magento2/app/code/Magento/SalesGraphQl/Model/Resolver/GuestOrder.php

<?php
/************************************************************************
 *
 * Copyright 2024 Adobe
 * All Rights Reserved.
 *
 * NOTICE: All information contained herein is, and remains
 * the property of Adobe and its suppliers, if any. The intellectual
 * and technical concepts contained herein are proprietary to Adobe
 * and its suppliers and are protected by all applicable intellectual
 * property laws, including trade secret and copyright laws.
 * Dissemination of this information or reproduction of this material
 * is strictly forbidden unless prior written permission is obtained
 * from Adobe.
 * ***********************************************************************
 */
declare(strict_types=1);

namespace Magento\SalesGraphQl\Model\Resolver;

use Magento\Framework\Api\SearchCriteriaBuilderFactory;
use Magento\Framework\GraphQl\Config\Element\Field;
use Magento\Framework\GraphQl\Exception\GraphQlAuthorizationException;
use Magento\Framework\GraphQl\Exception\GraphQlNoSuchEntityException;
use Magento\Framework\GraphQl\Query\ResolverInterface;
use Magento\Framework\GraphQl\Schema\Type\ResolveInfo;
use Magento\Sales\Api\Data\OrderInterface;
use Magento\Sales\Api\OrderRepositoryInterface;
use Magento\SalesGraphQl\Model\Formatter\Order as OrderFormatter;
use Magento\SalesGraphQl\Model\Order\Token;
use Magento\Store\Model\StoreManagerInterface;

/**
 * Retrieve guest order based
 */
class GuestOrder implements ResolverInterface
{
    /**
     * @param OrderFormatter $orderFormatter
     * @param OrderRepositoryInterface $orderRepository
     * @param SearchCriteriaBuilderFactory $searchCriteriaBuilderFactory
     * @param StoreManagerInterface $storeManager
     * @param Token $token
     */
    public function __construct(
        private readonly OrderFormatter $orderFormatter,
        private readonly OrderRepositoryInterface $orderRepository,
        private readonly SearchCriteriaBuilderFactory $searchCriteriaBuilderFactory,
        private readonly StoreManagerInterface $storeManager,
        private readonly Token $token
    ) {
    }

    /**
     * @inheritDoc
     */
    public function resolve(
        Field $field,
        $context,
        ResolveInfo $info,
        array $value = null,
        array $args = null
    ) {
        list($number, $email, $postcode) = $this->getNumberEmailPostcode($args['input'] ?? []);
        $order = $this->getOrder($number);
        $this->validateOrder($order, $postcode, $email);
        return $this->orderFormatter->format($order);
    }

    /**
     * Retrieve order based on order number
     *
     * @param string $number
     * @return OrderInterface
     * @throws GraphQlNoSuchEntityException
     */
    private function getOrder(string $number): OrderInterface
    {
        $searchCriteria = $this->searchCriteriaBuilderFactory->create()
            ->addFilter('increment_id', $number)
            ->addFilter('store_id', $this->storeManager->getStore()->getId())
            ->create();

        $orders = $this->orderRepository->getList($searchCriteria)->getItems();
        if (empty($orders)) {
            $this->cannotLocateOrder();
        }

        return reset($orders);
    }

    /**
     * Ensure the order matches the provided criteria
     *
     * @param OrderInterface $order
     * @param string $postcode
     * @param string $email
     * @return void
     * @throws GraphQlAuthorizationException
     * @throws GraphQlNoSuchEntityException
     */
    private function validateOrder(OrderInterface $order, string $postcode, string $email): void
    {
        if ($order->getBillingAddress()->getPostcode() !== $postcode) {
            $this->cannotLocateOrder();
        }

        if ($order->getBillingAddress()->getEmail() !== $email) {
            $this->cannotLocateOrder();
        }

        if ($order->getCustomerId()) {
            $this->customerHasToLogin();
        }
    }

    /**
     * Retrieve number, email and postcode from input
     *
     * @param array $input
     * @return array
     * @throws GraphQlNoSuchEntityException
     */
    private function getNumberEmailPostcode(array $input): array
    {
        if (isset($input['token'])) {
            $data = $this->token->decrypt($input['token']);
            if (count($data) !== 3) {
                $this->cannotLocateOrder();
            }
            return $data;
        }
        if (!isset($input['number']) || !isset($input['email']) || !isset($input['postcode'])) {
            $this->cannotLocateOrder();
        }
        return [$input['number'], $input['email'], $input['postcode']];
    }

    /**
     * Throw exception when the order cannot be found or does not match the criteria
     *
     * @return void
     * @throws GraphQlNoSuchEntityException
     */
    private function cannotLocateOrder(): void
    {
        throw new GraphQlNoSuchEntityException(__('We couldn\'t locate an order with the information provided.'));
    }

    /**
     * Throw exception when the guest checkout is not enabled or order is customer order
     *
     * @return void
     * @throws GraphQlAuthorizationException
     */
    private function customerHasToLogin(): void
    {
        throw new GraphQlAuthorizationException(__('Please login to view the order.'));
    }
}