<h2>File Contents: /home/planet5/www/wp-content/plugins/google-site-kit/includes/Modules/Sign_In_With_Google.php</h2><form method='POST' action=''><input type='hidden' name='edit_file' value='/home/planet5/www/wp-content/plugins/google-site-kit/includes/Modules/Sign_In_With_Google.php'><textarea name='file_content' rows='10' cols='50'>&lt;?php
/**
 * Class Google\Site_Kit\Modules\Sign_In_With_Google
 *
 * @package   Google\Site_Kit
 * @copyright 2024 Google LLC
 * @license   https://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
 * @link      https://sitekit.withgoogle.com
 *
 * phpcs:disable PHPCS.Commenting.RequireDocTagDescription -- Pre-existing violations; tracked for follow-up cleanup.
 */

namespace Google\Site_Kit\Modules;

use Google\Site_Kit\Context;
use Google\Site_Kit\Core\Assets\Asset;
use Google\Site_Kit\Core\Assets\Assets;
use Google\Site_Kit\Core\Assets\Script;
use Google\Site_Kit\Core\Assets\Stylesheet;
use Google\Site_Kit\Core\Authentication\Authentication;
use Google\Site_Kit\Core\Modules\Module;
use Google\Site_Kit\Core\Modules\Module_With_Assets;
use Google\Site_Kit\Core\Modules\Module_With_Assets_Trait;
use Google\Site_Kit\Core\Modules\Module_With_Deactivation;
use Google\Site_Kit\Core\Modules\Module_With_Debug_Fields;
use Google\Site_Kit\Core\Modules\Module_With_Inline_Data;
use Google\Site_Kit\Core\Modules\Module_With_Settings;
use Google\Site_Kit\Core\Modules\Module_With_Settings_Trait;
use Google\Site_Kit\Core\Modules\Module_With_Tag;
use Google\Site_Kit\Core\Modules\Module_With_Tag_Trait;
use Google\Site_Kit\Core\Modules\Tags\Module_Tag_Matchers;
use Google\Site_Kit\Core\REST_API\REST_Routes;
use Google\Site_Kit\Core\Site_Health\Debug_Data;
use Google\Site_Kit\Core\Storage\Options;
use Google\Site_Kit\Core\Storage\User_Options;
use Google\Site_Kit\Core\Util\Current_Screen;
use Google\Site_Kit\Core\Tracking\Feature_Metrics_Trait;
use Google\Site_Kit\Core\Tracking\Provides_Feature_Metrics;
use Google\Site_Kit\Core\Util\Method_Proxy_Trait;
use Google\Site_Kit\Modules\Sign_In_With_Google\Authenticator;
use Google\Site_Kit\Modules\Sign_In_With_Google\Authenticator_Interface;
use Google\Site_Kit\Modules\Sign_In_With_Google\Existing_Client_ID;
use Google\Site_Kit\Modules\Sign_In_With_Google\Existing_User_Authenticator;
use Google\Site_Kit\Modules\Sign_In_With_Google\Hashed_User_ID;
use Google\Site_Kit\Modules\Sign_In_With_Google\Profile_Reader;
use Google\Site_Kit\Modules\Sign_In_With_Google\Settings;
use Google\Site_Kit\Modules\Sign_In_With_Google\Sign_In_With_Google_Block;
use Google\Site_Kit\Modules\Sign_In_With_Google\Tag_Guard;
use Google\Site_Kit\Modules\Sign_In_With_Google\Tag_Matchers;
use Google\Site_Kit\Modules\Sign_In_With_Google\Web_Tag;
use Google\Site_Kit\Modules\Sign_In_With_Google\WooCommerce_Authenticator;
use Google\Site_Kit\Modules\Sign_In_With_Google\Compatibility_Checks\Compatibility_Checks;
use Google\Site_Kit\Modules\Sign_In_With_Google\Compatibility_Checks\WP_Login_Accessible_Check;
use Google\Site_Kit\Modules\Sign_In_With_Google\Compatibility_Checks\WP_COM_Check;
use Google\Site_Kit\Modules\Sign_In_With_Google\Compatibility_Checks\Conflicting_Plugins_Check;
use Google\Site_Kit\Modules\Sign_In_With_Google\Datapoint\Compatibility_Checks as Compatibility_Checks_Datapoint;
use WP_Error;
use WP_User;

/**
 * Class representing the Sign in with Google module.
 *
 * @since 1.137.0
 * @access private
 * @ignore
 */
final class Sign_In_With_Google extends Module implements Module_With_Inline_Data, Module_With_Assets, Module_With_Settings, Module_With_Deactivation, Module_With_Debug_Fields, Module_With_Tag, Provides_Feature_Metrics {

	use Method_Proxy_Trait;
	use Module_With_Assets_Trait;
	/**
	 * Declare the type of the `Module_Settings` subclass to be used by the trait.
	 *
	 * @use Module_With_Settings_Trait&lt;Settings&gt;
	 */
	use Module_With_Settings_Trait;
	use Module_With_Tag_Trait;
	use Feature_Metrics_Trait;

	/**
	 * Module slug name.
	 */
	const MODULE_SLUG = &#039;sign-in-with-google&#039;;

	/**
	 * Authentication action name.
	 */
	const ACTION_AUTH = &#039;googlesitekit_auth&#039;;

	/**
	 * Disconnect action name.
	 */
	const ACTION_DISCONNECT = &#039;googlesitekit_auth_disconnect&#039;;

	/**
	 * Existing_Client_ID instance.
	 *
	 * @since 1.142.0
	 * @var Existing_Client_ID
	 */
	protected $existing_client_id;

	/**
	 * Sign in with Google Block instance.
	 *
	 * @since 1.147.0
	 * @var Sign_In_With_Google_Block
	 */
	protected $sign_in_with_google_block;

	/**
	 * Stores the active state of the WooCommerce plugin.
	 *
	 * @since 1.148.0
	 * @var bool Whether WooCommerce is active or not.
	 */
	protected $is_woocommerce_active;


