<?php
/**
 * Shared refusal for requests aimed at a hosted map.
 *
 * @package Mapsemble
 */

namespace Mapsemble\Rest;

use WP_REST_Response;

/**
 * The one answer both public endpoints give a hosted map.
 */
trait HostedMapRefusal {

	/**
	 * Refuses a request for a map whose locations live in Mapsemble.
	 *
	 * Deliberately distinct from the unknown-map case, which stays a 200 with
	 * an empty collection: an unknown map is a question this site cannot
	 * answer, while a hosted map is one it must not.
	 *
	 * The CORS header rides along so that a widget still holding the old
	 * configuration — for the seconds after a switch, or for as long as a CDN
	 * caches a page — can read the 404 rather than reporting a network error.
	 */
	private function hosted_map_refusal(): WP_REST_Response {
		$response = new WP_REST_Response(
			array(
				'code'    => 'mapsemble_hosted_map',
				'message' => __( 'This map takes its data from Mapsemble, not from this site.', 'mapsemble' ),
			),
			404
		);
		$response->header( 'Access-Control-Allow-Origin', '*' );
		return $response;
	}
}