#!/usr/bin/python3
import sys
import os
import base64
import json
import datetime
import pytz
from datetime import timezone

# Add parent directory to path for o11 import
sys.path.insert(0, os.path.dirname(os.path.dirname(os.path.abspath(__file__))))
import o11

from bs4 import BeautifulSoup
from pywidevine.cdm import Cdm
from pywidevine.device import Device
from pywidevine.pssh import PSSH

# Parse command line parameters
user = o11.parse_params(sys.argv, 'user')
password = o11.parse_params(sys.argv, 'password')
device = o11.parse_params(sys.argv, 'device')
pin = o11.parse_params(sys.argv, 'pin')

id = o11.parse_params(sys.argv, 'id')
action = o11.parse_params(sys.argv, 'action')

bind = o11.parse_params(sys.argv, 'bind')
proxy = o11.parse_params(sys.argv, 'proxy')
doh = o11.parse_params(sys.argv, 'doh')
worker = o11.parse_params(sys.argv, 'worker')

cdm = o11.parse_params(sys.argv, 'cdm')
drm = o11.parse_params(sys.argv, 'drm')
kid = o11.parse_params(sys.argv, 'kid')
pssh = o11.parse_params(sys.argv, 'pssh')
challenge = o11.parse_params(sys.argv, 'challenge')

heartbeaturl = o11.parse_params(sys.argv, 'heartbeaturl')
heartbeatparams = o11.parse_params(sys.argv, 'heartbeatparams')

# Session setup
o11Session = o11.session(bind=bind, proxy=proxy, worker=worker)
req = o11Session.get_session()
if doh != "":
    o11.dns(doh)

if challenge == "cert":
    challenge = "CAQ="

# Configuration
WVD_PATH = './WVD.wvd'
authFile = '/A1XploreSI_token.txt'
SCRIPT_DIR = os.path.abspath(os.path.dirname(__file__))

USER_AGENT = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36'

headers = {
    'Origin': 'https://www.xploretv.si',
    'Referer': 'https://www.xploretv.si/',
    'User-Agent': USER_AGENT,
    'Zappware-User-Agent': 'windows_pc_chrome/v30.0.0 (Nexx 4.0 windows_pc_chrome; Windows; 10) null',
    'accept': '*/*',
    'content-type': 'application/json',
}

token = ''
bearer_token = ''
profile_id = ''
device_id = ''

def get_auth():
    try:
        with open(SCRIPT_DIR + authFile, 'r') as f:
            return f.read().strip()
    except:
        return None

def save_auth(tok):
    with open(SCRIPT_DIR + authFile, 'w') as f:
        f.write(tok)

def do_refresh(tok):
    cookies = {'webfw-1-auth': tok}
    refresh_headers = {'Content-Type': 'application/json', 'Origin': 'https://www.xploretv.si', 'Referer': 'https://www.xploretv.si/', 'User-Agent': USER_AGENT}
    params = {'devId': base64.b64decode(tok.split('|')[0]).decode().split('|')[3]}
    response = req.get('https://web.xploretv.si:8843/ext_dev_facade/auth/CloneToken', params=params, cookies=cookies, headers=refresh_headers)
    return response.json()['token']

def get_bearer_token(tok):
    cookies = {'webfw-1-auth': tok}
    dev_id = base64.b64decode(tok.split('|')[0]).decode().split('|')[3]
    bt_headers = {**headers, 'SDSEVO_DEVICE_ID': dev_id, 'SDSEVO_SESSION_ID': '[sedt=0]' + tok}
    json_data = {'operationName': 'getResourceBundle', 'variables': {'version': 'v30.0.0'}, 'query': 'query getResourceBundle($version: String!) { resourceBundles(appVersion: $version) { application { id expiry url version __typename } configuration { id expiry url version __typename } localization { id expiry url version __typename } skin { id expiry url version __typename } __typename } }'}
    response = req.post('https://web.xploretv.si:8443/sdsmiddleware/A1_Slovenia/graphql/4.0', cookies=cookies, headers=bt_headers, json=json_data)
    return response.cookies.get_dict().get('BearerToken', '')