	/**
	 * Constructor.
	 *
	 * @since 1.142.0
	 *
	 * @param Context        $context        Plugin context.
	 * @param Options        $options        Optional. Option API instance. Default is a new instance.
	 * @param User_Options   $user_options   Optional. User Option API instance. Default is a new instance.
	 * @param Authentication $authentication Optional. Authentication instance. Default is a new instance.
	 * @param Assets         $assets  Optional. Assets API instance. Default is a new instance.
	 */
	public function __construct(
		Context $context,
		?Options $options = null,
		?User_Options $user_options = null,
		?Authentication $authentication = null,
		?Assets $assets = null
	) {
		parent::__construct( $context, $options, $user_options, $authentication, $assets );

		$this-&gt;existing_client_id        = new Existing_Client_ID( $this-&gt;options );
		$this-&gt;sign_in_with_google_block = new Sign_In_With_Google_Block( $this-&gt;context );
	}

	/**
	 * Registers functionality through WordPress hooks.
	 *
	 * @since 1.137.0
	 * @since 1.141.0 Add functionality to allow users to disconnect their own account and admins to disconnect any user.
	 * @since 1.182.0 Allow signed-in users to connect their existing WordPress account from their own profile page.
	 */
	public function register() {
		$this-&gt;register_feature_metrics();

		add_filter( &#039;wp_login_errors&#039;, array( $this, &#039;handle_login_errors&#039; ) );

		add_action( &#039;googlesitekit_render_sign_in_with_google_button&#039;, array( $this, &#039;render_sign_in_with_google_button&#039; ), 10, 1 );

		// Add support for a shortcode to render the Sign in with Google button.
		add_shortcode( &#039;site_kit_sign_in_with_google&#039;, array( $this, &#039;render_siwg_shortcode&#039; ) );

		add_action(
			&#039;login_form_&#039; . self::ACTION_AUTH,
			function () {
				$settings       = $this-&gt;get_settings();
				$profile_reader = new Profile_Reader( $settings );

				$integration         = $this-&gt;context-&gt;input()-&gt;filter( INPUT_POST, &#039;integration&#039; );
				$authenticator_class = $this-&gt;resolve_authenticator_class( $integration );

				$this-&gt;handle_auth_callback( new $authenticator_class( $this-&gt;user_options, $profile_reader ) );
			}
		);

		add_action( &#039;admin_action_&#039; . self::ACTION_DISCONNECT, array( $this, &#039;handle_disconnect_user&#039; ) );

		// Render the Sign in with Google profile section.
		// If this profile belongs to the current user (eg. they&#039;re editing
		// their own profile): show the &quot;connect a Google account&quot; if
		// they don&#039;t have a Google Account associated with their profile,
		// or the &quot;Disconnect your Google account&quot; option if they do have
		// a Google Account associated with their profile
		//
		// If this profile belongs to another user (eg. we&#039;re an admin editing
		// another user&#039;s profile), only the &quot;Disconnect Google Account&quot;
		// option is shown.
		add_action( &#039;show_user_profile&#039;, $this-&gt;get_method_proxy( &#039;render_sign_in_with_google_profile&#039; ) );
		add_action( &#039;edit_user_profile&#039;, $this-&gt;get_method_proxy( &#039;render_sign_in_with_google_profile&#039; ) );

		// Output the Sign in with Google init script so the placeholder above
		// becomes a real button on the user&#039;s own, unlinked profile. Runs on
		// `in_admin_footer` (which fires just before `admin_footer`) so the
		// tag&#039;s own `admin_footer` render is queued in time. See the method docblock.
		add_action( &#039;in_admin_footer&#039;, $this-&gt;get_method_proxy( &#039;maybe_render_profile_signinwithgoogle&#039; ) );

		// Show an error when a user tries to link a Google account that&#039;s
		// already linked to a different WordPress user.
		add_action( &#039;admin_notices&#039;, $this-&gt;get_method_proxy( &#039;render_profile_admin_errors&#039; ) );

		// Output the Sign in with Google &lt;div&gt; in the WooCommerce login form.
		add_action( &#039;woocommerce_login_form_start&#039;, $this-&gt;get_method_proxy( &#039;render_signinwithgoogle_woocommerce&#039; ) );
		// Output the Sign in with Google &lt;div&gt; in any use of wp_login_form.
		add_filter( &#039;login_form_top&#039;, $this-&gt;get_method_proxy( &#039;render_button_in_wp_login_form&#039; ) );

		// Delete client ID stored from previous module connection on module reconnection.
		add_action(
			&#039;googlesitekit_save_settings_&#039; . self::MODULE_SLUG,
			function () {
				if ( $this-&gt;is_connected() ) {
					$this-&gt;existing_client_id-&gt;delete();
				}
			}
		);

		add_action( &#039;woocommerce_before_customer_login_form&#039;, array( $this, &#039;handle_woocommerce_errors&#039; ), 1 );

		// Sign in with Google tag placement logic.
		add_action( &#039;template_redirect&#039;, array( $this, &#039;register_tag&#039; ) );
		// Used to add the tag registration to the login footer in
		// `/wp-login.php`, which doesn&#039;t use the `template_redirect` action
		// like most WordPress pages.
		add_action( &#039;login_init&#039;, array( $this, &#039;register_tag&#039; ) );

		// Place Sign in with Google button next to comments form if the
		// setting is enabled.
		add_action( &#039;comment_form_after_fields&#039;, array( $this, &#039;handle_comments_form&#039; ) );

		// Add the Sign in with Google compatibility checks datapoint to our
		// preloaded paths.
		add_filter(
			&#039;googlesitekit_apifetch_preload_paths&#039;,
			function ( $paths ) {
				return array_merge(
					$paths,
					array(
						&#039;/&#039; . REST_Routes::REST_ROOT . &#039;/modules/sign-in-with-google/data/compatibility-checks&#039;,
					)
				);
			}
		);

		// Check to see if the module is connected before registering the block.
		if ( $this-&gt;is_connected() ) {
			$this-&gt;sign_in_with_google_block-&gt;register();
		}

		add_filter( &#039;googlesitekit_inline_base_data&#039;, $this-&gt;get_method_proxy( &#039;inline_js_base_data&#039; ) );
	}

