#!/usr/bin/python3
import sys
import os
import base64
import json
import datetime
import pytz

# Add parent directory to path for o11 import
sys.path.insert(0, os.path.dirname(os.path.dirname(os.path.abspath(__file__))))
import o11

from bs4 import BeautifulSoup
from pywidevine.cdm import Cdm
from pywidevine.device import Device
from pywidevine.pssh import PSSH
from Crypto.Cipher import AES
from Crypto.Util.Padding import unpad

# Parse command line parameters
user = o11.parse_params(sys.argv, 'user')
password = o11.parse_params(sys.argv, 'password')
device = o11.parse_params(sys.argv, 'device')
pin = o11.parse_params(sys.argv, 'pin')

id = o11.parse_params(sys.argv, 'id')
action = o11.parse_params(sys.argv, 'action')

bind = o11.parse_params(sys.argv, 'bind')
proxy = o11.parse_params(sys.argv, 'proxy')
doh = o11.parse_params(sys.argv, 'doh')
worker = o11.parse_params(sys.argv, 'worker')

cdm = o11.parse_params(sys.argv, 'cdm')
drm = o11.parse_params(sys.argv, 'drm')
kid = o11.parse_params(sys.argv, 'kid')
pssh = o11.parse_params(sys.argv, 'pssh')
challenge = o11.parse_params(sys.argv, 'challenge')

heartbeaturl = o11.parse_params(sys.argv, 'heartbeaturl')
heartbeatparams = o11.parse_params(sys.argv, 'heartbeatparams')

# Session setup
o11Session = o11.session(bind=bind, proxy=proxy, worker=worker)
req = o11Session.get_session()
if doh != "":
    o11.dns(doh)

if challenge == "cert":
    challenge = "CAQ="

# Configuration
WVD_PATH = './WVD.wvd'
SCRIPT_DIR = os.path.abspath(os.path.dirname(__file__))

USER_AGENT = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36'

# AES decryption keys for license URL
AES_KEY = b'n9cLieYkqwzNCqvi'
AES_IV = b'odzcU3WdUiXLucVd'

headers = {
    'accept': 'application/json',
    'origin': 'https://www.channel4.com',
    'referer': 'https://www.channel4.com/',
    'user-agent': USER_AGENT,
}

def decode_ais_token(e):
    try:
        encrypted_bytes = base64.b64decode(e)
        cipher = AES.new(AES_KEY, AES.MODE_CBC, AES_IV)
        decrypted = cipher.decrypt(encrypted_bytes)
        unpadded = unpad(decrypted, AES.block_size)
        return unpadded.decode('utf-8')
    except:
        return None

def get_pssh_from_mpd(url):
    response = req.get(url, headers={'User-Agent': USER_AGENT})
    content_protections = BeautifulSoup(response.content, features="xml").findAll('ContentProtection')
    for cp in content_protections:
        if cp.get('schemeIdUri', '').lower() == 'urn:uuid:edef8ba9-79d6-4ace-a3c8-27dcd51d21ed':
            pssh_elem = cp.find('cenc:pssh')
            if pssh_elem:
                return pssh_elem.text
    return None

def get_single(channel_id):
    response = req.get(f'https://www.channel4.com/simulcast/channels/{channel_id}', headers=headers)
    try:
        data = response.json()
        video_profiles = data['channelInfo']['videoProfiles']
        stream = None
        for v in video_profiles:
            if v.get('cdnFullName') == 'yospace' and 'dashwv' in v.get('name', ''):
                stream = v['streams'][0]
                break
        if stream:
            return stream['uri'], stream['token']
    except:
        pass
    return None, None

def do_cdm_internal(challenge_b64, lic_url, video_url):
    lic_headers = {
        'Origin': 'https://www.channel4.com',
        'Referer': 'https://www.channel4.com/',
        'User-Agent': USER_AGENT,
        'content-type': 'application/json',
    }
    json_data = {
        'token': lic_url.split('?')[-1].split('&t=')[-1].split('&')[0],
        'video': {'type': 'simulcast', 'url': video_url},
        'message': challenge_b64,
    }
    response = req.post(lic_url.split('?')[0], headers=lic_headers, json=json_data)
    try:
        data = response.json()
        return data['license']
    except:
        return None