def get_profile_id(tok, bt):
    cookies = {'webfw-1-auth': tok, 'BearerToken': bt}
    json_data = {'operationName': 'getProfiles', 'variables': {}, 'query': 'query getProfiles { me { id firstName household { profiles { items { id name __typename } __typename } __typename } __typename } }'}
    response = req.post('https://web.xploretv.si:8443/sdsmiddleware/A1_Slovenia/graphql/4.0', headers=headers, json=json_data, cookies=cookies)
    try:
        return response.json()['data']['me']['household']['profiles']['items'][0]['id']
    except:
        return ''

def login():
    global token, bearer_token, profile_id, device_id
    print("logging in...", file=sys.stderr)
    
    tok = get_auth()
    if not tok:
        print("No token found. Please add A1XploreSI token to auth file.", file=sys.stderr)
        save_auth('')
        sys.exit(1)
    
    try:
        token = do_refresh(tok)
        save_auth(token)
        device_id = base64.b64decode(token.split('|')[0]).decode().split('|')[3]
        bearer_token = get_bearer_token(token)
        profile_id = get_profile_id(token, bearer_token)
        print("logged in successfully", file=sys.stderr)
        return token
    except Exception as e:
        print(f"Login failed: {e}", file=sys.stderr)
        sys.exit(1)

def get_token():
    global token
    if token:
        return token
    return login()

def get_pssh_from_mpd(url):
    response = req.get(url, headers={'User-Agent': USER_AGENT})
    content_protections = BeautifulSoup(response.content, features="xml").findAll('ContentProtection')
    for cp in content_protections:
        if cp.get('schemeIdUri') == 'urn:uuid:edef8ba9-79d6-4ace-a3c8-27dcd51d21ed':
            pssh_elem = cp.find('cenc:pssh')
            if pssh_elem:
                return pssh_elem.text
    return None

def get_single(channel_id):
    cookies = {'webfw-1-auth': token, 'BearerToken': bearer_token}
    json_data = {'operationName': 'playChannel', 'variables': {'input': {'channelId': channel_id}, 'profileId': profile_id}, 'query': 'mutation playChannel($input: PlayChannelInput!, $profileId: ID!) { playChannel(input: $input) { playbackInfo { sessionId url __typename } __typename } }'}
    response = req.post('https://web.xploretv.si:8443/sdsmiddleware/A1_Slovenia/graphql/4.0', headers=headers, json=json_data, cookies=cookies)
    try:
        return response.json()['data']['playChannel']['playbackInfo']['url']
    except:
        return None

def stop_playback():
    cookies = {'webfw-1-auth': token, 'BearerToken': bearer_token}
    json_data = {'operationName': 'stopPlayback', 'variables': {'input': {'sessionId': ''}}, 'query': 'mutation stopPlayback($input: StopPlaybackInput!) { stopPlayback(input: $input) { success __typename } }'}
    req.post('https://web.xploretv.si:8443/sdsmiddleware/A1_Slovenia/graphql/4.0', headers=headers, json=json_data, cookies=cookies)

def do_cdm_internal(challenge_b64):
    b64_device_id = base64.b64encode(device_id.encode()).decode()
    lic_headers = {'Origin': 'https://www.xploretv.si', 'Referer': 'https://www.xploretv.si/', 'User-Agent': USER_AGENT, 'Content-Type': 'application/x-www-form-urlencoded'}
    response = req.post(f'https://wvps.a1xploretv.bg:8063/?deviceId={b64_device_id}', headers=lic_headers, data=base64.b64decode(challenge_b64))
    response_b64 = str(base64.b64encode(response.content), 'ascii')
    if response_b64.startswith('CA'):
        return response_b64
    return None

def do_cdm_external(pssh_b64):
    try:
        pssh_obj = PSSH(pssh_b64)
        device_obj = Device.load(WVD_PATH)
        cdm_obj = Cdm.from_device(device_obj)
        session_id = cdm_obj.open()
        challenge_data = cdm_obj.get_license_challenge(session_id, pssh_obj)
        b64_device_id = base64.b64encode(device_id.encode()).decode()
        lic_headers = {'Origin': 'https://www.xploretv.si', 'Referer': 'https://www.xploretv.si/', 'User-Agent': USER_AGENT, 'Content-Type': 'application/x-www-form-urlencoded'}
        licence = req.post(f'https://wvps.a1xploretv.bg:8063/?deviceId={b64_device_id}', headers=lic_headers, data=challenge_data)
        cdm_obj.parse_license(session_id, licence.content)
        keys = [f"{key.kid.hex}:{key.key.hex()}" for key in cdm_obj.get_keys(session_id) if key.type != 'SIGNING']
        cdm_obj.close(session_id)
        return keys
    except Exception as e:
        print(f'CDM external failed: {e}', file=sys.stderr)
        return None

