<?php

// (c) Copyright by authors of the Tiki Wiki CMS Groupware Project
//
// All Rights Reserved. See copyright.txt for details and a complete list of authors.
// Licensed under the GNU LESSER GENERAL PUBLIC LICENSE. See license.txt for details.
// $Id$

class CCLiteLib extends TikiDb_Bridge
{
    // member vars (defaults from prefs)
    private $gateway;
    private $key_hash;
    private $registries;
    private $currencies;
    private $merchant_user;

    public function __construct()
    {
        global $prefs;
        $access = TikiLib::lib('access');
        $access->check_feature('payment_feature');

        // need to add a check for empty, not just y/n - TODO one day
        //$access->check_feature('payment_cclite_registries');
        //$access->check_feature('payment_cclite_gateway');
        //$access->check_feature('payment_cclite_merchant_key');

        $this->gateway = rtrim($prefs['payment_cclite_gateway'], '/');
        $this->registries = unserialize($prefs['payment_cclite_registries']);
        $this->currencies = unserialize($prefs['payment_cclite_currencies']);
        $this->merchant_user = $prefs['payment_cclite_merchant_user'];

        if (
            ($prefs['payment_cclite_mode'] == 'test' && $_SERVER['SERVER_ADDR'] != '127.0.0.1' && $_SERVER['SERVER_ADDR'] != '::1') ||
                    empty($prefs['payment_cclite_test_ip'])
        ) {
            $ip = $_SERVER['SERVER_ADDR'];
        } else {
            // debug SERVER_ADDR for local testing on NAT'ed server
            $ip = $prefs['payment_cclite_test_ip'];
        }
        $api_hash = hash($prefs['payment_cclite_hashing_algorithm'], ($prefs['payment_cclite_merchant_key'] . $ip), 'true');
        $this->key_hash = CCLiteLib::urlsafe_b64encode($api_hash);
    }

    public function get_registries()
    {
        return $this->registries;
    }

    public function get_registry()
    {
        if (! empty($this->registries)) {
            return $this->registries[0];    // default if not specified in plugins etc
        } else {
            Feedback::error(tra('No registries specified in admin/payment/cclite.'));
        }
    }

    public function get_currencies()
    {
        return $this->currencies;
    }

    /**
     * @param string $reg Registry to find currency for (uses registries[0] if not specified)
     */
    public function get_currency($reg = '')
    {
        global $prefs;

        if (empty($reg)) {
            $reg = $this->get_registry();
        }

        $i = array_search($reg, $this->registries);

        if ($i !== false) {
            return $this->currencies[$i];
        } else {
            return $prefs['payment_currency'];
        }
    }

    public function get_invoice($ipn_data)
    {
        return isset($ipn_data['invoice']) ? $ipn_data['invoice'] : 0;
    }

    public function get_amount($ipn_data)
    {
        return $ipn_data['mc_gross'];
    }

    public function is_valid($ipn_data, $payment_info)
    {
        global $prefs;

        if (! is_array($payment_info)) {
            return false;
        }

        // Skip other events
        if ($ipn_data['payment_status'] != 'Completed') {
            return false;
        }

        // Make sure it is addressed to the right account
        if ($ipn_data['receiver_email'] != $prefs['payment_cclite_business']) {
            return false;
        }

        // Require same currency
        if ($ipn_data['mc_currency'] != $payment_info['currency']) {
            return false;
        }

        // Skip duplicate translactions
        foreach ($payment_info['payments'] as $payment) {
            if ($payment['type'] == 'cclite') {
                if ($payment['details']['txn_id'] == $ipn_data['txn_id']) {
                    return false;
                }
            }
        }

        return true;
    }

    /**
     * This function just calls $paymentlib->enter_payment() which then triggers the behaviours
     * The behaviours the do the actual transfer of currency
     *
     * @param int $invoice
     * @param decimal $amount
     * @param string $currency
     * @param string $registry
     * @param string $source_user
     *
     * @return string result from cclite
     */
    public function pay_invoice($invoice, $amount, $currency = '', $registry = '', $source_user = '')
    {
        global $user, $prefs;
        $tikilib = TikiLib::lib('tiki');
        $paymentlib = TikiLib::lib('payment');

        $msg = tr('Cclite payment initiated on %0', $tikilib->get_short_datetime($tikilib->now));

