feat(content-gate): personalized institutional access verification page

[miguelpeixe]

All Submissions:

• Have you followed the Newspack Contributing guideline?
• Does your code follow the WordPress' coding standards and VIP Go coding standards?
• Have you checked to ensure there aren't other open Pull Requests for the same update/change?

Changes proposed in this Pull Request:

Each institution now has its own access verification page at /institutional-access/{$slug}/. When a reader visits this URL, they see a personalized loading page with the institution's name and logo, and their access is verified against the institution's rules (IP range, email domain, and user data).

Publishers can set a featured image (logo) for each institution in the edit form.

Builds on #4593.

How to test the changes in this Pull Request:

1. Create an institution with an IP range matching your local IP.
2. Upload a logo via the new "Logo" field in the institution edit form. Save.
3. Copy the institution access page URL from the list kebab menu.
4. Paste in a fresh window and verify the loading page shows the institution's logo and name ("Verifying your access to University…").
5. After verification, confirm you are redirected with a success snackbar showing the institution name.
6. Remove your IP from the institution's range and revisit the permalink. Verify the error state appears with "Try again" and "Continue to site" buttons.
7. Test an institution without a featured image — the loading page should still work, just without the logo.
8. Test the generic /institutional-access/ endpoint still works as before (no personalization).
9. Verify the redirect_to param works on institution permalinks: /institutional-access/<slug>/?redirect_to=/some-page/.
10. In the admin, verify removing the logo works (click Remove, save, reload).

Other information:

• Have you added an explanation of what your changes do and why you'd like us to include them?
• Have you written new tests for your changes, as applicable?
• Have you successfully ran tests with your changes locally?

[Copilot]

Pull request overview

Adds per-institution “institutional access” permalinks that render a personalized verification/loading page (name + logo) and verifies access against a specific institution’s rules, while keeping the generic /institutional-access/ flow intact.

Changes:

• Extends Institution editing UI/types to support setting a logo via featured_media.
• Adds support for institution_id to the institutional access REST check and personalizes the loading page output (title/message/logo).
• Exposes institution permalinks by updating the Institution CPT rewrite and intercepting singular institution requests to render the verification page.

Reviewed changes

Copilot reviewed 3 out of 4 changed files in this pull request and generated 3 comments.

File	Description
src/wizards/audience/views/content-gates/types/index.d.ts	Adds featured_media to Institution typing to support a per-institution logo.
src/wizards/audience/views/content-gates/institutions/edit.tsx	Adds logo upload UI and resolves featured_media to an attachment for display/saving.
includes/content-gate/class-ip-access-rule.php	Adds institution_id REST arg and personalization support in the loading page.
includes/content-gate/class-institution.php	Makes institution permalinks available under /institutional-access/<slug>/ and renders personalized verification output on singular views.

Comments suppressed due to low confidence (1)

includes/content-gate/class-ip-access-rule.php:350

• The IIFE returns early (return;) right after setting up the timeout/AbortController, which prevents the REST fetch from ever running. This will leave the page stuck until timeout and never redirect on success.

				var controller = new AbortController();
				var timer = setTimeout( function() {
					controller.abort();
					showError(
						<?php echo wp_json_encode( __( 'Verification timed out.', 'newspack-plugin' ) ); ?>,
						<?php echo wp_json_encode( __( 'Please check your connection and try again.', 'newspack-plugin' ) ); ?>
					);
				}, <?php echo (int) $timeout_ms; ?> );

				var minDelay = new Promise( function( resolve ) { setTimeout( resolve, 1000 ); } );

				Promise.all( [

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 5 out of 6 changed files in this pull request and generated 4 comments.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[dkoo]

Works well and looks great on the front-end! Adding per-institution share links with a feature to copy the link also makes this feature feel much more mature and publisher-friendly.

Some possible enhancements: we could also add a simple text input to the institution edit page to enter a redirect URL (which would simply append the encoded URL string with the redirect_to param to the share URL) and add a button inside the edit page to copy the link (currently only available in the DataView table). But these are nice-to-haves and not at all blocking.

[miguelpeixe]

Thanks, @dkoo!

I like this idea, but it adds some new UI that I'd like @thomasguillot's input before working on it. Since this is not a blocker, I'll merge this one and we can improve in another PR.

[github-actions]

Hey @miguelpeixe, good job getting this PR merged! 🎉

Now, the needs-changelog label has been added to it.

Please check if this PR needs to be included in the "Upcoming Changes" and "Release Notes" doc. If it doesn't, simply remove the label.

If it does, please add an entry to our shared document, with screenshots and testing instructions if applicable, then remove the label.

Thank you! ❤️

[thomasguillot]

Copy access page URL should be in this kebab menu too.

For the redirect URL, we could add an optional field as part of the access rules.

[github-actions]

🎉 This PR is included in version 6.37.0-alpha.1 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

[github-actions]

🎉 This PR is included in version 6.37.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