#!/usr/bin/python3
import sys
import os
import base64
import json
import datetime
import pytz
import time
import uuid
import hashlib
import secrets

# Add parent directory to path for o11 import
sys.path.insert(0, os.path.dirname(os.path.dirname(os.path.abspath(__file__))))
import o11

from Crypto.Cipher import AES

# Parse command line parameters
user = o11.parse_params(sys.argv, 'user')
password = o11.parse_params(sys.argv, 'password')
device = o11.parse_params(sys.argv, 'device')
pin = o11.parse_params(sys.argv, 'pin')

id = o11.parse_params(sys.argv, 'id')
action = o11.parse_params(sys.argv, 'action')

bind = o11.parse_params(sys.argv, 'bind')
proxy = o11.parse_params(sys.argv, 'proxy')
doh = o11.parse_params(sys.argv, 'doh')
worker = o11.parse_params(sys.argv, 'worker')

cdm = o11.parse_params(sys.argv, 'cdm')
drm = o11.parse_params(sys.argv, 'drm')
kid = o11.parse_params(sys.argv, 'kid')
pssh = o11.parse_params(sys.argv, 'pssh')
challenge = o11.parse_params(sys.argv, 'challenge')

heartbeaturl = o11.parse_params(sys.argv, 'heartbeaturl')
heartbeatparams = o11.parse_params(sys.argv, 'heartbeatparams')

# Session setup
o11Session = o11.session(bind=bind, proxy=proxy, worker=worker)
req = o11Session.get_session()
if doh != "":
    o11.dns(doh)

if challenge == "cert":
    challenge = "CAQ="

# Configuration
WVD_PATH = './WVD.wvd'
authFile = '/Eon_auth.json'
SCRIPT_DIR = os.path.abspath(os.path.dirname(__file__))

USER_AGENT = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36'
BASIC_AUTH = 'YjhkOWFkZTQtMTA5My00NmE3LWE0ZjctMGU0N2JlNDYzYzEwOjF3NGRtd3c4N3gxZTlsODllc3NxdmM4MXBpZHJxc2EwbGkxcnZhMjM='
QUALITIES = ['hp7000', 'hp2200', 'sp1400']

headers = {
    'accept': 'application/json, text/plain, */*',
    'origin': 'https://eon.tv',
    'referer': 'https://eon.tv/',
    'user-agent': USER_AGENT,
}

token = ''
stream_un = ''
stream_key = ''
device_id = ''
provider = ''
base_api_cdn = ''

def get_auth():
    try:
        return json.load(open(SCRIPT_DIR + authFile))
    except:
        return None

def save_auth(auth_data):
    json.dump(auth_data, open(SCRIPT_DIR + authFile, 'w'), indent=2)

def base64url_to_base64(data):
    data = data.replace('-', '+').replace('_', '/')
    pad = len(data) % 4
    if pad == 2:
        data += '=='
    elif pad == 3:
        data += '='
    return data

def base64_to_base64url(data_b64):
    return data_b64.replace('+', '-').replace('/', '_').rstrip('=')

def pkcs7_pad(data, block_size=16):
    pad_len = block_size - (len(data) % block_size)
    return data + bytes([pad_len] * pad_len)

def generate_iv_base64url(length=16):
    iv = os.urandom(length)
    iv_b64 = base64.b64encode(iv).decode('utf-8')
    return iv_b64.replace('+', '-').replace('/', '_').rstrip('=')

def encrypt_aes_cbc(plaintext, iv_b64url, key_b64url):
    iv = base64.b64decode(base64url_to_base64(iv_b64url))
    key = base64.b64decode(base64url_to_base64(key_b64url))
    pt_bytes = plaintext.encode('utf-8')
    padded_pt = pkcs7_pad(pt_bytes)
    cipher = AES.new(key, AES.MODE_CBC, iv)
    ciphertext = cipher.encrypt(padded_pt)
    ciphertext_b64 = base64.b64encode(ciphertext).decode('utf-8')
    return base64_to_base64url(ciphertext_b64)

def do_refresh(refresh_token):
    global base_api_cdn
    refresh_headers = {
        'accept': 'application/json, text/plain, */*',
        'authorization': 'Basic ' + BASIC_AUTH,
        'content-type': 'multipart/form-data; boundary=----WebKitFormBoundarycQKk8TXoLEx08A7U',
        'origin': 'https://eon.tv',
        'referer': 'https://eon.tv/',
        'user-agent': USER_AGENT
    }
    params = {'grant_type': 'refresh_token', 'refresh_token': refresh_token}
    data = '------WebKitFormBoundarycQKk8TXoLEx08A7U--\r\n'
    response = req.post(f'https://api-web.{base_api_cdn}/oauth/token', params=params, headers=refresh_headers, data=data)
    response.raise_for_status()
    result = response.json()
    return result['access_token'], result['refresh_token'], result['stream_un'], result['stream_key']

def get_provider_sp(tok):
    sp_headers = {**headers, 'Authorization': 'bearer ' + tok, 'X-UCP-TIME-FORMAT': 'timestamp'}
    response = req.get(f'https://api-web.{base_api_cdn}/v1/sp', headers=sp_headers)
    return response.json()['identifier']

