Only show admin pages when configured

Wrap additional WorkOS admin submenu pages and tabs in an is_configured() check so Roles, Usage, Learning Mode, and Diagnostics are only visible after API keys/client ID are set. Add a private fetch_workos_roles_error() helper to surface role-fetch errors in the UI for debugging and show the error message when roles cannot be retrieved. Bump plugin version to 1.1.4 (WORKOS_WP_VERSION and header). Minor markup/indent changes around the settings tabs.

Author: codearachnid

includes/Plugin.php

@@ -330,41 +330,44 @@ public function register_settings_page(): void {
             [$this, 'render_api_config_page']
         );
 
-        add_submenu_page(
-            'workos-settings',
-            __('Roles', 'workos-for-wordpress'),
-            __('Roles', 'workos-for-wordpress'),
-            'manage_options',
-            'workos-role-mapping',
-            [$this, 'render_role_mapping_page']
-        );
+        // Only show additional pages when API Key and Client ID are configured.
+        if ($this->is_configured()) {
+            add_submenu_page(
+                'workos-settings',
+                __('Roles', 'workos-for-wordpress'),
+                __('Roles', 'workos-for-wordpress'),
+                'manage_options',
+                'workos-role-mapping',
+                [$this, 'render_role_mapping_page']
+            );
 
-        add_submenu_page(
-            'workos-settings',
-            __('Usage', 'workos-for-wordpress'),
-            __('Usage', 'workos-for-wordpress'),
-            'manage_options',
-            'workos-usage',
-            [$this, 'render_usage_page']
-        );
+            add_submenu_page(
+                'workos-settings',
+                __('Usage', 'workos-for-wordpress'),
+                __('Usage', 'workos-for-wordpress'),
+                'manage_options',
+                'workos-usage',
+                [$this, 'render_usage_page']
+            );
 
-        add_submenu_page(
-            'workos-settings',
-            __('Learning Mode', 'workos-for-wordpress'),
-            __('Learning Mode', 'workos-for-wordpress'),
-            'manage_options',
-            'workos-learning-mode',
-            [$this, 'render_learning_mode_page']
-        );
+            add_submenu_page(
+                'workos-settings',
+                __('Learning Mode', 'workos-for-wordpress'),
+                __('Learning Mode', 'workos-for-wordpress'),
+                'manage_options',
+                'workos-learning-mode',
+                [$this, 'render_learning_mode_page']
+            );
 
-        add_submenu_page(
-            'workos-settings',
-            __('Diagnostics', 'workos-for-wordpress'),
-            __('Diagnostics', 'workos-for-wordpress'),
-            'manage_options',
-            'workos-diagnostics',
-            [$this, 'render_diagnostics_page']
-        );
+            add_submenu_page(
+                'workos-settings',
+                __('Diagnostics', 'workos-for-wordpress'),
+                __('Diagnostics', 'workos-for-wordpress'),
+                'manage_options',
+                'workos-diagnostics',
+                [$this, 'render_diagnostics_page']
+            );
+        }
     }
 
     public function register_settings(): void {
@@ -426,12 +429,15 @@ private function render_global_header(string $current_slug): void {
         $logo_url = plugins_url('WorkOS-branding/SVG/WorkOS_Lockup_Full_Color.svg', WORKOS_WP_PLUGIN_FILE);
 
         $tabs = [
-            'workos-settings'      => __('Welcome', 'workos-for-wordpress'),
-            'workos-role-mapping'  => __('Roles', 'workos-for-wordpress'),
-            'workos-learning-mode' => __('Learning Mode', 'workos-for-wordpress'),
-            'workos-usage'         => __('Usage', 'workos-for-wordpress'),
-            'workos-diagnostics'   => __('Diagnostics', 'workos-for-wordpress'),
+            'workos-settings' => __('Welcome', 'workos-for-wordpress'),
         ];
+
+        if ($this->is_configured()) {
+            $tabs['workos-role-mapping']  = __('Roles', 'workos-for-wordpress');
+            $tabs['workos-learning-mode'] = __('Learning Mode', 'workos-for-wordpress');
+            $tabs['workos-usage']         = __('Usage', 'workos-for-wordpress');
+            $tabs['workos-diagnostics']   = __('Diagnostics', 'workos-for-wordpress');
+        }
         ?>
         <div class="workos-global-header">
             <div class="workos-global-header-left">
@@ -722,6 +728,13 @@ public function render_role_mapping_page(): void {
                 <?php if ($this->is_configured() && !empty($org_id) && empty($workos_roles)): ?>
                     <div class="workos-alert workos-alert-error">
                         <?php esc_html_e('Could not fetch roles for this organization. Verify the organization is correct and your API key has access.', 'workos-for-wordpress'); ?>
+                        <?php
+                        // Show the actual error for debugging.
+                        $role_error = $this->fetch_workos_roles_error($org_id);
+                        if ($role_error) {
+                            echo '<br><small>' . esc_html($role_error) . '</small>';
+                        }
+                        ?>
                     </div>
                 <?php endif; ?>
 
@@ -1856,6 +1869,19 @@ private function fetch_workos_roles(): array {
         }
     }
 
+    /**
+     * Attempt to fetch roles and return the error message if it fails.
+     */
+    private function fetch_workos_roles_error(string $org_id): ?string {
+        try {
+            $orgs = new \WorkOS\Organizations();
+            $orgs->listOrganizationRoles($org_id);
+            return null;
+        } catch (\Exception $e) {
+            return $e->getMessage();
+        }
+    }
+
     public function sanitize_role_map($input): array {
         if (!is_array($input)) {
             return [];

workos-for-wordpress.php

@@ -3,7 +3,7 @@
  * Plugin Name: WorkOS for WordPress
  * Plugin URI:  https://github.com/AlwaysCuriousCo/workos-for-wordpress
  * Description: Integrate WorkOS authentication and user management into WordPress.
- * Version:     1.1.3
+ * Version:     1.1.4
  * Author:      Always Curious
  * Author URI:  https://alwayscurious.co
  * License:     GPL-3.0-or-later
@@ -15,7 +15,7 @@
 
 defined('ABSPATH') || exit;
 
-define('WORKOS_WP_VERSION', '1.1.3');
+define('WORKOS_WP_VERSION', '1.1.4');
 define('WORKOS_WP_PLUGIN_FILE', __FILE__);
 define('WORKOS_WP_PLUGIN_DIR', plugin_dir_path(__FILE__));
 define('WORKOS_WP_PLUGIN_URL', plugin_dir_url(__FILE__));