fluentcart-customers-portal

FluentCart customers and portal

Treat Customer as the commerce identity and WP_User as an optional login identity. Enforce ownership for every customer-facing object.

Read customer-identity.md before changing email/user links, moving resources, or exposing customer data.

Resolve identity safely

• Customer rows live in fct_customers and may link to WP users by user_id.
• Orders, subscriptions, addresses, licenses, statistics, and labels reference Customer IDs, not WP user IDs.
• CustomerResource::getCurrentCustomer() first resolves the logged-in WP user by user_id or matching email and may attach that user_id to the existing row.
• Passing true may create a Customer from the current WP user.
• Email matching is a linking operation. Validate verified ownership and duplicate/merge consequences before changing an address.

Use Customers/CustomerResource and the normal resource-moving hooks for coordinated changes. Do not update order and subscription customer_id values piecemeal.

Enforce object ownership

CustomerFrontendPolicy only proves that a WP user is logged in. It does not authorize an arbitrary order, subscription, address, download, or license.

For every custom handler:

1. resolve CustomerResource::getCurrentCustomer();
2. query the requested object with customer_id equal to that customer;
3. reject absent/mismatched objects without revealing whether another customer owns them;
4. authorize the requested mutation separately;
5. use FluentCart lifecycle methods for the mutation.

Never authorize solely by UUID, license key, address ID, download ID, or portal URL.

Add a portal page

Register at fluent_cart/init or later. Use a unique kebab-case slug that is not dashboard, purchase-history, subscriptions, licenses, downloads, or profile.

fluent_cart_api()->addCustomerDashboardEndpoint('acme-benefits', [
    'title'           => __('Benefits', 'acme-addon'),
    'render_callback' => static function (): void {
        $customer = \FluentCart\Api\Resource\CustomerResource::getCurrentCustomer();
        if (!$customer) {
            return;
        }