#!/usr/bin/python3
import sys
import os
import base64
import json
import datetime
import pytz
import jwt

# Add parent directory to path for o11 import
sys.path.insert(0, os.path.dirname(os.path.dirname(os.path.abspath(__file__))))
import o11

from bs4 import BeautifulSoup
from pywidevine.cdm import Cdm
from pywidevine.device import Device
from pywidevine.pssh import PSSH

# Parse command line parameters
user = o11.parse_params(sys.argv, 'user')
password = o11.parse_params(sys.argv, 'password')
device = o11.parse_params(sys.argv, 'device')
pin = o11.parse_params(sys.argv, 'pin')

id = o11.parse_params(sys.argv, 'id')
action = o11.parse_params(sys.argv, 'action')

bind = o11.parse_params(sys.argv, 'bind')
proxy = o11.parse_params(sys.argv, 'proxy')
doh = o11.parse_params(sys.argv, 'doh')
worker = o11.parse_params(sys.argv, 'worker')

cdm = o11.parse_params(sys.argv, 'cdm')
drm = o11.parse_params(sys.argv, 'drm')
kid = o11.parse_params(sys.argv, 'kid')
pssh = o11.parse_params(sys.argv, 'pssh')
challenge = o11.parse_params(sys.argv, 'challenge')

heartbeaturl = o11.parse_params(sys.argv, 'heartbeaturl')
heartbeatparams = o11.parse_params(sys.argv, 'heartbeatparams')

# Session setup
o11Session = o11.session(bind=bind, proxy=proxy, worker=worker)
req = o11Session.get_session()
if doh != "":
    o11.dns(doh)

if challenge == "cert":
    challenge = "CAQ="

# Configuration
WVD_PATH = './WVD.wvd'
authFile = '/VirginGo_refresh.txt'
SCRIPT_DIR = os.path.abspath(os.path.dirname(__file__))

USER_AGENT = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36'

token = ''
domain = ''
city_id = ''

def get_auth():
    try:
        with open(SCRIPT_DIR + authFile, 'r') as f:
            return f.read().strip().strip('"')
    except:
        return None

def save_auth(refresh_token):
    with open(SCRIPT_DIR + authFile, 'w') as f:
        f.write(refresh_token)

def do_refresh(refresh_token):
    headers = {'content-type': 'application/json; charset=utf-8', 'origin': 'https://virgintvgo.virginmedia.com', 'referer': 'https://virgintvgo.virginmedia.com/', 'user-agent': USER_AGENT}
    json_data = {'refreshToken': refresh_token}
    response = req.post(f'{domain}/auth-service/v1/authorization/refresh', headers=headers, json=json_data)
    data = response.json()
    return data['accessToken'], data['refreshToken']

def get_city_id(tok):
    decoded = jwt.decode(tok, options={"verify_signature": False})
    cookies = {'ACCESSTOKEN': tok}
    headers = {'accept': '*/*', 'origin': 'https://virgintvgo.virginmedia.com', 'referer': 'https://virgintvgo.virginmedia.com/', 'user-agent': USER_AGENT, 'x-cvp': 'CVP_ANONYMOUS'}
    params = {'with': 'profiles,devices'}
    response = req.get(f'{domain}/eng/web/personalization-service/v1/customer/{decoded["sub"]}', params=params, cookies=cookies, headers=headers)
    return response.json()['cityId']

def login():
    global token, domain, city_id
    print("logging in...", file=sys.stderr)
    
    refresh_token = get_auth()
    if not refresh_token:
        print("No refresh token found. Please add VirginGo refresh token to auth file.", file=sys.stderr)
        save_auth('')
        sys.exit(1)
    
    try:
        decoded = jwt.decode(refresh_token, options={"verify_signature": False})
        region = decoded['sub'].split('_')[-1]
        if region == 'ie':
            domain = 'https://spark-prod-ie.gnp.cloud.virginmediatv.ie'
        elif region == 'gb':
            domain = 'https://spark-prod-gb.gnp.cloud.virgintvgo.virginmedia.com'
        else:
            raise Exception('Unsupported region')
        
        token, new_refresh = do_refresh(refresh_token)
        save_auth(new_refresh)
        city_id = get_city_id(token)
        print("logged in successfully", file=sys.stderr)
        return token
    except Exception as e:
        print(f"Login failed: {e}", file=sys.stderr)
        sys.exit(1)

def get_token():
    global token
    if token:
        return token
    return login()

