#!/usr/bin/python3
import sys
import os
import o11
import json
import datetime
import pytz
import base64
import urllib.parse
from pywidevine.cdm import Cdm
from pywidevine.device import Device
from pywidevine.pssh import PSSH
from bs4 import BeautifulSoup

WVD_PATH = './WVD.wvd'

user = o11.parse_params(sys.argv, 'user')
password = o11.parse_params(sys.argv, 'password')

id = o11.parse_params(sys.argv, 'id')
action = o11.parse_params(sys.argv, 'action')

bind = o11.parse_params(sys.argv, 'bind')
proxy = o11.parse_params(sys.argv, 'proxy')
doh = o11.parse_params(sys.argv, 'doh')
worker = o11.parse_params(sys.argv, 'worker')

cdm_param = o11.parse_params(sys.argv, 'cdm')
challenge = o11.parse_params(sys.argv, 'challenge')

o11Session = o11.session(bind=bind, proxy=proxy, worker=worker)
req = o11Session.get_session()
if doh != "":
    o11.dns(doh)

if challenge == "cert":
    challenge = "CAQ="

authFile = '/CanalPlusAF_' + user + '.tokens'
user_agent = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36'

user_key_id = '_acbpff1ya'
device_key_id = '1629342960819-9acbegg0d451'

def do_cdm_external(pssh_data, epg_id, live_token, loc):
    pssh_obj = PSSH(pssh_data)
    device_obj = Device.load(WVD_PATH)
    cdm_obj = Cdm.from_device(device_obj)
    session_id = cdm_obj.open()
    challenge_data = cdm_obj.get_license_challenge(session_id, pssh_obj)
    payload = base64.b64encode(challenge_data).decode()
    lic_headers = {'accept': 'application/json, text/plain, */*', 'content-type': 'application/json', 'origin': 'https://www.canalplus.com', 'referer': 'https://www.canalplus.com/', 'user-agent': user_agent}
    data = json.dumps({'ServiceRequest': {'InData': {'EpgId': epg_id, 'LiveToken': live_token, 'UserKeyId': user_key_id, 'DeviceKeyId': device_key_id, 'ChallengeInfo': payload, 'Mode': 'MKPL'}}})
    licence = req.post(f'https://ltv.slc-app-aka.prod.bo.canal.canalplustech.pro/api/V4/zones/cp{loc}/devices/31/apps/1/jobs/GetLicence', headers=lic_headers, data=data)
    response = licence.json()
    cdm_obj.parse_license(session_id, base64.b64decode(response['ServiceResponse']['OutData']['LicenseInfo']))
    keys = [f"{key.kid.hex}:{key.key.hex()}" for key in cdm_obj.get_keys(session_id) if key.type != 'SIGNING']
    cdm_obj.close(session_id)
    return keys

def get_pssh_from_mpd(url):
    headers = {'origin': 'https://www.canalplus.com', 'referer': 'https://www.canalplus.com/', 'user-agent': user_agent}
    response = req.get(url, headers=headers)
    for cp in BeautifulSoup(response.content, features="xml").findAll('ContentProtection'):
        if cp.get('schemeIdUri', '').lower() == 'urn:uuid:edef8ba9-79d6-4ace-a3c8-27dcd51d21ed':
            pssh_tag = cp.find('cenc:pssh')
            if pssh_tag:
                return pssh_tag.text
    return None

def get_channels(pass_token, loc):
    headers = {'accept': 'application/json, text/plain, */*', 'content-type': 'application/json', 'origin': 'https://www.canalplus.com', 'referer': 'https://www.canalplus.com/', 'user-agent': user_agent}
    data = json.dumps({'ServiceRequest': {'InData': {'UseRmuTokenPlaceHolder': True, 'PassData': {'Id': 0, 'Token': pass_token}, 'UserKeyId': user_key_id, 'DeviceKeyId': device_key_id, 'PDSData': {'GroupTypes': '1;2;4'}}}})
    response = req.post(f'https://ltv.slc-app-aka.prod.bo.canal.canalplustech.pro/api/V4/zones/cp{loc}/devices/3/apps/1/jobs/InitLiveTV', headers=headers, data=data)
    out_data = response.json()['ServiceResponse']['OutData']
    live_token = out_data['LiveToken']
    rmu_token = out_data['RMUToken']
    channels = []
    for cg in out_data['PDS']['ChannelsGroups']['ChannelsGroup']:
        channels += cg['Channels']
    return live_token, [c for c in channels if c['AccessRights']['NoAccess'] == 'false'], rmu_token

