WP_REST_Server::respond_to_request( WP_REST_Request $request, string $route, array $handler, WP_Error|null $response ): WP_REST_Response

1243	protected function respond_to_request( $request, $route, $handler, $response ) {1244		/**1245		 * Filters the response before executing any REST API callbacks.1246		 *1247		 * Allows plugins to perform additional validation after a1248		 * request is initialized and matched to a registered route,1249		 * but before it is executed.1250		 *1251		 * Note that this filter will not be called for requests that1252		 * fail to authenticate or match to a registered route.1253		 *1254		 * @since 4.7.01255		 *1256		 * @param WP_REST_Response|WP_HTTP_Response|WP_Error|mixed $response Result to send to the client.1257		 *                                                                   Usually a WP_REST_Response or WP_Error.1258		 * @param array                                            $handler  Route handler used for the request.1259		 * @param WP_REST_Request                                  $request  Request used to generate the response.1260		 */1261		$response = apply_filters( 'rest_request_before_callbacks', $response, $handler, $request );1262 1263		// Check permission specified on the route.1264		if ( ! is_wp_error( $response ) && ! empty( $handler['permission_callback'] ) ) {1265			$permission = call_user_func( $handler['permission_callback'], $request );1266 1267			if ( is_wp_error( $permission ) ) {1268				$response = $permission;1269			} elseif ( false === $permission || null === $permission ) {1270				$response = new WP_Error(1271					'rest_forbidden',1272					__( 'Sorry, you are not allowed to do that.' ),1273					array( 'status' => rest_authorization_required_code() )1274				);1275			}1276		}1277 1278		if ( ! is_wp_error( $response ) ) {1279			/**1280			 * Filters the REST API dispatch request result.1281			 *1282			 * Allow plugins to override dispatching the request.1283			 *1284			 * @since 4.4.01285			 * @since 4.5.0 Added `$route` and `$handler` parameters.1286			 *1287			 * @param mixed           $dispatch_result Dispatch result, will be used if not empty.1288			 * @param WP_REST_Request $request         Request used to generate the response.1289			 * @param string          $route           Route matched for the request.1290			 * @param array           $handler         Route handler used for the request.1291			 */1292			$dispatch_result = apply_filters( 'rest_dispatch_request', null, $request, $route, $handler );1293 1294			// Allow plugins to halt the request via this filter.1295			if ( null !== $dispatch_result ) {1296				$response = $dispatch_result;1297			} else {1298				$response = call_user_func( $handler['callback'], $request );1299			}1300		}1301 1302		/**1303		 * Filters the response immediately after executing any REST API1304		 * callbacks.1305		 *1306		 * Allows plugins to perform any needed cleanup, for example,1307		 * to undo changes made during the {@see 'rest_request_before_callbacks'}1308		 * filter.1309		 *1310		 * Note that this filter will not be called for requests that1311		 * fail to authenticate or match to a registered route.1312		 *1313		 * Note that an endpoint's `permission_callback` can still be1314		 * called after this filter - see `rest_send_allow_header()`.1315		 *1316		 * @since 4.7.01317		 *1318		 * @param WP_REST_Response|WP_HTTP_Response|WP_Error|mixed $response Result to send to the client.1319		 *                                                                   Usually a WP_REST_Response or WP_Error.1320		 * @param array                                            $handler  Route handler used for the request.1321		 * @param WP_REST_Request                                  $request  Request used to generate the response.1322		 */