How to use the wpsnonce clone post link?

Question

I have this link from a CPT, to clone a post, in this case post=30808:

https://domain.com/wp-admin/admin.php?action=duplicate_post_clone&post=30808&_wpnonce=240f0078e7

Now, I need to use this within a jquery script like this:

    $('body.post-type-pessoas .page-title-action').replaceWith( '<a href="https://domain.com/wp-admin/admin.php?action=duplicate_post_clone&post=30808&_wpnonce=240f0078e7" class="page-title-action">Clonar Modelo PESSOA</a>' );
});

(this will replace the "New Post" button with "Clonar Modelo PESSOA" with the same link)

The thing is that after several days the link won't work because of the wpsnonce lifetime. I don't want to remove the wpsnonce lifetime due to security issues.

My question is how do I get the correct and actualized link?

Thank you.

AMP.

Answer 1

One option is to use wp_add_inline_script() to inline the action url to the page source. This can be done for example on the admin_enqueue_scripts action.

In the example below I used admin_url() with wp_nonce_url() to retrieve the nonce wp-admin url and then added the query paramters to it with add_query_arg().

add_action( 'admin_enqueue_scripts', 'my_admin_action_url', 5 );
function my_admin_action_url() {
    $actionUrl = add_query_arg([
        'action' => 'duplicate_post_clone',
        'post' => 30808,
    ], wp_nonce_url( admin_url('admin.php'), 'action' ));

   wp_add_inline_script( 'jquery', "var myAdminActionUrl = '{$actionUrl}';" );
}

The url should be now available in your script via the myAdminActionUrl variable.