#!/usr/bin/python3
import sys
import os
import base64
import json
import datetime
import pytz
import hashlib
import hmac
import secrets
import string

# Add parent directory to path for o11 import
sys.path.insert(0, os.path.dirname(os.path.dirname(os.path.abspath(__file__))))
import o11

from bs4 import BeautifulSoup
from pywidevine.cdm import Cdm
from pywidevine.device import Device
from pywidevine.pssh import PSSH

# Parse command line parameters
user = o11.parse_params(sys.argv, 'user')
password = o11.parse_params(sys.argv, 'password')
device = o11.parse_params(sys.argv, 'device')
pin = o11.parse_params(sys.argv, 'pin')

id = o11.parse_params(sys.argv, 'id')
action = o11.parse_params(sys.argv, 'action')

bind = o11.parse_params(sys.argv, 'bind')
proxy = o11.parse_params(sys.argv, 'proxy')
doh = o11.parse_params(sys.argv, 'doh')
worker = o11.parse_params(sys.argv, 'worker')

cdm = o11.parse_params(sys.argv, 'cdm')
drm = o11.parse_params(sys.argv, 'drm')
kid = o11.parse_params(sys.argv, 'kid')
pssh = o11.parse_params(sys.argv, 'pssh')
challenge = o11.parse_params(sys.argv, 'challenge')

heartbeaturl = o11.parse_params(sys.argv, 'heartbeaturl')
heartbeatparams = o11.parse_params(sys.argv, 'heartbeatparams')

platform = o11.parse_params(sys.argv, 'platform')

# Session setup
o11Session = o11.session(bind=bind, proxy=proxy, worker=worker)
req = o11Session.get_session()
if doh != "":
    o11.dns(doh)

if challenge == "cert":
    challenge = "CAQ="

# Configuration
WVD_PATH = './WVD.wvd'
authFile = '/SolcoTV_auth.json'
SCRIPT_DIR = os.path.abspath(os.path.dirname(__file__))

USER_AGENT = 'okhttp/4.9.1 Android/9'
API_ENDPOINT = 'tvapi.solocoo.tv'

token = ''
sso_token = ''
device_id = ''

def get_auth():
    try:
        return json.load(open(SCRIPT_DIR + authFile))
    except:
        return None

def save_auth(auth_data):
    json.dump(auth_data, open(SCRIPT_DIR + authFile, 'w'), indent=2)

def get_device_info(dev_id):
    data = {"deviceModel": "samsung SM-G955F", "deviceOem": "samsung", "devicePrettyName": "Galaxy S8+", "deviceSerial": dev_id, "deviceType": "AndroidPhone", "environment": "", "featureLevel": 4, "osVersion": "Android 9 (28)", "appVersion": "12.7.1"}
    if platform == 'skylinkcz':
        data['brand'] = 'slcz'
    elif platform == 'skylinksk':
        data['brand'] = 'slsk'
    elif platform == 'vlaanderen':
        data['brand'] = 'tvv'
    elif platform == 'focussat':
        data['brand'] = 'fsro'
    elif platform == 'directone':
        data['brand'] = 'upchu'
    elif platform == 'canalat':
        data['brand'] = 'm7cp'
    elif platform == 'canaldigitaal':
        data['brand'] = 'm7cp'
    elif platform == 'canalplushu':
        data['brand'] = 'm7cp'
    else:
        data['brand'] = 'slcz'
    return data

def get_token_from_sso(sso, dev_id):
    headers = {'authority': API_ENDPOINT, 'accept': 'application/json, text/plain, */*', 'content-type': 'application/json', 'user-agent': USER_AGENT}
    data = get_device_info(dev_id)
    data['ssoToken'] = sso
    data = json.dumps(data).replace(' ', '')
    response = req.post(f'https://{API_ENDPOINT}/v1/session', headers=headers, data=data)
    data = response.json()
    try:
        return data['token'], data['ssoToken']
    except:
        return None, None

def login():
    global token, sso_token, device_id
    print("logging in...", file=sys.stderr)
    
    auth = get_auth()
    if not auth or 'sso_token' not in auth:
        print("No auth found. Please add SolcoTV sso_token and device_id to auth file.", file=sys.stderr)
        save_auth({'sso_token': '', 'device_id': ''})
        sys.exit(1)
    
    try:
        device_id = auth['device_id']
        new_token, new_sso = get_token_from_sso(auth['sso_token'], device_id)
        if new_token and new_sso:
            save_auth({'sso_token': new_sso, 'device_id': device_id})
            token = new_token
            sso_token = new_sso
            print("logged in successfully", file=sys.stderr)
            return token
        else:
            print("Login failed - token refresh failed", file=sys.stderr)
            sys.exit(1)
    except Exception as e:
        print(f"Login failed: {e}", file=sys.stderr)
        sys.exit(1)

def get_token_val():
    global token
    if token:
        return token
    return login()

def get_pssh_from_mpd(url):
    response = req.get(url, headers={'Accept': '*/*', 'User-Agent': USER_AGENT})
    content_protections = BeautifulSoup(response.content, features="xml").findAll('ContentProtection')
    for cp in content_protections:
        if cp.get('schemeIdUri', '').lower() == 'urn:uuid:edef8ba9-79d6-4ace-a3c8-27dcd51d21ed':
            pssh_elem = cp.find('cenc:pssh')
            if pssh_elem:
                return pssh_elem.text
    return None