def find_wv_pssh_offsets(raw):
    offsets = []
    offset = 0
    while True:
        offset = raw.find(b'pssh', offset)
        if offset == -1:
            break
        size = int.from_bytes(raw[offset-4:offset], byteorder='big')
        pssh_offset = offset - 4
        offsets.append(raw[pssh_offset:pssh_offset+size])
        offset += size
    return offsets

def to_pssh(content):
    wv_offsets = find_wv_pssh_offsets(content)
    return [base64.b64encode(wv_offset).decode() for wv_offset in wv_offsets]

def get_pssh_from_mpd(url):
    response = req.get(url, headers={'user-agent': USER_AGENT})
    location = response.url
    soup = BeautifulSoup(response.content, features="xml")
    content_protections = soup.findAll('ContentProtection')
    for cp in content_protections:
        if cp.get('schemeIdUri') == 'urn:uuid:edef8ba9-79d6-4ace-a3c8-27dcd51d21ed':
            if cp.find('cenc:pssh'):
                return cp.find('cenc:pssh').text
    try:
        media = soup.find('SegmentTemplate')['media']
        segment_time = soup.find('S')['t']
        representation = soup.find('Representation')
        rep_id = representation['id']
        loc_parts = location.split('/')
        loc_parts.pop()
        init_url = '/'.join(loc_parts) + '/' + media.replace('$RepresentationID$', rep_id).replace('$Time$', segment_time)
        init_response = req.get(init_url, headers={'user-agent': USER_AGENT})
        return to_pssh(init_response.content)[0]
    except:
        return None

def get_streaming_token(channel_id):
    decoded = jwt.decode(token, options={"verify_signature": False})
    cookies = {'ACCESSTOKEN': token}
    headers = {'origin': 'https://virgintvgo.virginmedia.com', 'referer': 'https://virgintvgo.virginmedia.com/', 'user-agent': USER_AGENT}
    params = {'channelId': channel_id, 'assetType': 'Orion-DASH'}
    response = req.post(f'{domain}/eng/web/session-service/session/v2/web-desktop/customers/{decoded["sub"]}/live', params=params, cookies=cookies, headers=headers)
    try:
        data = response.json()
        return response.headers['X-Streaming-Token'], data['drmContentId']
    except:
        return None, None

def delete_streaming_session(streaming_token):
    cookies = {'ACCESSTOKEN': token}
    headers = {'origin': 'https://virgintvgo.virginmedia.com', 'referer': 'https://virgintvgo.virginmedia.com/', 'user-agent': USER_AGENT, 'x-streaming-token': streaming_token}
    req.delete(f'{domain}/eng/web/session-manager/license/token', cookies=cookies, headers=headers)

def do_cdm_internal(challenge_b64, streaming_token, content_id):
    cookies = {'ACCESSTOKEN': token}
    lic_headers = {'devicename': 'Google%20Chrome', 'origin': 'https://virgintvgo.virginmedia.com', 'referer': 'https://virgintvgo.virginmedia.com/', 'user-agent': USER_AGENT, 'x-drm-schemeid': 'edef8ba9-79d6-4ace-a3c8-27dcd51d21ed', 'x-streaming-token': streaming_token, 'content-type': 'application/octet-stream'}
    params = {'ContentId': content_id}
    response = req.post(f'{domain}/eng/web/session-manager/license', params=params, headers=lic_headers, data=base64.b64decode(challenge_b64), cookies=cookies)
    response_b64 = str(base64.b64encode(response.content), 'ascii')
    if response_b64.startswith('CA'):
        return response_b64
    return None

def do_cdm_external(pssh_b64, streaming_token, content_id):
    try:
        pssh_obj = PSSH(pssh_b64)
        device_obj = Device.load(WVD_PATH)
        cdm_obj = Cdm.from_device(device_obj)
        session_id = cdm_obj.open()
        challenge_data = cdm_obj.get_license_challenge(session_id, pssh_obj)
        cookies = {'ACCESSTOKEN': token}
        lic_headers = {'devicename': 'Google%20Chrome', 'origin': 'https://virgintvgo.virginmedia.com', 'referer': 'https://virgintvgo.virginmedia.com/', 'user-agent': USER_AGENT, 'x-drm-schemeid': 'edef8ba9-79d6-4ace-a3c8-27dcd51d21ed', 'x-streaming-token': streaming_token, 'content-type': 'application/octet-stream'}
        params = {'ContentId': content_id}
        licence = req.post(f'{domain}/eng/web/session-manager/license', params=params, headers=lic_headers, data=challenge_data, cookies=cookies)
        cdm_obj.parse_license(session_id, licence.content)
        keys = [f"{key.kid.hex}:{key.key.hex()}" for key in cdm_obj.get_keys(session_id) if key.type != 'SIGNING']
        cdm_obj.close(session_id)
        return keys
    except Exception as e:
        print(f'CDM external failed: {e}', file=sys.stderr)
        return None