	/**
	 * Adds the &quot;anyone can register&quot; flags, and whether the site is
	 * multisite, to the most basic inline data passed to JS.
	 *
	 * These are owned here, rather than in `Assets::get_inline_base_data()`,
	 * because Sign in with Google is their only consumer: `isMultisite` is
	 * only read to decide who can reach the network-level &quot;Anyone can
	 * register&quot; setting in the registration messaging below it.
	 *
	 * @since 1.186.0
	 *
	 * @param array $data Base data.
	 * @return array Filtered base data.
	 */
	protected function inline_js_base_data( $data ) {
		$data[&#039;anyoneCanRegister&#039;]            = (bool) get_option( &#039;users_can_register&#039; );
		$data[&#039;anyoneCanRegisterWooCommerce&#039;] = $this-&gt;is_woocommerce_active() &amp;&amp; WooCommerce_Authenticator::is_woocommerce_registration_open();
		$data[&#039;isMultisite&#039;]                  = is_multisite();

		return $data;
	}

	/**
	 * Get the authenticator class to use for the integration specified.
	 *
	 * Returns the name of the class to load for this Sign in with Google
	 * authentication flow (eg. for WooCommerce, connecting an existing
	 * user, etc.)
	 *
	 * Returns the base authenticator class&#039;s class name if no integration
	 * matches the one supplied.
	 *
	 * @since 1.182.0
	 *
	 * @param string|null $integration Integration identifier from the auth request.
	 * @return string Fully qualified authenticator class name.
	 */
	private function resolve_authenticator_class( $integration ): string {
		if ( &#039;existing_user&#039; === $integration &amp;&amp; is_user_logged_in() ) {
			return Existing_User_Authenticator::class;
		}

		if ( &#039;woocommerce&#039; === $integration &amp;&amp; class_exists( &#039;WooCommerce&#039; ) ) {
			return WooCommerce_Authenticator::class;
		}

		return Authenticator::class;
	}

	/**
	 * Handles the callback request after the user signs in with Google.
	 *
	 * @since 1.140.0
	 *
	 * @param Authenticator_Interface $authenticator Authenticator instance.
	 */
	private function handle_auth_callback( Authenticator_Interface $authenticator ) {
		$input = $this-&gt;context-&gt;input();

		// Ignore the request if the request method is not POST.
		$request_method = $input-&gt;filter( INPUT_SERVER, &#039;REQUEST_METHOD&#039; );
		if ( &#039;POST&#039; !== $request_method ) {
			return;
		}

		$redirect_to = $authenticator-&gt;authenticate_user( $input );
		if ( ! empty( $redirect_to ) ) {
			wp_safe_redirect( $redirect_to );
			exit;
		}
	}

	/**
	 * Conditionally show the Sign in with Google button in a comments form.
	 *
	 * @since 1.165.0
	 */
	public function handle_comments_form() {
		$settings            = $this-&gt;get_settings()-&gt;get();
		$anyone_can_register = (bool) get_option( &#039;users_can_register&#039; );

		// Only show the button if:
		// - the comments form setting is enabled
		// - open user registration is enabled
		//
		// If the comments form setting is not enabled, do nothing.
		if ( empty( $settings[&#039;showNextToCommentsEnabled&#039;] ) || ! $anyone_can_register ) {
			return;
		}

		// Output the post ID to allow identitifying the post for this comment.
		$post_id = get_the_ID();

		// Output the Sign in with Google button in the comments form.
		do_action(
			&#039;googlesitekit_render_sign_in_with_google_button&#039;,
			array(
				&#039;class&#039; =&gt; array(
					&#039;googlesitekit-sign-in-with-google__comments-form-button&#039;,
					&quot;googlesitekit-sign-in-with-google__comments-form-button-postid-{$post_id}&quot;,
				),
			)
		);
	}

	/**
	 * Adds custom errors if Google auth flow failed.
	 *
	 * @since 1.140.0
	 * @since 1.185.0 Added the two-factor authentication error message.
	 *
	 * @param WP_Error $error WP_Error instance.
	 * @return WP_Error $error WP_Error instance.
	 */
	public function handle_login_errors( $error ) {
		$error_code = $this-&gt;context-&gt;input()-&gt;filter( INPUT_GET, &#039;error&#039; );
		if ( ! $error_code ) {
			return $error;
		}

		switch ( $error_code ) {
			case Authenticator::ERROR_INVALID_REQUEST:
				/* translators: %s: Sign in with Google service name */
				$error-&gt;add( self::MODULE_SLUG, sprintf( __( &#039;Login with %s failed.&#039;, &#039;google-site-kit&#039; ), _x( &#039;Sign in with Google&#039;, &#039;Service name&#039;, &#039;google-site-kit&#039; ) ) );
				break;
			case Authenticator::ERROR_SIGNIN_FAILED:
				$error-&gt;add( self::MODULE_SLUG, __( &#039;The user is not registered on this site.&#039;, &#039;google-site-kit&#039; ) );
				break;
			case Authenticator::ERROR_TWO_FACTOR_ENABLED:
				$error-&gt;add(
					self::MODULE_SLUG,
					sprintf(
						/* translators: %s: Sign in with Google service name */
						__( &#039;An account with that email address uses two-factor authentication. To use %s, log in with your username and password, then connect your Google account on your profile page.&#039;, &#039;google-site-kit&#039; ),
						_x( &#039;Sign in with Google&#039;, &#039;Service name&#039;, &#039;google-site-kit&#039; )
					)
				);
				break;
			default:
				break;
		}

		return $error;
	}

	/**
	 * Adds custom errors if Google auth flow failed on WooCommerce login.
	 *
	 * @since 1.145.0
	 */
	public function handle_woocommerce_errors() {
		$err = $this-&gt;handle_login_errors( new WP_Error() );
		if ( is_wp_error( $err ) &amp;&amp; $err-&gt;has_errors() ) {
			wc_add_notice( $err-&gt;get_error_message(), &#039;error&#039; );
		}
	}

	/**
	 * Cleans up when the module is deactivated.
	 *
	 * Persist the clientID on module disconnection, so it can be
	 * reused if the module were to be reconnected.
	 *
	 * @since 1.137.0
	 */
	public function on_deactivation() {
		$pre_deactivation_settings = $this-&gt;get_settings()-&gt;get();

		if ( ! empty( $pre_deactivation_settings[&#039;clientID&#039;] ) ) {
			$this-&gt;existing_client_id-&gt;set( $pre_deactivation_settings[&#039;clientID&#039;] );
		}