def get_single(channel_id):
    headers = {'authority': API_ENDPOINT, 'accept': 'application/json, text/plain, */*', 'authorization': 'Bearer ' + token, 'content-type': 'application/json', 'user-agent': USER_AGENT}
    data = {"player": {"name": "RxPlayer", "version": "3.29.0", "capabilities": {"mediaTypes": ["DASH"], "drmSystems": ["Widevine"], "smartLib": True}}}
    data = json.dumps(data).replace(' ', '')
    response = req.post(f'https://{API_ENDPOINT}/v1/assets/{channel_id}/play', headers=headers, data=data)
    try:
        data = response.json()
        return data['url'], data['drm']['licenseUrl']
    except:
        return None, None

def do_cdm_internal(challenge_b64, lic_url):
    headers = {'authority': 'license.solocoo.tv', 'accept': '*/*', 'content-type': 'application/octet-stream', 'user-agent': USER_AGENT}
    response = req.post(lic_url, headers=headers, data=base64.b64decode(challenge_b64))
    response_b64 = str(base64.b64encode(response.content), 'ascii')
    if response_b64.startswith('CA'):
        return response_b64
    return None

def do_cdm_external(pssh_b64, lic_url):
    try:
        pssh_obj = PSSH(pssh_b64)
        device_obj = Device.load(WVD_PATH)
        cdm_obj = Cdm.from_device(device_obj)
        session_id = cdm_obj.open()
        challenge_data = cdm_obj.get_license_challenge(session_id, pssh_obj)
        headers = {'authority': 'license.solocoo.tv', 'accept': '*/*', 'content-type': 'application/octet-stream', 'user-agent': USER_AGENT}
        licence = req.post(lic_url, headers=headers, data=challenge_data)
        cdm_obj.parse_license(session_id, licence.content)
        keys = [f"{key.kid.hex}:{key.key.hex()}" for key in cdm_obj.get_keys(session_id) if key.type != 'SIGNING']
        cdm_obj.close(session_id)
        return keys
    except Exception as e:
        print(f'CDM external failed: {e}', file=sys.stderr)
        return None

def do_action():
    get_token_val()
    
    if action == "login":
        login()
        sys.exit()
    
    if action == "channels":
        output = {'Channels': []}
        headers = {'authority': API_ENDPOINT, 'accept': 'application/json, text/plain, */*', 'authorization': 'Bearer ' + token, 'user-agent': USER_AGENT}
        response = req.get(f'https://{API_ENDPOINT}/v1/bouquet', headers=headers)
        try:
            data = response.json()
            for ch in data.get('channels', []):
                if len(ch.get('sources', [])) > 0:
                    channel = {
                        'Name': ch.get('assetInfo', {}).get('title', 'Unknown'),
                        'Mode': 'live',
                        'SessionManifest': True,
                        'ManifestScript': f"id={ch.get('assetInfo', {}).get('id', '')}",
                        'CdmType': 'widevine',
                        'UseCdm': True,
                        'Cdm': f"id={ch.get('assetInfo', {}).get('id', '')}",
                        'Video': 'best',
                        'OnDemand': True,
                        'SpeedUp': True,
                    }
                    output['Channels'].append(channel)
            print(json.dumps(output, indent=2))
        except Exception as e:
            print(f"Error: {e}", file=sys.stderr)
            return "error"
    
    elif action == "events":
        output = {'Events': []}
        print(json.dumps(output, indent=2))
    
    elif action == "heartbeat":
        sys.exit()
    
    elif action == "manifest":
        try:
            channel_id = id
            video_url, lic_url = get_single(channel_id)
            if not video_url:
                return "error"
            output = {
                "Cdn": [{"Name": "default", "ManifestUrl": video_url}],
                "ManifestUrl": video_url,
                "Headers": {"Manifest": {'User-Agent': USER_AGENT}, "Media": {'User-Agent': USER_AGENT}},
                "Heartbeat": {"Url": '', "Params": '', "PeriodMs": 5*60*1000},
                "LicenseUrl": lic_url
            }
            print(json.dumps(output))
        except Exception as e:
            print(f"Error: {e}", file=sys.stderr)
            return "error"
    
    elif action == "cdm" and cdm == "internal":
        try:
            channel_id = id
            video_url, lic_url = get_single(channel_id)
            if lic_url:
                result = do_cdm_internal(challenge, lic_url)
                if result:
                    print(result)
                else:
                    return "error"
            else:
                return "error"
        except Exception as e:
            print(f"Error: {e}", file=sys.stderr)
            return "error"
    
    elif action == "cdm" and cdm == "external":
        try:
            channel_id = id
            video_url, lic_url = get_single(channel_id)
            if lic_url:
                pssh_to_use = pssh if pssh else get_pssh_from_mpd(video_url)
                if pssh_to_use:
                    keys = do_cdm_external(pssh_to_use, lic_url)
                    if keys:
                        for key in keys:
                            print(key)
                    else:
                        return "error"
                else:
                    return "error"
            else:
                return "error"
        except Exception as e:
            print(f"Error: {e}", file=sys.stderr)
            return "error"
    
    else:
        print("invalid action: " + action, file=sys.stderr)

if do_action() == "error":
    login()
    do_action()