        $paymentlib->enter_payment($invoice, $amount, 'cclite', ['info' => $msg]);

        return $msg;
    }

    /**
     * Pays $amount from logged in (or source_user TODO) user to manager account
     *
     * @param int $invoice
     * @param decimal $amount
     * @param string $currency
     * @param string $registry
     * @param string $destination_user
     *
     * @return string result from cclite
     */
    public function pay_user($amount, $currency = '', $registry = '', $destination_user = '', $source_user = '')
    {
        global $user, $prefs;
        $paymentlib = TikiLib::lib('payment');
        if (empty($source_user)) {
            $source_user = $this->merchant_user;
        }

        $res = $this->cclite_send_request('pay', $destination_user, $registry, $amount, $currency, $source_user);

        $r = $this->cclite_send_request('logoff');

        return $res;
    }

    /**
     * Adapted from cclite 0.7 drupal gateway (example)
     *
     * @command     recent|summary|pay|adduser|modifyuser|debit
     * @other_user  destination for payment - uses merchant_user if empty
     * @registry    cclite registry
     * @amount      amount (decimal/float for cost, or email for adduser command)
     * @currency    currency (same as currency "name" in cclite (not "code" yet)
     *              defaults to registry currency
     * @main_user   source of payment - uses logged-in user if empty
     *
     * @return      result from cclite server (html hopefully)
     */

    public function cclite_send_request($command, $other_user = '', $registry = '', $amount = 0, $currency = '', $main_user = '')
    {
        global $user, $prefs;

        if (empty($other_user)) {
            $other_user = $this->merchant_user;
        }

        if (empty($main_user)) {
            $main_user = $user;
        }

        if (empty($registry)) {
            $registry = $this->get_registry();
        }

        if (empty($currency)) {
            $currency = $this->get_currency($registry);
        }

        $result = '';

        // construct the payment url from configuration information
        $cclite_base_url = $this->gateway;
        $REST_url = '';
        $ch = curl_init();
        if ($command != 'adduser') {
            $logon_result = $this->cclite_remote_logon($main_user, $registry);
            if ($logon_result[0] != 'failed' && strlen($logon_result[1])) {
                curl_setopt($ch, CURLOPT_COOKIE, $logon_result[1]);
            } else {
                return tr('Connection to Cclite server %0 failed for %1<br />"%2"', $cclite_base_url, $main_user, $logon_result[1]);
            }
        }
        curl_setopt($ch, CURLOPT_AUTOREFERER, true);
        //curl_setopt($ch, CURLOPT_COOKIESESSION, true);
        curl_setopt($ch, CURLOPT_FAILONERROR, false);
        curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
        curl_setopt($ch, CURLOPT_FRESH_CONNECT, false);
        curl_setopt($ch, CURLOPT_HEADER, false);
        curl_setopt($ch, CURLOPT_POST, true);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
        curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 30);

        //curl_setopt($ch, CURLOPT_VERBOSE, true);

        // this switch statement needs to map to the Rewrites in the cclite .htaccess file, so if you're
        // doing something custom-made, you need to think about:
        // -here-, .htaccess and various bits of login in the cclite motor
        switch ($command) {
            case 'recent':
                $REST_url = "$cclite_base_url/recent/transactions";
                break;

            case 'summary':
                $REST_url = "$cclite_base_url/summary";
                break;

            case 'pay':
                $REST_url = "$cclite_base_url/pay/$other_user/$registry/$amount/$currency";
                break;

            case 'adduser':
                $REST_url = "$cclite_base_url/direct/adduser/$registry/" . urlencode($other_user . '/' . $amount);
                curl_setopt($ch, CURLOPT_COOKIE, 'merchant_key_hash=' . $this->key_hash);
                break;

            case 'modifyuser':
                // non-working at present...
                $REST_url = "$cclite_base_url/direct/modifyuser/$registry/" . urlencode($other_user . '/' . $amount);
                curl_setopt($ch, CURLOPT_COOKIE, 'merchant_key_hash=' . $this->key_hash);
                break;

            case 'debit':
                // non-working at present...
                $REST_url = "$cclite_base_url/debit/$other_user/$registry/$amount/$currency";
                break;

            case 'logoff':
                // non-working at present...
                $REST_url = "$cclite_base_url/logoff";
                break;

            default:
                return "No cclite function selected use <a title=\"cclite passthrough help\" href=\"/$cclite_base_url/help\">help</a>" ;
        }

        curl_setopt($ch, CURLOPT_URL, $REST_url);
        $result = curl_exec($ch);
        curl_close($ch);
        return strip_tags($result);
    }