def do_cdm_external(pssh_b64, lic_url, video_url):
    try:
        pssh_obj = PSSH(pssh_b64)
        device_obj = Device.load(WVD_PATH)
        cdm_obj = Cdm.from_device(device_obj)
        session_id = cdm_obj.open()
        
        challenge_data = cdm_obj.get_license_challenge(session_id, pssh_obj)
        
        lic_headers = {
            'Origin': 'https://www.channel4.com',
            'Referer': 'https://www.channel4.com/',
            'User-Agent': USER_AGENT,
            'content-type': 'application/json',
        }
        json_data = {
            'token': lic_url.split('?')[-1].split('&t=')[-1].split('&')[0],
            'video': {'type': 'simulcast', 'url': video_url},
            'message': base64.b64encode(challenge_data).decode('utf-8'),
        }
        
        licence = req.post(lic_url.split('?')[0], headers=lic_headers, json=json_data)
        data = licence.json()
        cdm_obj.parse_license(session_id, base64.b64decode(data['license']))
        
        keys = []
        for key in cdm_obj.get_keys(session_id):
            if key.type != 'SIGNING':
                keys.append(f"{key.kid.hex}:{key.key.hex()}")
        
        cdm_obj.close(session_id)
        return keys
    except Exception as e:
        print(f'CDM external failed: {e}', file=sys.stderr)
        return None

def do_action():
    if action == "login":
        print("Channel4 does not require login for live channels", file=sys.stderr)
        sys.exit()
    
    if action == "channels":
        output = {'Channels': []}
        
        response = req.get('https://www.channel4.com/api/now-next', headers=headers)
        
        try:
            data = response.json()
            for ch in data['slots'].get('now', []):
                channel = {
                    'Name': ch.get('channel', 'Unknown'),
                    'Mode': 'live',
                    'SessionManifest': True,
                    'ManifestScript': f"id={ch.get('channel', '')}",
                    'CdmType': 'widevine',
                    'UseCdm': True,
                    'Cdm': f"id={ch.get('channel', '')}",
                    'Video': 'best',
                    'OnDemand': True,
                    'SpeedUp': True,
                }
                output['Channels'].append(channel)
            
            print(json.dumps(output, indent=2))
        except Exception as e:
            print(f"Error: {e}", file=sys.stderr)
            return "error"
    
    elif action == "events":
        output = {'Events': []}
        print(json.dumps(output, indent=2))
    
    elif action == "heartbeat":
        sys.exit()
    
    elif action == "manifest":
        try:
            channel_id = id
            video_url, enc_lic_url = get_single(channel_id)
            if not video_url:
                return "error"
            
            lic_url = decode_ais_token(enc_lic_url) if enc_lic_url else None
            
            output = {
                "Cdn": [{"Name": "default", "ManifestUrl": video_url}],
                "ManifestUrl": video_url,
                "Headers": {"Manifest": {'User-Agent': USER_AGENT}, "Media": {'User-Agent': USER_AGENT}},
                "Heartbeat": {"Url": '', "Params": '', "PeriodMs": 5*60*1000},
                "LicenseUrl": lic_url
            }
            print(json.dumps(output))
        except Exception as e:
            print(f"Error: {e}", file=sys.stderr)
            return "error"
    
    elif action == "cdm" and cdm == "internal":
        try:
            channel_id = id
            video_url, enc_lic_url = get_single(channel_id)
            lic_url = decode_ais_token(enc_lic_url) if enc_lic_url else None
            if lic_url:
                result = do_cdm_internal(challenge, lic_url, video_url)
                if result:
                    print(result)
                else:
                    return "error"
            else:
                return "error"
        except Exception as e:
            print(f"Error: {e}", file=sys.stderr)
            return "error"
    
    elif action == "cdm" and cdm == "external":
        try:
            channel_id = id
            video_url, enc_lic_url = get_single(channel_id)
            lic_url = decode_ais_token(enc_lic_url) if enc_lic_url else None
            if lic_url:
                pssh_to_use = pssh if pssh else get_pssh_from_mpd(video_url)
                if pssh_to_use:
                    keys = do_cdm_external(pssh_to_use, lic_url, video_url)
                    if keys:
                        for key in keys:
                            print(key)
                    else:
                        return "error"
                else:
                    return "error"
            else:
                return "error"
        except Exception as e:
            print(f"Error: {e}", file=sys.stderr)
            return "error"
    
    else:
        print("invalid action: " + action, file=sys.stderr)

do_action()
