orcid_api.php

<?php
function odb2_handle_orcid_proxy_request(WP_REST_Request $request) 
{
    $orcid_id = sanitize_title_with_dashes($request->get_param('orcid_id'));
    if (!isset($orcid_id) || empty($orcid_id)) {
        return new WP_Error('missing_orcid_id', 'Missing ORCID ID', array('status' => 400));
    }

    if (!odb2_validate_orcid_id($orcid_id)) {
        return new WP_Error('invalid_orcid_id', 'Invalid ORCID ID', array('status' => 400));
    }

    $response = wp_remote_get("https://orcid.org/{$orcid_id}", array(
        'headers' => array(
            'Accept' => 'application/json',
        ),
    ));
    if (is_wp_error($response)) {
        return new WP_Error('request_failed', 'Failed to fetch data from ORCID', array('status' => 500));
    }

    $body = wp_remote_retrieve_body($response);
    return rest_ensure_response(json_decode($body));
}
add_action('rest_api_init', function () {
    register_rest_route('custom/v1', '/orcid-proxy', array(
        'methods' => 'GET',
        'callback' => 'odb2_handle_orcid_proxy_request',
        'permission_callback' => '__return_true',
    ));
});

/**
 * Validate an ORCID iD
 *
 * @param string $value
 * @return bool
 */
function odb2_validate_orcid_id($value) 
{
    $correct_length = false;
    $number_only = false;

    // Must be an expected length
    if (strlen($value) === 19 || strlen($value) === 16) {
        $correct_length = true;
    }
    // Must be a number only
    if (preg_match('/^[0-9]+$/', str_replace('-', '', $value))) {
        $number_only = true;
    }

    return $number_only && $correct_length;
}