Manage Pledge: Add shortcode to email link for updating.

See #5

plugins/wporg-5ftf/includes/pledge-form.php

@@ -14,6 +14,7 @@ defined( 'WPINC' ) || die();
 // Todo make this into simple optionless blocks instead?
 add_shortcode( '5ftf_pledge_form_new', __NAMESPACE__ . '\render_form_new' );
 add_shortcode( '5ftf_pledge_form_manage', __NAMESPACE__ . '\render_form_manage' );
+add_shortcode( '5ftf_pledge_form_manage_link', __NAMESPACE__ . '\render_manage_link_request' );
 
 /**
  * Render the form(s) for creating new pledges.
@@ -221,6 +222,102 @@ function render_form_manage() {
 	return ob_get_clean();
 }
 
+
+/**
+ * Render the `render_manage_link_request` shortcode.
+ */
+function render_manage_link_request() {
+	// @todo enable when https://github.com/WordPress/five-for-the-future/issues/6 is done
+	if ( ! defined( 'WPORG_SANDBOXED' ) || ! WPORG_SANDBOXED ) {
+		return;
+	}
+
+	$result = process_manage_link_request();
+
+	if ( is_wp_error( $result ) ) {
+		$errors = array( $result->get_error_message() );
+	} elseif ( ! is_null( $result ) ) {
+		$messages = array( $result );
+	}
+
+	require_once FiveForTheFuture\get_views_path() . 'form-pledge-request-manage-link.php';
+}
+
+/**
+ * Process a request for a pledge management link.
+ *
+ * @return null|string|WP_Error `null` if the form wasn't submitted; `string` with a success message;
+ *                              `WP_Error` with an error message.
+ */
+function process_manage_link_request() {
+	if ( ! filter_input( INPUT_POST, 'get_manage_pledge_link' ) ) {
+		return null;
+	}
+
+	$unverified_pledge_id   = filter_input( INPUT_POST, 'pledge_id', FILTER_VALIDATE_INT );
+	$unverified_admin_email = filter_input( INPUT_POST, 'pledge_admin_address', FILTER_VALIDATE_EMAIL );
+	$valid_admin_email      = get_post( $unverified_pledge_id )->{ PledgeMeta\META_PREFIX . 'org-pledge-email' };
+
+	if ( $valid_admin_email && $valid_admin_email === $unverified_admin_email ) {
+		$verified_pledge_id = $unverified_pledge_id; // The addresses will only match is the pledge ID is valid.
+		$message_sent       = send_manage_pledge_link( $verified_pledge_id );
+
+		if ( $message_sent ) {
+			$result = __( "Thanks! We've emailed you a link you can open in order to update your pledge.", 'wporg-5ftf' );
+		} else {
+			$result = new WP_Error( 'email_failed', __( 'There was an error while trying to send the email.', 'wporg-5ftf' ) );
+		}
+
+	} else {
+		$error_message = sprintf(
+			__( 'That\'s not the address that we have for this pledge, please try a different one. If none of the addresses you try are working, please <a href="%s">email us</a> for help.', 'wporg-5ftf' ),
+			get_permalink( get_page_by_path( 'report' ) )
+		);
+
+		$result = new WP_Error( 'invalid_pledge_email', $error_message );
+	}
+
+	return $result;
+}
+
+
+/**
+ * Email the pledge admin a temporary link they can use to manage their pledge.
+ *
+ * @param int $pledge_id
+ *
+ * @return true|WP_Error
+ */
+function send_manage_pledge_link( $pledge_id ) {
+	$admin_email = get_post( $pledge_id )->{ PledgeMeta\META_PREFIX . 'org-pledge-email' };
+
+	if ( ! is_email( $admin_email ) ) {
+		return new WP_Error( 'invalid_email', 'Invalid email address.' );
+	}
+
+	$subject = __( 'Updating your Pledge', 'wporg-5ftf' );
+	$message =
+		'Howdy, please open this link to update your pledge:' . "\n\n" .
+
+		Email\get_authentication_url(
+			$pledge_id,
+			'manage_pledge',
+			get_page_by_path( 'manage-pledge' )->ID,
+
+			// The token needs to be reused so that the admin can view the form, submit it, and view the result.
+			false
+		)
+	;
+
+	$result = Email\send_email( $admin_email, $subject, $message, $pledge_id );
+
+	if ( ! $result ) {
+		$result = new WP_Error( 'email_failed', 'Email failed to send' );
+	}
+
+	return $result;
+}
+
 /**
  * Process a submission from the Manage Existing Pledge form.
  *

plugins/wporg-5ftf/views/form-pledge-request-manage-link.php

@@ -0,0 +1,74 @@
+<?php
+
+namespace WordPressDotOrg\FiveForTheFuture\View;
+
+defined( 'WPINC' ) || die();
+
+/**
+ * @var array $errors
+ */
+
+// Hide it if it hasn't submitted, but show success/error messages if it was submitted.
+$hidden = empty( $errors ) && empty( $_POST['get_manage_pledge_link'] ) ? 'hidden' : '';
+
+?>
+
+<button id="toggle-management-link-form">
+	<span class="dashicons dashicons-edit"></span>
+	<?php esc_html_e( 'Edit Pledge', 'wporg-5ftf' ); ?>
+</button>
+
+<div id="request-management-link" <?php echo esc_attr( $hidden ); ?> >
+	<p>
+		<?php esc_html_e( 'Only pledge admins can edit pledges.', 'wporg-5ftf' ); ?>
+	</p>
+
+	<p>
+		<?php esc_html_e( "If you're the admin, enter your email address and a confirmation link will be sent to you.", 'wporg-5ftf' ); ?>
+	</p>
+
+	<form action="#form-messages" method="post">
+		<input type="hidden" name="pledge_id" value="<?php echo esc_attr( get_post()->ID ); ?>" />
+
+		<label for="pledge_admin_address">
+			<?php esc_html_e( 'Email Address', 'wporg-5ftf' ); ?>
+		</label>
+
+		<input
+			id="pledge_admin_address"
+			name="pledge_admin_address"
+			type="email"
+			required
+			value=""
+		/>
+
+		<input
+			type="submit"
+			name="get_manage_pledge_link"
+			value="Submit"
+		/>
+
+		<?php require __DIR__ . '/partial-result-messages.php'; ?>
+	</form>
+</div>
+
+<script>
+	( function() {
+		var toggleLinkFormButton = document.getElementById( 'toggle-management-link-form' ),
+			linkForm = document.getElementById( 'request-management-link' );
+
+		// Toggle the form when the button is clicked.
+		toggleLinkFormButton.addEventListener( 'click', function() {
+			switch( linkForm.hidden ) {
+				case true:
+					linkForm.hidden = false;
+					linkForm.scrollIntoView( { behavior: 'smooth' } );
+					break;
+
+				default:
+					linkForm.hidden = true;
+					break;
+			}
+		} );
+	}() );
+</script>