<?php

namespace AdPresso\Admin\Ajax;

use AdPresso\Infrastructure\Params;

defined( 'ABSPATH' ) || exit;

/**
 * Handles the AJAX request for the User Role frontend condition.
 *
 * Stays on admin-ajax: the visitor is identified by the login cookie alone. A nonce would come from
 * the (page-cached) footer of another visitor and fail; a REST request without one is anonymous.
 */
class UserRoleConditionAjaxHandler {

	public const AJAX_ACTION = 'adpresso_check_user_role';

	/**
	 * Registers the AJAX action hook.
	 */
	public function hooks(): void {
		add_action( 'wp_ajax_' . self::AJAX_ACTION, [ $this, 'handle_request' ] );
		add_action( 'wp_ajax_nopriv_' . self::AJAX_ACTION, [ $this, 'handle_request' ] );
	}

	/**
	 * Handles the AJAX request, checks the current user's role, and returns the result.
	 */
	public function handle_request(): void {
		nocache_headers();

		$selected_roles = Params::post()->getArray( 'selected_roles', 'sanitize_key' );
		$operator       = Params::post()->getKey( 'operator', 'is' );

		if ( empty( $selected_roles ) ) {
			// When no roles are selected, we assume a match.
			wp_send_json_success( [ 'match' => true ] );
		}

		$current_user_roles = is_user_logged_in() ? wp_get_current_user()->roles ?? [] : [];
		$match              = false;
		$intersection       = array_intersect( $current_user_roles, $selected_roles );

		if ( ! empty( $intersection ) ) {
			// User has at least one of the selected roles
			$match = true;
		}

		$final_result = ( $operator === 'is_not' ) ? ! $match : $match;

		wp_send_json_success( [ 'match' => $final_result ] );
	}
}