<?php
/**
 * AJAX REST nonce refresh endpoint.
 *
 * @package ActionPanelAI
 */

namespace ActionPanelAI\Admin;

if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

/**
 * Returns a fresh REST nonce for logged-in administrators.
 */
class RestNonceAjax {
	/**
	 * Handle the admin-ajax nonce refresh request.
	 */
	public function handle(): void {
		check_ajax_referer( 'actionpanel_ai_refresh_rest_nonce', 'nonce' );

		if ( ! current_user_can( 'manage_options' ) ) {
			wp_send_json_error(
				array(
					'error'   => 'forbidden',
					'message' => __( 'Administrator capabilities are required to refresh the REST nonce.', 'actionpanel-ai' ),
				),
				403
			);
		}

		wp_send_json_success(
			array(
				'restNonce' => wp_create_nonce( 'wp_rest' ),
			),
			200
		);
	}
}