    /**
     * Modified from cclite 0.7 gateway various examples
     *
     * @return multitype:mixed string |multitype:string
     */
    private function cclite_remote_logon($username = '', $registry = '')
    {
        global $user, $prefs;
        $userlib = TikiLib::lib('user');

        if (empty($username)) {
            $username = $user;
        }

        // not worth trying if no user name
        if (! empty($username)) {
            if (empty($registry)) {
                $registry = $this->get_registry();
            }
            $cclite_base_url = $this->gateway;

            // payment url from configuration information
            $REST_url = "$cclite_base_url/logon/$username/$registry";   // /$api_hash

            $ch = curl_init();
            curl_setopt($ch, CURLOPT_AUTOREFERER, true);
            curl_setopt($ch, CURLOPT_COOKIE, 'merchant_key_hash=' . $this->key_hash);
            curl_setopt($ch, CURLOPT_COOKIESESSION, true);
            curl_setopt($ch, CURLOPT_FAILONERROR, true);
            curl_setopt($ch, CURLOPT_FOLLOWLOCATION, false);
            curl_setopt($ch, CURLOPT_FRESH_CONNECT, true);
            curl_setopt($ch, CURLOPT_HEADER, true);
            curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
            curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 30);
            curl_setopt($ch, CURLOPT_URL, $REST_url);

//          curl_setopt($ch, CURLOPT_VERBOSE, true);

            $logon = curl_exec($ch);
            curl_close($ch);

            $results = [];  // for response & cookies on success
            $err_msg = '';      // error message on failure

            if ($logon) {
                // e.g. login failed for jonny_tiki at c2c1:  <a href="http://c2c.ourproject.org/cgi-bin/cclite.cgi">Try again?</a>
                if (preg_match('/^(login failed for ' . $username . '.*' . $registry . '[^<]*)/mi', $logon, $results)) {    // no user there?
                    $email = $userlib->get_user_email($username);
                    if ($email) {   // required
                        $res = $this->cclite_send_request('adduser', $username, $registry, $email); // not currently working cclite 0.7.0
                        if ($res && ! preg_match('/404 Not Found/', $res)) {                            // seems to return a 404 :(
                            $logon = curl_exec($ch);    // retry login
                        } else {
                            $err_msg = trim($results[0]);
                            $logon = 'failed';
                        }
                    }
                }

                // e.g. test_user at test_reg is not active: confirm or contact the administrator <a href="http://c2c.ourproject.org/cgi-bin/cclite.cgi">Try again?</a>
                // check for other errors & remove cclite link
                if (preg_match('/^(.*?' . $username . '.*' . $registry . '[^<]*)/mi', $logon, $results)) {
                    $err_msg = trim($results[0]);
                    $logon = 'failed';  // error in $results[0]
                } elseif (preg_match('/HTTP\/1.1 302/mis', $logon) && preg_match('/<BODY.*?>(.*)<\/BODY>/mis', $logon, $results)) {
                    $err_msg = trim(strip_tags($results[0], '<br />'));
                    //$logon = 'failed';
                }
            }

            if ($logon && $logon != 'failed') {
                preg_match_all('|Set-Cookie: (.*);|U', $logon, $results);
                $cookies = implode("; ", $results[1]);
                return [$logon, $cookies];
            }
        } else {
            $err_msg = 'No result from cclite server.';
        }

        return ['failed', $err_msg];
    }

    // used to transport merchant key hash - probably duplicates of tiki fns REFACTOR?
    public static function urlsafe_b64encode($string)
    {
        $data = base64_encode($string);
        $data = str_replace(['+', '/', '='], ['-', '_', ''], $data);
        return $data;
    }

    public static function urlsafe_b64decode($string)
    {
        $data = str_replace(['-', '_'], ['+', '/'], $string);
        $mod4 = strlen($data) % 4;
        if ($mod4) {
            $data .= substr('====', $mod4);
        }
        return base64_decode($data);
    }
}

global $cclitelib;
$cclitelib = new CCLiteLib();