REST API: Add author filtering to autosave collections.

src/wp-admin/edit-form-blocks.php

@@ -68,7 +68,8 @@ static function ( $classes ) {
 	array( rest_get_route_for_post_type_items( 'page' ), 'OPTIONS' ),
 	array( rest_get_route_for_post_type_items( 'wp_block' ), 'OPTIONS' ),
 	array( rest_get_route_for_post_type_items( 'wp_template' ), 'OPTIONS' ),
-	sprintf( '%s/autosaves?context=edit', $rest_path ),
+	// The editor requests only the current user's autosave.
+	sprintf( '%s/autosaves?context=edit&author=%d', $rest_path, get_current_user_id() ),
 	'/wp/v2/settings',
 	array( '/wp/v2/settings', 'OPTIONS' ),
 	'/wp/v2/global-styles/themes/' . $active_theme . '?context=view',

src/wp-includes/rest-api/endpoints/class-wp-rest-autosaves-controller.php

@@ -302,11 +302,14 @@ public function get_item( $request ) {
 	}
 
 	/**
-	 * Gets a collection of autosaves using wp_get_post_autosave.
+	 * Gets a collection of autosaves for the parent post.
 	 *
-	 * Contains the user's autosave, for empty if it doesn't exist.
+	 * WordPress stores at most one autosave per author, so this contains one
+	 * entry per author who has autosaved the parent post, newest first.
 	 *
 	 * @since 5.0.0
+	 * @since 7.3.0 Autosaves are queried directly rather than filtered out of
+	 *              every revision of the parent. Added the `author` parameter.
 	 *
 	 * @param WP_REST_Request $request Full details about the request.
 	 * @return WP_REST_Response|WP_Error Response object on success, or WP_Error object on failure.
@@ -321,21 +324,49 @@ public function get_items( $request ) {
 			// Return early as this handler doesn't add any response headers.
 			return new WP_REST_Response( array() );
 		}
+
 		$response  = array();
 		$parent_id = $parent->ID;
-		$revisions = wp_get_post_revisions( $parent_id, array( 'check_enabled' => false ) );
 
-		foreach ( $revisions as $revision ) {
-			if ( str_contains( $revision->post_name, "{$parent_id}-autosave" ) ) {
-				$data       = $this->prepare_item_for_response( $revision, $request );
-				$response[] = $this->prepare_response_for_collection( $data );
+		$query_args = array(
+			'post_type'        => 'revision',
+			'post_status'      => 'inherit',
+			'post_parent'      => $parent_id,
+			// Unlike `name`, this does not make the query singular.
+			'post_name__in'    => array( $parent_id . '-autosave-v1' ),
+			'orderby'          => array(
+				'date' => 'DESC',
+				'ID'   => 'DESC',
+			),
+			'posts_per_page'   => -1,
+			// Matches the isolation of the wp_get_post_revisions() lookup this replaces.
+			'suppress_filters' => true,
+		);
+
+		if ( ! empty( $request['author'] ) ) {
+			$query_args['author__in'] = $request['author'];
+		}
+
+		$autosaves = get_posts( $query_args );
+
+		// Each author has at most one autosave; keep only the newest if not.
+		$seen_authors = array();
+
+		foreach ( $autosaves as $autosave ) {
+			if ( in_array( $autosave->post_author, $seen_authors, true ) ) {
+				continue;
 			}
+			$seen_authors[] = $autosave->post_author;
+
+			$data       = $this->prepare_item_for_response( $autosave, $request );
+			$response[] = $this->prepare_response_for_collection( $data );
 		}
 
 		return rest_ensure_response( $response );
 	}
 
 
+
 	/**
 	 * Retrieves the autosave's schema, conforming to JSON Schema.
 	 *
@@ -507,12 +538,22 @@ public function prepare_item_for_response( $item, $request ) {
 	 * Retrieves the query params for the autosaves collection.
 	 *
 	 * @since 5.0.0
+	 * @since 7.3.0 Added the `author` parameter.
 	 *
 	 * @return array Collection parameters.
 	 */
 	public function get_collection_params() {
 		return array(
 			'context' => $this->get_context_param( array( 'default' => 'view' ) ),
+			'author'  => array(
+				'description' => __( 'Limit result set to autosaves assigned to specific authors.' ),
+				'type'        => 'array',
+				'items'       => array(
+					'type'    => 'integer',
+					'minimum' => 1,
+				),
+				'default'     => array(),
+			),
 		);
 	}
 }