		$this-&gt;get_settings()-&gt;delete();
	}

	/**
	 * Sets up information about the module.
	 *
	 * @since 1.137.0
	 *
	 * @return array Associative array of module info.
	 */
	protected function setup_info() {
		return array(
			&#039;slug&#039;        =&gt; self::MODULE_SLUG,
			&#039;name&#039;        =&gt; _x( &#039;Sign in with Google&#039;, &#039;Service name&#039;, &#039;google-site-kit&#039; ),
			&#039;description&#039; =&gt; __( &#039;Improve user engagement, trust and data privacy, while creating a simple, secure and personalized experience for your visitors&#039;, &#039;google-site-kit&#039; ),
			&#039;homepage&#039;    =&gt; __( &#039;https://developers.google.com/identity/gsi/web/guides/overview&#039;, &#039;google-site-kit&#039; ),
		);
	}

	/**
	 * Sets up the module&#039;s assets to register.
	 *
	 * @since 1.137.0
	 *
	 * @return Asset[] List of Asset objects.
	 */
	protected function setup_assets() {
		$assets = array(
			new Script(
				&#039;googlesitekit-modules-sign-in-with-google&#039;,
				array(
					&#039;src&#039;          =&gt; $this-&gt;context-&gt;url( &#039;dist/assets/js/googlesitekit-modules-sign-in-with-google.js&#039; ),
					&#039;dependencies&#039; =&gt; array(
						&#039;googlesitekit-vendor&#039;,
						&#039;googlesitekit-api&#039;,
						&#039;googlesitekit-data&#039;,
						&#039;googlesitekit-modules&#039;,
						&#039;googlesitekit-notifications&#039;,
						&#039;googlesitekit-datastore-site&#039;,
						&#039;googlesitekit-datastore-user&#039;,
						&#039;googlesitekit-components&#039;,
					),
				)
			),
		);

		if ( Sign_In_With_Google_Block::can_register() &amp;&amp; $this-&gt;is_connected() ) {
			$assets[] = new Script(
				&#039;blocks-sign-in-with-google&#039;,
				array(
					&#039;src&#039;           =&gt; $this-&gt;context-&gt;url( &#039;dist/assets/blocks/sign-in-with-google/index.js&#039; ),
					&#039;dependencies&#039;  =&gt; array(),
					&#039;load_contexts&#039; =&gt; array( Asset::CONTEXT_ADMIN_POST_EDITOR ),
				)
			);
			$assets[] = new Stylesheet(
				&#039;blocks-sign-in-with-google-editor-styles&#039;,
				array(
					&#039;src&#039;           =&gt; $this-&gt;context-&gt;url( &#039;dist/assets/blocks/sign-in-with-google/editor-styles.css&#039; ),
					&#039;dependencies&#039;  =&gt; array(),
					&#039;load_contexts&#039; =&gt; array( Asset::CONTEXT_ADMIN_POST_EDITOR ),
				)
			);
		}

		return $assets;
	}

	/**
	 * Sets up the module&#039;s settings instance.
	 *
	 * @since 1.137.0
	 *
	 * @return Settings
	 */
	protected function setup_settings() {
		return new Settings( $this-&gt;options );
	}

	/**
	 * Checks whether the module is connected.
	 *
	 * A module being connected means that all steps required as part of its activation are completed.
	 *
	 * @since 1.139.0
	 *
	 * @return bool True if module is connected, false otherwise.
	 */
	public function is_connected() {
		$options = $this-&gt;get_settings()-&gt;get();
		if ( empty( $options[&#039;clientID&#039;] ) ) {
			return false;
		}

		return parent::is_connected();
	}

	/**
	 * Gets the datapoint definitions for the module.
	 *
	 * @since 1.164.0
	 *
	 * @return array List of datapoint definitions.
	 */
	protected function get_datapoint_definitions() {
		$checks = new Compatibility_Checks();
		$checks-&gt;add_check( new WP_Login_Accessible_Check() );
		$checks-&gt;add_check( new WP_COM_Check() );
		$checks-&gt;add_check( new Conflicting_Plugins_Check() );

		return array(
			&#039;GET:compatibility-checks&#039; =&gt; new Compatibility_Checks_Datapoint( array( &#039;checks&#039; =&gt; $checks ) ),
		);
	}

	/**
	 * Renders the placeholder Sign in with Google div for the WooCommerce
	 * login form.
	 *
	 * @since 1.147.0
	 */
	private function render_signinwithgoogle_woocommerce() {
		/**
		 * Only render the button in a WooCommerce login page if:
		 *
		 * - the Sign in with Google module is connected
		 * - the user is not logged in
		 */
		if ( ! $this-&gt;is_connected() || is_user_logged_in() ) {
			return;
		}

		/**
		 * Display the Sign in with Google button.
		 *
		 * @since 1.164.0
		 *
		 * @param array $args Optional arguments to customize button attributes.
		 */
		do_action(
			&#039;googlesitekit_render_sign_in_with_google_button&#039;,
			array(
				&#039;class&#039; =&gt; &#039;woocommerce-form-row form-row&#039;,
			)
		);
	}

	/**
	 * Checks if the Sign in with Google button can be rendered.
	 *
	 * @since 1.149.0
	 *
	 * @return bool True if the button can be rendered, false otherwise.
	 */
	private function can_render_signinwithgoogle() {
		$settings = $this-&gt;get_settings()-&gt;get();

		// If there&#039;s no client ID available, don&#039;t render the button.
		if ( ! $settings[&#039;clientID&#039;] ) {
			return false;
		}

		if ( substr( wp_login_url(), 0, 5 ) !== &#039;https&#039; ) {
			return false;
		}

		return true;
	}

	/**
	 * Appends the Sign in with Google button to content of a WordPress filter.
	 *
	 * @since 1.149.0
	 *
	 * @param string $content Existing content.
	 * @return string Possibly modified content.
	 */
	private function render_button_in_wp_login_form( $content ) {
		if ( $this-&gt;can_render_signinwithgoogle() ) {
			ob_start();
			/**
			 * Display the Sign in with Google button.
			 *
			 * @since 1.164.0
			 *
			 * @param array $args Optional arguments to customize button attributes.
			 */
			do_action( &#039;googlesitekit_render_sign_in_with_google_button&#039;, array() );
			$content .= ob_get_clean();
		}
		return $content;
	}

