br-woo-routes

better-route: WooCommerce routes

Register Woo routes during rest_api_init and retain the returned Router when contracts are needed.

use BetterRoute\BetterRoute;

add_action('rest_api_init', static function (): void {
    $woo = BetterRoute::wooRouteRegistrar()->register('myapp/v1', [
        'basePath' => 'woo',
        'requireHpos' => true,
        'deleteMode' => 'trash',
        'actions' => [
            'customers' => ['list', 'get'],
            'coupons' => [],
        ],
        'permissions' => [
            'orders.list' => 'manage_woocommerce',
            'orders.create' => 'manage_woocommerce',
        ],
    ]);
});

Routes cover orders, products, customers, and coupons under /wp-json/myapp/v1/woo by default.

Actions and permissions

Each resource supports list, get, create, update, and delete; update registers both PUT and PATCH.

• Omit actions.<resource> for full CRUD.
• Pass [] to disable that resource.
• Invalid action names or a non-array value throw.

Permission keys use <resource>.<action>. A value may be bool, capability string, any-of capability list, or callable receiving the request and optionally the registrar. Unrecognized/empty rules deny. Defaults are manage_woocommerce.

Customer writes also enforce native user capabilities inside the service:

• create: create_users;
• update: edit_user for the target;
• delete: delete_user for the target.

Customer visibility defaults to the customer role and uses one CustomerRolePolicy for lists, detail and mutations. Configure additional customer-like roles explicitly:

'customerRoles' => new \BetterRoute\Integration\Woo\CustomerRolePolicy(
    allowedRoles: ['customer', 'wholesale_customer'],
    excludedRoles: ['former_customer'],
    allowPrivilegedRoles: false
),

Privileged roles, direct administrative capabilities and multisite superadmins are excluded by default, including multi-role accounts. Request role filters can only narrow the configured allowlist. allowPrivilegedRoles: true is a trusted server opt-in; it does not grant native user-write capabilities or make a user directory.