins to share peace, respect, and follow each other with cryptographic handshakes.
- * Version: 1.2.5
+ * Version: 1.2.7
  * Requires at least: 6.0
  * Tested up to: 6.8.2
  * Requires PHP: 7.4
@@ -17,7 +17,7 @@
 
 defined('ABSPATH') || exit;
 
-define('PEACEPROTOCOL_VERSION', '1.2.5');
+define('PEACEPROTOCOL_VERSION', '1.2.7');
 define('PEACEPROTOCOL_DIR', plugin_dir_path(__FILE__));
 define('PEACEPROTOCOL_URL', plugin_dir_url(__FILE__));
 

includes/rest-endpoints.php

@@ -4,7 +4,7 @@ Tags: federation, peace, decentralized, security, cryptographic
 Requires at least: 6.0
 Tested up to: 6.8
 Requires PHP: 7.4
-Stable tag: 1.2.5
+Stable tag: 1.2.7
 License: GPLv2 or later
 License URI: https://www.gnu.org/licenses/gpl-2.0.html
 
@@ -209,6 +209,16 @@ The plugin includes a comprehensive user banning system. You can ban users with
 
 == Changelog ==
 
+= 1.2.7 =
+* **Bug Fix**: Fixed REST API federated site identity issue where peace messages showed incorrect sending site
+* **REST API Enhancement**: Added missing from_site parameter to REST API calls for proper federated site attribution
+* **Cross-Site Communication**: Peace messages now correctly show the actual federated site that sent them via REST API
+
+= 1.2.6 =
+* **Bug Fix**: Fixed federated site identity issue where peace messages showed incorrect sending site
+* **Federated Authentication**: Peace messages now correctly show the actual federated site that sent them
+* **User Experience**: Improved accuracy of peace attribution when using cross-site authentication
+
 = 1.2.5 =
 * **Bug Fix**: Fixed "headers already sent" session warning that occurred when used alongside other plugins
 * **Session Security**: Improved session handling to prevent conflicts with AJAX and early-output plugins