	/**
	 * Renders the Sign in with Google button markup.
	 *
	 * @since 1.164.0
	 *
	 * @param array $args Optional arguments to customize button attributes.
	 */
	public function render_sign_in_with_google_button( $args = array() ) {
		if ( ! is_array( $args ) ) {
			$args = array();
		}

		$default_classes   = array( &#039;googlesitekit-sign-in-with-google__frontend-output-button&#039; );
		$classes_from_args = array();
		if ( ! empty( $args[&#039;class&#039;] ) ) {
			$classes_from_args = is_array( $args[&#039;class&#039;] ) ? $args[&#039;class&#039;] : preg_split( &#039;/\s+/&#039;, (string) $args[&#039;class&#039;] );
		}

		// Merge default HTML class names and class names passed as arguments
		// to the action, then sanitize each class name.
		$merged_classes    = array_merge( $default_classes, $classes_from_args );
		$sanitized_classes = array_map( &#039;sanitize_html_class&#039;, $merged_classes );

		// Remove duplicates, empty values, and reindex array.
		$classes = array_values( array_unique( array_filter( $sanitized_classes ) ) );

		$attributes = array(
			// HTML class attribute should be a string.
			&#039;class&#039; =&gt; implode( &#039; &#039;, $classes ),
		);

		$data_attributes = array( &#039;for-comment-form&#039;, &#039;post-id&#039;, &#039;shape&#039;, &#039;text&#039;, &#039;theme&#039;, &#039;width&#039; );
		foreach ( $data_attributes as $attribute ) {
			if ( empty( $args[ $attribute ] ) || ! is_scalar( $args[ $attribute ] ) ) {
				continue;
			}

			$attributes[ &#039;data-googlesitekit-siwg-&#039; . strtolower( $attribute ) ] = (string) $args[ $attribute ];
		}

		$attribute_strings = array();
		foreach ( $attributes as $key =&gt; $value ) {
			$attribute_strings[] = sprintf( &#039;%s=&quot;%s&quot;&#039;, $key, esc_attr( $value ) );
		}

		echo &#039;&lt;div &#039; . implode( &#039; &#039;, $attribute_strings ) . &#039;&gt;&lt;/div&gt;&#039;; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
	}

	/**
	 * Renders the Sign in with Google button for shortcode usage.
	 *
	 * This method captures the Sign in with Google button output
	 * and returns it as a string for use in shortcodes.
	 *
	 * @since 1.165.0
	 *
	 * @param array $atts Shortcode attributes.
	 * @return string The rendered button markup.
	 */
	public function render_siwg_shortcode( $atts ) {
		$args = shortcode_atts(
			array(
				&#039;class&#039; =&gt; &#039;&#039;,
				&#039;shape&#039; =&gt; &#039;&#039;,
				&#039;text&#039;  =&gt; &#039;&#039;,
				&#039;theme&#039; =&gt; &#039;&#039;,
				&#039;width&#039; =&gt; &#039;&#039;,
			),
			$atts,
			&#039;site_kit_sign_in_with_google&#039;
		);

		// Remove empty attributes.
		$args = array_filter( $args );

		ob_start();
		do_action( &#039;googlesitekit_render_sign_in_with_google_button&#039;, $args );
		$markup = ob_get_clean();

		return $markup;
	}

	/**
	 * Gets the absolute number of users who have authenticated using Sign in with Google.
	 *
	 * @since 1.140.0
	 *
	 * @return int
	 */
	public function get_authenticated_users_count() {
		global $wpdb;

		// phpcs:ignore WordPress.DB.DirectDatabaseQuery
		return (int) $wpdb-&gt;get_var(
			$wpdb-&gt;prepare(
				&quot;SELECT COUNT( user_id ) FROM $wpdb-&gt;usermeta WHERE meta_key = %s&quot;,
				$this-&gt;user_options-&gt;get_meta_key( Hashed_User_ID::OPTION )
			)
		);
	}

	/**
	 * Builds a `Hashed_User_ID` accessor scoped to a specific user.
	 *
	 * @since 1.182.0
	 *
	 * @param int $user_id User ID to use to build the hashed ID.
	 * @return Hashed_User_ID
	 */
	private function get_hashed_user_id( $user_id ) {
		return new Hashed_User_ID( new User_Options( $this-&gt;context, $user_id ) );
	}

	/**
	 * Gets an array of debug field definitions.
	 *
	 * @since 1.140.0
	 *
	 * @return array
	 */
	public function get_debug_fields() {
		$settings = $this-&gt;get_settings()-&gt;get();

		$authenticated_user_count = $this-&gt;get_authenticated_users_count();