def get_channel_link(url, rmu_token):
    headers = {'accept': 'application/json, text/plain, */*', 'origin': 'https://www.canalplus.com', 'referer': 'https://www.canalplus.com/', 'user-agent': user_agent}
    response = req.get(url.split('?')[0], params={'token': rmu_token}, headers=headers)
    return response.json().get('primary', {}).get('src', '')

def pass_token_request(pass_id, loc, region):
    headers = {'accept': '*/*', 'content-type': 'application/x-www-form-urlencoded', 'origin': 'https://www.canalplus.com', 'referer': 'https://www.canalplus.com/', 'user-agent': user_agent}
    data = {'portailId': 'vbdTj7eb6aM.', 'media': 'Web', 'vect': 'INTERNET', 'noCache': 'false', 'passId': pass_id, 'passIdType': 'pass'}
    response = req.post(f'https://pass-api-v2.canal-plus.com/provider/services/cp{loc}-{region}/public/createToken', headers=headers, data=data)
    return response.json().get('response', {}).get('passToken', '')

def get_loc(region):
    locs = {'FR': 'fra', 'PL': 'pol', 'GP': 'ant', 'MQ': 'ant', 'RE': 'reu', 'SN': 'afr', 'CG': 'afr', 'CM': 'afr'}
    return locs.get(region, 'afr')

def login():
    print("Please provide passId manually in the tokens file", file=sys.stderr)
    print("Login to Canal+ website, go to DevTools -> Application -> Cookies and copy 'passId' value", file=sys.stderr)
    sys.exit(1)

def do_action():
    if action == "login":
        login()
        sys.exit()
    try:
        auth = json.load(open(os.path.abspath(os.path.dirname(__file__)) + authFile))
        pass_id = auth['passId']
        region = pass_id[:2]
        loc = get_loc(region)
        pass_token = pass_token_request(pass_id, loc, region)
        live_token, channels, rmu_token = get_channels(pass_token, loc)
    except:
        return "error"

    if action == "channels":
        output = {'Channels': []}
        for c in channels:
            output['Channels'].append({'Name': c['Name'], 'Mode': "live", 'SessionManifest': True, 'ManifestScript': 'epgId=' + c['EpgId'] + '&wsxUrl=' + urllib.parse.quote_plus(c['WSXUrl']), 'CdmType': "widevine", 'UseCdm': True, 'Cdm': 'epgId=' + c['EpgId'] + '&wsxUrl=' + urllib.parse.quote_plus(c['WSXUrl']), 'Video': 'best'})
        print(json.dumps(output, indent=2))
    elif action == "events":
        output = {'Events': []}
        for c in channels:
            output['Events'].append({'Name': c['Name'], 'Mode': "live", 'SessionManifest': True, 'ManifestScript': 'epgId=' + c['EpgId'] + '&wsxUrl=' + urllib.parse.quote_plus(c['WSXUrl']), 'CdmType': "widevine", 'UseCdm': True, 'Cdm': 'epgId=' + c['EpgId'] + '&wsxUrl=' + urllib.parse.quote_plus(c['WSXUrl']), 'Video': 'best', 'Autostart': True, 'Start': int(datetime.datetime.now(pytz.UTC).timestamp()), 'End': int((datetime.datetime.now(pytz.UTC) + datetime.timedelta(hours=4)).timestamp())})
        print(json.dumps(output, indent=2))
    elif action == "manifest":
        parts = id.split('&')
        epg_id = parts[0].replace('epgId=', '')
        wsx_url = urllib.parse.unquote_plus(parts[1].replace('wsxUrl=', '')) if len(parts) > 1 else ''
        channel_link = get_channel_link(wsx_url, rmu_token)
        pssh_data = get_pssh_from_mpd(channel_link)
        output = {"Cdn": [], "ManifestUrl": channel_link, "Headers": {"Manifest": {'User-Agent': user_agent}, "Media": {'User-Agent': user_agent}}, "EpgId": epg_id, "LiveToken": live_token, "Loc": loc}
        if pssh_data:
            output['Pssh'] = pssh_data
        print(json.dumps(output))
    elif action == "cdm" and cdm_param == "external":
        parts = id.split('&')
        epg_id = parts[0].replace('epgId=', '')
        wsx_url = urllib.parse.unquote_plus(parts[1].replace('wsxUrl=', '')) if len(parts) > 1 else ''
        channel_link = get_channel_link(wsx_url, rmu_token)
        pssh_data = get_pssh_from_mpd(channel_link)
        if pssh_data:
            for key in do_cdm_external(pssh_data, epg_id, live_token, loc):
                print(key)

if do_action() == "error":
    print("Error: Please create token file with passId", file=sys.stderr)
    sys.exit(1)
