WooNooW/includes/Core/Validation.php

<?php
namespace WooNooW\Core;

use WP_Error;

/**
 * Validation utilities for WooNooW
 * 
 * Provides extensible validation for emails, phone numbers, and other data types
 * with filter hooks for external API integration.
 * 
 * @package WooNooW\Core
 * @since 1.0.0
 */
class Validation {
    
    /**
     * Validate email address with extensible filter hooks
     * 
     * @param string $email Email address to validate
     * @param string $context Context of validation (e.g., 'newsletter_subscribe', 'checkout', 'registration')
     * @return true|WP_Error True if valid, WP_Error if invalid
     */
    public static function validate_email($email, $context = 'general') {
        $email = sanitize_email($email);
        
        // Basic format validation
        if (!is_email($email)) {
            return new WP_Error('invalid_email', __('Invalid email address', 'woonoow'), ['status' => 400]);
        }
        
        // Enhanced email validation with regex pattern (xxxx@xxxx.xx)
        if (!preg_match('/^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$/', $email)) {
            return new WP_Error('invalid_email_format', __('Email must be in format: xxxx@xxxx.xx', 'woonoow'), ['status' => 400]);
        }
        
        /**
         * Filter to validate email address.
         * 
         * Allows addons to extend validation using external APIs like quickemailverification.com
         * 
         * @param bool|WP_Error $is_valid True if valid, WP_Error if invalid
         * @param string $email The email address to validate
         * @param string $context The context of validation
         * 
         * @since 1.0.0
         * 
         * Example usage in addon:
         * ```php
         * add_filter('woonoow/validate_email', function($is_valid, $email, $context) {
         *     if ($context !== 'newsletter_subscribe') return $is_valid;
         *     
         *     // Call external API (QuickEmailVerification)
         *     $api_key = get_option('woonoow_quickemail_api_key');
         *     if (!$api_key) return $is_valid;
         *     
         *     $response = wp_remote_get("https://api.quickemailverification.com/v1/verify?email={$email}&apikey={$api_key}");
         *     
         *     if (is_wp_error($response)) {
         *         return $is_valid; // Fallback to basic validation on API error
         *     }
         *     
         *     $data = json_decode(wp_remote_retrieve_body($response), true);
         *     
         *     if (isset($data['result']) && $data['result'] !== 'valid') {
         *         return new WP_Error('email_verification_failed', 'Email address could not be verified: ' . ($data['reason'] ?? 'Unknown'));
         *     }
         *     
         *     return true;
         * }, 10, 3);
         * ```
         */
        $email_validation = apply_filters('woonoow/validate_email', true, $email, $context);
        
        if (is_wp_error($email_validation)) {
            return $email_validation;
        }
        
        if ($email_validation !== true) {
            return new WP_Error('email_validation_failed', __('Email validation failed', 'woonoow'), ['status' => 400]);
        }
        
        return true;
    }
    
    /**
     * Validate phone number with extensible filter hooks
     * 
     * @param string $phone Phone number to validate
     * @param string $context Context of validation (e.g., 'checkout', 'registration', 'shipping')
     * @param string $country_code Optional country code (e.g., 'ID', 'US')
     * @return true|WP_Error True if valid, WP_Error if invalid
     */
    public static function validate_phone($phone, $context = 'general', $country_code = '') {
        $phone = sanitize_text_field($phone);
        
        // Remove common formatting characters
        $clean_phone = preg_replace('/[\s\-\(\)\.]+/', '', $phone);
        
        // Basic validation: must contain only digits, +, and be at least 8 characters
        if (!preg_match('/^\+?[0-9]{8,15}$/', $clean_phone)) {
            return new WP_Error('invalid_phone', __('Phone number must be 8-15 digits and may start with +', 'woonoow'), ['status' => 400]);
        }
        