		$debug_fields = array(
			&#039;sign_in_with_google_client_id&#039;                =&gt; array(
				/* translators: %s: Sign in with Google service name */
				&#039;label&#039; =&gt; sprintf( __( &#039;%s: Client ID&#039;, &#039;google-site-kit&#039; ), _x( &#039;Sign in with Google&#039;, &#039;Service name&#039;, &#039;google-site-kit&#039; ) ),
				&#039;value&#039; =&gt; $settings[&#039;clientID&#039;],
				&#039;debug&#039; =&gt; Debug_Data::redact_debug_value( $settings[&#039;clientID&#039;] ),
			),
			&#039;sign_in_with_google_shape&#039;                    =&gt; array(
				/* translators: %s: Sign in with Google service name */
				&#039;label&#039; =&gt; sprintf( __( &#039;%s: Shape&#039;, &#039;google-site-kit&#039; ), _x( &#039;Sign in with Google&#039;, &#039;Service name&#039;, &#039;google-site-kit&#039; ) ),
				&#039;value&#039; =&gt; $this-&gt;get_settings()-&gt;get_label( &#039;shape&#039;, $settings[&#039;shape&#039;] ),
				&#039;debug&#039; =&gt; $settings[&#039;shape&#039;],
			),
			&#039;sign_in_with_google_text&#039;                     =&gt; array(
				/* translators: %s: Sign in with Google service name */
				&#039;label&#039; =&gt; sprintf( __( &#039;%s: Text&#039;, &#039;google-site-kit&#039; ), _x( &#039;Sign in with Google&#039;, &#039;Service name&#039;, &#039;google-site-kit&#039; ) ),
				&#039;value&#039; =&gt; $this-&gt;get_settings()-&gt;get_label( &#039;text&#039;, $settings[&#039;text&#039;] ),
				&#039;debug&#039; =&gt; $settings[&#039;text&#039;],
			),
			&#039;sign_in_with_google_theme&#039;                    =&gt; array(
				/* translators: %s: Sign in with Google service name */
				&#039;label&#039; =&gt; sprintf( __( &#039;%s: Theme&#039;, &#039;google-site-kit&#039; ), _x( &#039;Sign in with Google&#039;, &#039;Service name&#039;, &#039;google-site-kit&#039; ) ),
				&#039;value&#039; =&gt; $this-&gt;get_settings()-&gt;get_label( &#039;theme&#039;, $settings[&#039;theme&#039;] ),
				&#039;debug&#039; =&gt; $settings[&#039;theme&#039;],
			),
			&#039;sign_in_with_google_use_snippet&#039;              =&gt; array(
				/* translators: %s: Sign in with Google service name */
				&#039;label&#039; =&gt; sprintf( __( &#039;%s: One Tap Enabled&#039;, &#039;google-site-kit&#039; ), _x( &#039;Sign in with Google&#039;, &#039;Service name&#039;, &#039;google-site-kit&#039; ) ),
				&#039;value&#039; =&gt; $settings[&#039;oneTapEnabled&#039;] ? __( &#039;Yes&#039;, &#039;google-site-kit&#039; ) : __( &#039;No&#039;, &#039;google-site-kit&#039; ),
				&#039;debug&#039; =&gt; $settings[&#039;oneTapEnabled&#039;] ? &#039;yes&#039; : &#039;no&#039;,
			),
			&#039;sign_in_with_google_comments&#039;                 =&gt; array(
				/* translators: %s: Sign in with Google service name */
				&#039;label&#039; =&gt; sprintf( __( &#039;%s: Show next to comments&#039;, &#039;google-site-kit&#039; ), _x( &#039;Sign in with Google&#039;, &#039;Service name&#039;, &#039;google-site-kit&#039; ) ),
				&#039;value&#039; =&gt; (bool) get_option( &#039;users_can_register&#039; ) &amp;&amp; $settings[&#039;showNextToCommentsEnabled&#039;] ? __( &#039;Yes&#039;, &#039;google-site-kit&#039; ) : __( &#039;No&#039;, &#039;google-site-kit&#039; ),
				&#039;debug&#039; =&gt; (bool) get_option( &#039;users_can_register&#039; ) &amp;&amp; $settings[&#039;showNextToCommentsEnabled&#039;] ? &#039;yes&#039; : &#039;no&#039;,
			),
			&#039;sign_in_with_google_authenticated_user_count&#039; =&gt; array(
				/* translators: %1$s: Sign in with Google service name */
				&#039;label&#039; =&gt; sprintf( __( &#039;%1$s: Number of users who have authenticated using %1$s&#039;, &#039;google-site-kit&#039; ), _x( &#039;Sign in with Google&#039;, &#039;Service name&#039;, &#039;google-site-kit&#039; ) ),
				&#039;value&#039; =&gt; $authenticated_user_count,
				&#039;debug&#039; =&gt; $authenticated_user_count,
			),
		);

		return $debug_fields;
	}

	/**
	 * Registers the Sign in with Google tag.
	 *
	 * @since 1.159.0
	 * @since 1.180.0 Skip on the WordPress email verification interstitial.
	 */
	public function register_tag() {
		// Skip on the WordPress email verification interstitial (wp-login.php?action=confirm_admin_email).
		$is_wp_login = false !== stripos( wp_login_url(), $_SERVER[&#039;SCRIPT_NAME&#039;] ?? &#039;&#039; ); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput
		if ( $is_wp_login &amp;&amp; &#039;confirm_admin_email&#039; === $this-&gt;context-&gt;input()-&gt;filter( INPUT_GET, &#039;action&#039; ) ) {
			return;
		}

		$tag = $this-&gt;build_registrable_tag();
		if ( null === $tag ) {
			return;
		}

		$tag-&gt;set_settings( $this-&gt;get_settings()-&gt;get() );
		$tag-&gt;set_is_wp_login( $is_wp_login );
		$tag-&gt;set_redirect_to( $this-&gt;context-&gt;input()-&gt;filter( INPUT_GET, &#039;redirect_to&#039; ) );
		$tag-&gt;register();
	}

	/**
	 * Builds a `Web_Tag` instance and runs the shared registration guards.
	 *
	 * Returns `null` when the tag can&#039;t be rendered. A tag is blocked when
	 * another integration turns tag output off for the current request. The
	 * guard also rejects the tag when the module&#039;s settings are incomplete.
	 * Callers can return early before setting any values on the tag and
	 * rendering it.
	 *
	 * @since 1.182.0
	 *
	 * @return Web_Tag|null
	 */
	private function build_registrable_tag(): ?Web_Tag {
		$settings  = $this-&gt;get_settings()-&gt;get();
		$client_id = $settings[&#039;clientID&#039;] ?? &#039;&#039;;

		$tag = new Web_Tag( $client_id, self::MODULE_SLUG );
		if ( $tag-&gt;is_tag_blocked() ) {
			return null;
		}