def do_action():
    get_token()
    
    if action == "login":
        login()
        sys.exit()
    
    if action == "channels":
        output = {'Channels': []}
        cookies = {'ACCESSTOKEN': token}
        headers = {'origin': 'https://virgintvgo.virginmedia.com', 'referer': 'https://virgintvgo.virginmedia.com/', 'user-agent': USER_AGENT}
        params = {'cityId': city_id, 'language': 'en', 'productClass': 'Orion-DASH'}
        response = req.get(f'{domain}/eng/web/linear-service/v2/channels', params=params, headers=headers, cookies=cookies)
        try:
            data = response.json()
            for ch in data:
                if ch.get('locator'):
                    channel = {
                        'Name': ch.get('name', 'Unknown'),
                        'Mode': 'live',
                        'SessionManifest': True,
                        'ManifestScript': f"id={ch.get('id', '')}&loc={ch.get('locator', '')}",
                        'CdmType': 'widevine',
                        'UseCdm': True,
                        'Cdm': f"id={ch.get('id', '')}&loc={ch.get('locator', '')}",
                        'Video': 'best',
                        'OnDemand': True,
                        'SpeedUp': True,
                    }
                    output['Channels'].append(channel)
            print(json.dumps(output, indent=2))
        except Exception as e:
            print(f"Error: {e}", file=sys.stderr)
            return "error"
    
    elif action == "events":
        output = {'Events': []}
        print(json.dumps(output, indent=2))
    
    elif action == "heartbeat":
        sys.exit()
    
    elif action == "manifest":
        try:
            params_dict = {}
            for param in id.split('&'):
                if '=' in param:
                    k, v = param.split('=', 1)
                    params_dict[k] = v
            channel_id = params_dict.get('id', '')
            locator = params_dict.get('loc', '')
            
            streaming_token, content_id = get_streaming_token(channel_id)
            if not streaming_token:
                return "error"
            video_url = locator.replace('/live/', f'/live,vxttoken={streaming_token}/')
            output = {
                "Cdn": [{"Name": "default", "ManifestUrl": video_url}],
                "ManifestUrl": video_url,
                "Headers": {"Manifest": {'User-Agent': USER_AGENT}, "Media": {'User-Agent': USER_AGENT}},
                "Heartbeat": {"Url": '', "Params": '', "PeriodMs": 5*60*1000},
                "StreamingToken": streaming_token,
                "ContentId": content_id
            }
            print(json.dumps(output))
        except Exception as e:
            print(f"Error: {e}", file=sys.stderr)
            return "error"
    
    elif action == "cdm" and cdm == "internal":
        try:
            params_dict = {}
            for param in id.split('&'):
                if '=' in param:
                    k, v = param.split('=', 1)
                    params_dict[k] = v
            channel_id = params_dict.get('id', '')
            locator = params_dict.get('loc', '')
            streaming_token, content_id = get_streaming_token(channel_id)
            if streaming_token:
                result = do_cdm_internal(challenge, streaming_token, content_id)
                delete_streaming_session(streaming_token)
                if result:
                    print(result)
                else:
                    return "error"
            else:
                return "error"
        except Exception as e:
            print(f"Error: {e}", file=sys.stderr)
            return "error"
    
    elif action == "cdm" and cdm == "external":
        try:
            params_dict = {}
            for param in id.split('&'):
                if '=' in param:
                    k, v = param.split('=', 1)
                    params_dict[k] = v
            channel_id = params_dict.get('id', '')
            locator = params_dict.get('loc', '')
            streaming_token, content_id = get_streaming_token(channel_id)
            if streaming_token:
                video_url = locator.replace('/live/', f'/live,vxttoken={streaming_token}/')
                pssh_to_use = pssh if pssh else get_pssh_from_mpd(video_url)
                if pssh_to_use:
                    keys = do_cdm_external(pssh_to_use, streaming_token, content_id)
                    delete_streaming_session(streaming_token)
                    if keys:
                        for key in keys:
                            print(key)
                    else:
                        return "error"
                else:
                    delete_streaming_session(streaming_token)
                    return "error"
            else:
                return "error"
        except Exception as e:
            print(f"Error: {e}", file=sys.stderr)
            return "error"
    
    else:
        print("invalid action: " + action, file=sys.stderr)

if do_action() == "error":
    login()
    do_action()