<?php
/**
 * Simple per-user rate limiting.
 *
 * @package SpaceBay
 */

namespace SpaceBay\Support;

use SpaceBay\Core\Capabilities;
use WP_Error;

defined( 'ABSPATH' ) || exit;

/**
 * Counts actions per user in a short window to slow down spam.
 * Community managers are never limited.
 */
final class RateLimit {

	/**
	 * Records an action and returns an error when the limit is passed.
	 *
	 * @param string $action  Action name, for example "post".
	 * @param int    $user_id User ID.
	 * @param int    $limit   Allowed actions per window.
	 * @param int    $window  Window in seconds.
	 * @return true|WP_Error
	 */
	public static function hit( $action, $user_id, $limit, $window = MINUTE_IN_SECONDS ) {
		if ( user_can( $user_id, Capabilities::MANAGE ) ) {
			return true;
		}

		/**
		 * Filters the number of actions a member may take in the window.
		 *
		 * @since 1.0.0
		 *
		 * @param int    $limit   Allowed actions.
		 * @param string $action  Action name.
		 * @param int    $user_id User ID.
		 */
		$limit = (int) apply_filters( 'spacebay_rate_limit', $limit, $action, $user_id );
		$key   = 'spacebay_rl_' . sanitize_key( $action ) . '_' . absint( $user_id );
		$count = (int) get_transient( $key );

		if ( $count >= $limit ) {
			return new WP_Error( 'spacebay_rate_limited', __( 'You are doing that too fast. Please wait a minute and try again.', 'spacebay' ), array( 'status' => 429 ) );
		}

		set_transient( $key, $count + 1, $window );

		return true;
	}
}