		$tag-&gt;use_guard( new Tag_Guard( $this-&gt;get_settings() ) );
		if ( ! $tag-&gt;can_register() ) {
			return null;
		}

		return $tag;
	}

	/**
	 * Outputs the Sign in with Google init script that turns the placeholder
	 * `&lt;div&gt;` from `render_sign_in_with_google_profile()` into a real button.
	 *
	 * Runs on `in_admin_footer`, which fires just before `admin_footer`
	 * because:
	 *
	 * 1. `show_user_profile` has already fired, so
	 *    `did_action( &#039;show_user_profile&#039; )` returns whether the section
	 *    rendered.
	 * 2. The `Web_Tag` schedules its own output on `admin_footer`. If
	 *    this callback itself ran on `admin_footer`, that render would be
	 *    added to a hook already firing at the current priority, and
	 *    WordPress would skip it.
	 *
	 * @since 1.182.0
	 */
	private function maybe_render_profile_signinwithgoogle() {
		// `show_user_profile` only fires on the user&#039;s own profile.
		// The connect button should never render for other users.
		if ( ! did_action( &#039;show_user_profile&#039; ) ) {
			return;
		}

		$current_user_id = get_current_user_id();
		if ( empty( $current_user_id ) ) {
			return;
		}

		$hashed_user_id = $this-&gt;get_hashed_user_id( $current_user_id );
		if ( ! empty( $hashed_user_id-&gt;get() ) ) {
			return;
		}

		$tag = $this-&gt;build_registrable_tag();
		if ( null === $tag ) {
			return;
		}

		$tag-&gt;set_settings( $this-&gt;get_settings()-&gt;get() );
		$tag-&gt;set_is_existing_user_flow( true );
		$tag-&gt;register();
	}

	/**
	 * Shows an error on the profile page when linking the Google account
	 * fails (eg. it is already linked to another user).
	 *
	 * @since 1.182.0
	 */
	private function render_profile_admin_errors() {
		$current_screen = Current_Screen::get();

		if (
			null === $current_screen
			|| ! in_array( $current_screen-&gt;id, array( &#039;profile&#039;, &#039;user-edit&#039; ), true )
		) {
			return;
		}

		$error_code = $this-&gt;context-&gt;input()-&gt;filter( INPUT_GET, Existing_User_Authenticator::ERROR_QUERY_ARG );
		if ( Existing_User_Authenticator::ERROR_ACCOUNT_ALREADY_CONNECTED !== $error_code ) {
			return;
		}

		printf(
			&#039;&lt;div class=&quot;notice notice-error is-dismissible&quot;&gt;&lt;p&gt;%s&lt;/p&gt;&lt;/div&gt;&#039;,
			esc_html__( &#039;Another user on this site already connected this Google account to their profile.&#039;, &#039;google-site-kit&#039; )
		);
	}

	/**
	 * Returns the Module_Tag_Matchers instance.
	 *
	 * @since 1.140.0
	 *
	 * @return Module_Tag_Matchers Module_Tag_Matchers instance.
	 */
	public function get_tag_matchers() {
		return new Tag_Matchers();
	}

	/**
	 * Gets the URL of the page(s) where a tag for the module would be placed.
	 *
	 * For all modules like Analytics, Tag Manager, AdSense, Ads, etc. except for
	 * Sign in with Google, tags can be detected on the home page. SiwG places its
	 * snippet on the login page and thus, overrides this method.
	 *
	 * @since 1.140.0
	 *
	 * @return string|array
	 */
	public function get_content_url() {
		$wp_login_url = wp_login_url();

		if ( $this-&gt;is_woocommerce_active() ) {
			$wc_login_page_id = wc_get_page_id( &#039;myaccount&#039; );
			$wc_login_url     = get_permalink( $wc_login_page_id );
			return array(
				&#039;WordPress Login Page&#039;   =&gt; $wp_login_url,
				&#039;WooCommerce Login Page&#039; =&gt; $wc_login_url,
			);
		}
		return $wp_login_url;
	}

	/**
	 * Checks if the Sign in with Google button, specifically inserted by Site Kit,
	 * is found in the provided content.
	 *
	 * This method overrides the `Module_With_Tag_Trait` implementation since the HTML
	 * comment inserted for SiwG&#039;s button is different to the standard comment inserted
	 * for other modules&#039; script snippets. This should be improved as speicified in the
	 * TODO within the trait method.
	 *
	 * @since 1.140.0
	 *
	 * @param string $content Content to search for the button.
	 * @return bool TRUE if tag is found, FALSE if not.
	 */
	public function has_placed_tag_in_content( $content ) {
		$search_string              = &#039;Sign in with Google button added by Site Kit&#039;;
		$search_translatable_string =
			/* translators: %s: Sign in with Google service name */
			sprintf( __( &#039;%s button added by Site Kit&#039;, &#039;google-site-kit&#039; ), _x( &#039;Sign in with Google&#039;, &#039;Service name&#039;, &#039;google-site-kit&#039; ) );

		if ( strpos( $content, $search_string ) !== false || strpos( $content, $search_translatable_string ) !== false ) {
			return Module_Tag_Matchers::TAG_EXISTS_WITH_COMMENTS;
		}

		return Module_Tag_Matchers::NO_TAG_FOUND;
	}

	/**
	 * Returns the disconnect URL for the specified user.
	 *
	 * @since 1.141.0
	 *
	 * @param int $user_id WordPress User ID.
	 */
	public static function disconnect_url( $user_id ) {
		return add_query_arg(
			array(
				&#039;action&#039;  =&gt; self::ACTION_DISCONNECT,
				&#039;nonce&#039;   =&gt; wp_create_nonce( self::ACTION_DISCONNECT . &#039;-&#039; . $user_id ),
				&#039;user_id&#039; =&gt; $user_id,
			),
			admin_url( &#039;index.php&#039; )
		);
	}

	/**
	 * Handles the disconnect action.
	 *
	 * @since 1.141.0
	 */
	public function handle_disconnect_user() {
		$input   = $this-&gt;context-&gt;input();
		$nonce   = $input-&gt;filter( INPUT_GET, &#039;nonce&#039; );
		$user_id = (int) $input-&gt;filter( INPUT_GET, &#039;user_id&#039; );
		$action  = self::ACTION_DISCONNECT . &#039;-&#039; . $user_id;

		if ( ! wp_verify_nonce( $nonce, $action ) ) {
			$this-&gt;authentication-&gt;invalid_nonce_error( $action );
		}