        /**
         * Filter to validate phone number.
         * 
         * Allows addons to extend validation using external APIs or WhatsApp verification
         * 
         * @param bool|WP_Error $is_valid True if valid, WP_Error if invalid
         * @param string $phone The phone number to validate (cleaned)
         * @param string $context The context of validation
         * @param string $country_code Country code if available
         * 
         * @since 1.0.0
         * 
         * Example usage for WhatsApp verification:
         * ```php
         * add_filter('woonoow/validate_phone', function($is_valid, $phone, $context, $country_code) {
         *     if ($context !== 'checkout') return $is_valid;
         *     
         *     // Check if number is registered on WhatsApp
         *     $api_key = get_option('woonoow_whatsapp_verify_api_key');
         *     if (!$api_key) return $is_valid;
         *     
         *     $response = wp_remote_post('https://api.whatsapp.com/v1/contacts', [
         *         'headers' => ['Authorization' => 'Bearer ' . $api_key],
         *         'body' => json_encode(['blocking' => 'wait', 'contacts' => [$phone]]),
         *     ]);
         *     
         *     if (is_wp_error($response)) {
         *         return $is_valid; // Fallback on API error
         *     }
         *     
         *     $data = json_decode(wp_remote_retrieve_body($response), true);
         *     
         *     if (!isset($data['contacts'][0]['wa_id'])) {
         *         return new WP_Error('phone_not_whatsapp', 'Phone number is not registered on WhatsApp');
         *     }
         *     
         *     return true;
         * }, 10, 4);
         * ```
         * 
         * Example usage for general phone validation API:
         * ```php
         * add_filter('woonoow/validate_phone', function($is_valid, $phone, $context, $country_code) {
         *     // Use numverify.com or similar service
         *     $api_key = get_option('woonoow_numverify_api_key');
         *     if (!$api_key) return $is_valid;
         *     
         *     $response = wp_remote_get("http://apilayer.net/api/validate?access_key={$api_key}&number={$phone}&country_code={$country_code}");
         *     
         *     if (is_wp_error($response)) return $is_valid;
         *     
         *     $data = json_decode(wp_remote_retrieve_body($response), true);
         *     
         *     if (!$data['valid']) {
         *         return new WP_Error('phone_invalid', 'Phone number validation failed: ' . ($data['error'] ?? 'Invalid number'));
         *     }
         *     
         *     return true;
         * }, 10, 4);
         * ```
         */
        $phone_validation = apply_filters('woonoow/validate_phone', true, $clean_phone, $context, $country_code);
        
        if (is_wp_error($phone_validation)) {
            return $phone_validation;
        }
        
        if ($phone_validation !== true) {
            return new WP_Error('phone_validation_failed', __('Phone number validation failed', 'woonoow'), ['status' => 400]);
        }
        
        return true;
    }
    
    /**
     * Validate phone number and check WhatsApp registration
     * 
     * Convenience method that validates phone and checks WhatsApp in one call
     * 
     * @param string $phone Phone number to validate
     * @param string $context Context of validation
     * @param string $country_code Optional country code
     * @return true|WP_Error True if valid and registered on WhatsApp, WP_Error otherwise
     */
    public static function validate_phone_whatsapp($phone, $context = 'general', $country_code = '') {
        // First validate the phone number format
        $validation = self::validate_phone($phone, $context, $country_code);
        
        if (is_wp_error($validation)) {
            return $validation;
        }
        
        // Clean phone for WhatsApp check
        $clean_phone = preg_replace('/[\s\-\(\)\.]+/', '', $phone);
        
        /**
         * Filter to check if phone is registered on WhatsApp
         * 
         * @param bool|WP_Error $is_registered True if registered, WP_Error if not or error
         * @param string $phone The phone number (cleaned)
         * @param string $context The context of validation
         * @param string $country_code Country code if available
         * 
         * @since 1.0.0
         */
        $whatsapp_check = apply_filters('woonoow/validate_phone_whatsapp', true, $clean_phone, $context, $country_code);
        
        if (is_wp_error($whatsapp_check)) {
            return $whatsapp_check;
        }
        
        return true;
    }
}