def login():
    global token, stream_un, stream_key, device_id, provider, base_api_cdn
    print("logging in...", file=sys.stderr)
    
    auth = get_auth()
    if not auth or 'refresh_token' not in auth:
        print("No auth found. Please add Eon auth to auth file.", file=sys.stderr)
        save_auth({'refresh_token': 'ENTER_REFRESH_TOKEN_HERE', 'device_id': 'ENTER_DEVICE_ID_HERE', 'provider_identifier': 'ENTER_PROVIDER_HERE', 'base_api_cdn': 'ENTER_BASE_API_CDN_HERE'})
        sys.exit(1)
    
    try:
        base_api_cdn = auth['base_api_cdn']
        tok, new_refresh, s_un, s_key = do_refresh(auth['refresh_token'])
        prov = get_provider_sp(tok)
        save_auth({'refresh_token': new_refresh, 'device_id': auth['device_id'], 'provider_identifier': auth['provider_identifier'], 'base_api_cdn': base_api_cdn})
        token = tok
        stream_un = s_un
        stream_key = s_key
        device_id = auth['device_id']
        provider = prov
        print("logged in successfully", file=sys.stderr)
        return tok
    except Exception as e:
        print(f"Login failed: {e}", file=sys.stderr)
        sys.exit(1)

def get_token():
    global token
    if token:
        return token
    return login()

def get_playback_server():
    response = req.get(f'https://api-web.{base_api_cdn}/v1/servers', headers=headers)
    return response.json()['live_servers'][0]

def craft_url(publishing_point, stream_quality_id=0):
    channel_id = publishing_point['publishingPoint']
    signature = publishing_point['playerCfgs'][0]['sig']
    playback_server = get_playback_server()
    session_id = str(uuid.uuid4())
    iv = generate_iv_base64url()
    unencrypted_payload = f"channel={channel_id};stream={QUALITIES[stream_quality_id]};sp={provider};u={stream_un};ss={stream_key};minvbr=100;adaptive=true;player=m3u8;sig={signature};session={session_id};m={playback_server['ip']};device={device_id};ctime={int(time.time() * 1000)};conn=BROWSER;aa=false"
    params = {
        'i': iv,
        'a': encrypt_aes_cbc(unencrypted_payload, iv, stream_key),
        'sp': provider,
        'u': stream_un,
        'player': 'm3u8',
        'session': session_id,
        'sig': signature,
    }
    try:
        response = req.get(f'https://{playback_server["hostname"]}/stream/', params=params, headers={'Referer': 'https://eon.tv/', 'User-Agent': USER_AGENT}, timeout=3)
        response.raise_for_status()
        return str(response.url)
    except:
        if stream_quality_id < len(QUALITIES)-1:
            return craft_url(publishing_point, stream_quality_id+1)
        return None

def do_action():
    get_token()
    
    if action == "login":
        login()
        sys.exit()
    
    if action == "channels":
        output = {'Channels': []}
        ch_headers = {**headers, 'authorization': 'bearer ' + token, 'x-ucp-theme-mode': 'ALL', 'x-ucp-time-format': 'timestamp'}
        response = req.get(f'https://api-web.{base_api_cdn}/v3/channels', params={'channelType': 'TV'}, headers=ch_headers)
        try:
            data = response.json()
            for ch in data:
                pp = ch.get('publishingPoint', [{}])[0] if ch.get('publishingPoint') else {}
                channel = {
                    'Name': ch.get('name', 'Unknown').replace('/', '-'),
                    'Mode': 'live',
                    'SessionManifest': True,
                    'ManifestScript': f"id={json.dumps(pp)}",
                    'CdmType': 'none',
                    'UseCdm': False,
                    'Cdm': '',
                    'Video': 'best',
                    'OnDemand': True,
                    'SpeedUp': True,
                }
                output['Channels'].append(channel)
            print(json.dumps(output, indent=2))
        except Exception as e:
            print(f"Error: {e}", file=sys.stderr)
            return "error"
    
    elif action == "events":
        output = {'Events': []}
        print(json.dumps(output, indent=2))
    
    elif action == "heartbeat":
        sys.exit()
    
    elif action == "manifest":
        try:
            publishing_point = json.loads(id)
            video_url = craft_url(publishing_point)
            if not video_url:
                return "error"
            output = {
                "Cdn": [{"Name": "default", "ManifestUrl": video_url}],
                "ManifestUrl": video_url,
                "Headers": {"Manifest": {'User-Agent': USER_AGENT, 'Referer': 'https://eon.tv/'}, "Media": {'User-Agent': USER_AGENT}},
                "Heartbeat": {"Url": '', "Params": '', "PeriodMs": 5*60*1000}
            }
            print(json.dumps(output))
        except Exception as e:
            print(f"Error: {e}", file=sys.stderr)
            return "error"
    
    elif action == "cdm":
        print("Eon streams are typically unencrypted HLS", file=sys.stderr)
    
    else:
        print("invalid action: " + action, file=sys.stderr)

if do_action() == "error":
    login()
    do_action()