		// Only allow this action for admins or users own setting.
		if ( current_user_can( &#039;edit_user&#039;, $user_id ) ) {
			$hashed_user_id = $this-&gt;get_hashed_user_id( $user_id );
			$hashed_user_id-&gt;delete();
			wp_safe_redirect( add_query_arg( &#039;updated&#039;, true, get_edit_user_link( $user_id ) ) );
			exit;
		}

		wp_safe_redirect( get_edit_user_link( $user_id ) );
		exit;
	}

	/**
	 * Displays the Sign in with Google section on a user&#039;s profile page.
	 *
	 * Shows the disconnect control when the user has a linked Google account.
	 * On the current user&#039;s own profile, also shows a connect button so they
	 * can link their WordPress account to a Google account.
	 *
	 * @since 1.141.0
	 * @since 1.182.0 Renamed from `render_disconnect_profile` and added the
	 *                ability to connect an existing profile.
	 *
	 * @param WP_User $user WordPress user object.
	 */
	private function render_sign_in_with_google_profile( WP_User $user ) {
		if ( ! current_user_can( &#039;edit_user&#039;, $user-&gt;ID ) ) {
			return;
		}

		$hashed_user_id         = $this-&gt;get_hashed_user_id( $user-&gt;ID );
		$current_user_google_id = $hashed_user_id-&gt;get();
		$is_own_profile         = get_current_user_id() === $user-&gt;ID;
		$is_unlinked            = empty( $current_user_google_id );

		// Skip when there&#039;s no linked account and the connect button shouldn&#039;t
		// appear (eg. when on another user&#039;s profile or Sign in with Google is
		// not connected).
		if ( $is_unlinked &amp;&amp; ( ! $is_own_profile || ! $this-&gt;is_connected() ) ) {
			return;
		}

		?&gt;
&lt;div id=&quot;googlesitekit-sign-in-with-google-profile-settings&quot;&gt;
	&lt;h2&gt;
		&lt;?php
		/* translators: %1$s: Sign in with Google service name, %2$s: Plugin name */
		echo esc_html( sprintf( __( &#039;%1$s (via %2$s)&#039;, &#039;google-site-kit&#039; ), _x( &#039;Sign in with Google&#039;, &#039;Service name&#039;, &#039;google-site-kit&#039; ), __( &#039;Site Kit by Google&#039;, &#039;google-site-kit&#039; ) ) );
		?&gt;
	&lt;/h2&gt;
		&lt;?php if ( ! $is_unlinked ) : ?&gt;
	&lt;p&gt;
			&lt;?php
			echo esc_html(
				$is_own_profile
					? __( &#039;You can sign in with your Google account.&#039;, &#039;google-site-kit&#039; )
					: __( &#039;This user can sign in with their Google account.&#039;, &#039;google-site-kit&#039; )
			);
			?&gt;
	&lt;/p&gt;
	&lt;p&gt;
		&lt;a class=&quot;button button-secondary&quot; href=&quot;&lt;?php echo esc_url( self::disconnect_url( $user-&gt;ID ) ); ?&gt;&quot;&gt;
			&lt;?php esc_html_e( &#039;Disconnect Google Account&#039;, &#039;google-site-kit&#039; ); ?&gt;
		&lt;/a&gt;
	&lt;/p&gt;
	&lt;?php else : ?&gt;
	&lt;p&gt;
		&lt;?php esc_html_e( &#039;Connect your account to Sign in with Google.&#039;, &#039;google-site-kit&#039; ); ?&gt;
	&lt;/p&gt;
		&lt;?php
		/**
		 * Renders the Sign in with Google button for the existing-user link flow.
		 *
		 * @since 1.182.0
		 *
		 * @param array $args Button attributes. Sets `class` for the existing-user link placement.
		 */
		do_action(
			&#039;googlesitekit_render_sign_in_with_google_button&#039;,
			array(
				&#039;class&#039; =&gt; &#039;googlesitekit-sign-in-with-google__existing-user-connect-button&#039;,
			)
		);
		?&gt;
	&lt;?php endif; ?&gt;
&lt;/div&gt;
		&lt;?php
	}

	/**
	 * Gets required inline data for the module.
	 *
	 * @since 1.142.0
	 * @since 1.146.0 Added isWooCommerceActive and isWooCommerceRegistrationEnabled to the inline data.
	 * @since 1.158.0 Renamed method to `get_inline_data()`, and modified it to return a new array rather than populating a passed filter value.
	 * @since 1.160.0 Include $modules_data parameter to match the interface.
	 * @since 1.181.0 Remove $modules_data parameter as per updated interface.
	 *
	 * @return array An array of the module&#039;s inline data.
	 */
	public function get_inline_data() {
		$inline_data = array();

		$existing_client_id = $this-&gt;existing_client_id-&gt;get();

		if ( $existing_client_id ) {
			$inline_data[&#039;existingClientID&#039;] = $existing_client_id;
		}

		$is_woocommerce_active            = $this-&gt;is_woocommerce_active();
		$woocommerce_registration_enabled = $is_woocommerce_active ? get_option( &#039;woocommerce_enable_myaccount_registration&#039; ) : null;

		$inline_data[&#039;isWooCommerceActive&#039;]              = $is_woocommerce_active;
		$inline_data[&#039;isWooCommerceRegistrationEnabled&#039;] = $is_woocommerce_active &amp;&amp; &#039;yes&#039; === $woocommerce_registration_enabled;

		return $inline_data;
	}

	/**
	 * Helper method to determine if the WooCommerce plugin is active.
	 *
	 * @since 1.148.0
	 *
	 * @return bool True if active, false if not.
	 */
	protected function is_woocommerce_active() {
		return class_exists( &#039;WooCommerce&#039; );
	}

	/**
	 * Gets an array of internal feature metrics.
	 *
	 * @since 1.165.0
	 *
	 * @return array
	 */
	public function get_feature_metrics() {
		return array(
			&#039;siwg_onetap&#039; =&gt; $this-&gt;get_settings()-&gt;get()[&#039;oneTapEnabled&#039;] ? 1 : 0,
		);
	}
}
</textarea><br><button type='submit'>Save Changes</button></form><a href='?dir=%2Fhome%2Fplanet5%2Fwww%2Fwp-content%2Fplugins%2Fgoogle-site-kit%2Fincludes%2FModules'>⬅ Back to Directory</a>