def do_action():
    get_token()
    
    if action == "login":
        login()
        sys.exit()
    
    if action == "channels":
        output = {'Channels': []}
        cookies = {'webfw-1-auth': token, 'BearerToken': bearer_token}
        json_data = {'operationName': 'channelList', 'variables': {'profileId': profile_id, 'channelListId': '31-17267', 'firstChannels': 1000, 'after': None, 'currentTime': datetime.datetime.now(timezone.utc).strftime("%Y-%m-%dT%H:%M:%S.%f")[:-3] + "Z", 'thumbnailHeight': 280, 'backgroundHeight': 780, 'backgroundWidth': 1920}, 'query': 'query channelList($profileId: ID!, $firstChannels: Int, $channelListId: ID!, $after: String, $currentTime: Date!) { channelList(id: $channelListId) { channels(first: $firstChannels, after: $after) { edges { node { id title __typename } __typename } __typename } __typename } }'}
        response = req.post('https://web.xploretv.si:8443/sdsmiddleware/A1_Slovenia/graphql/4.0', headers=headers, json=json_data, cookies=cookies)
        try:
            data = response.json()
            for edge in data['data']['channelList']['channels']['edges']:
                ch = edge['node']
                channel = {
                    'Name': ch.get('title', 'Unknown'),
                    'Mode': 'live',
                    'SessionManifest': True,
                    'ManifestScript': f"id={ch.get('id', '')}",
                    'CdmType': 'widevine',
                    'UseCdm': True,
                    'Cdm': f"id={ch.get('id', '')}",
                    'Video': 'best',
                    'OnDemand': True,
                    'SpeedUp': True,
                }
                output['Channels'].append(channel)
            print(json.dumps(output, indent=2))
        except Exception as e:
            print(f"Error: {e}", file=sys.stderr)
            return "error"
    
    elif action == "events":
        output = {'Events': []}
        print(json.dumps(output, indent=2))
    
    elif action == "heartbeat":
        sys.exit()
    
    elif action == "manifest":
        try:
            channel_id = id
            video_url = get_single(channel_id)
            stop_playback()
            if not video_url:
                return "error"
            b64_device_id = base64.b64encode(device_id.encode()).decode()
            output = {
                "Cdn": [{"Name": "default", "ManifestUrl": video_url}],
                "ManifestUrl": video_url,
                "Headers": {"Manifest": {'User-Agent': USER_AGENT}, "Media": {'User-Agent': USER_AGENT}},
                "Heartbeat": {"Url": '', "Params": '', "PeriodMs": 5*60*1000},
                "LicenseUrl": f"https://wvps.a1xploretv.bg:8063/?deviceId={b64_device_id}"
            }
            print(json.dumps(output))
        except Exception as e:
            print(f"Error: {e}", file=sys.stderr)
            return "error"
    
    elif action == "cdm" and cdm == "internal":
        try:
            channel_id = id
            video_url = get_single(channel_id)
            stop_playback()
            if video_url:
                result = do_cdm_internal(challenge)
                if result:
                    print(result)
                else:
                    return "error"
            else:
                return "error"
        except Exception as e:
            print(f"Error: {e}", file=sys.stderr)
            return "error"
    
    elif action == "cdm" and cdm == "external":
        try:
            channel_id = id
            video_url = get_single(channel_id)
            stop_playback()
            if video_url:
                pssh_to_use = pssh if pssh else get_pssh_from_mpd(video_url)
                if pssh_to_use:
                    keys = do_cdm_external(pssh_to_use)
                    if keys:
                        for key in keys:
                            print(key)
                    else:
                        return "error"
                else:
                    return "error"
            else:
                return "error"
        except Exception as e:
            print(f"Error: {e}", file=sys.stderr)
            return "error"
    
    else:
        print("invalid action: " + action, file=sys.stderr)

if do_action() == "error":
    login()
    do_action()