#!/usr/bin/python3
import sys
import os
import base64
import json
import datetime
import pytz

# Add parent directory to path for o11 import
sys.path.insert(0, os.path.dirname(os.path.dirname(os.path.abspath(__file__))))
import o11

from bs4 import BeautifulSoup
from pywidevine.cdm import Cdm
from pywidevine.device import Device
from pywidevine.pssh import PSSH

# Parse command line parameters
user = o11.parse_params(sys.argv, 'user')
password = o11.parse_params(sys.argv, 'password')
device = o11.parse_params(sys.argv, 'device')
pin = o11.parse_params(sys.argv, 'pin')

id = o11.parse_params(sys.argv, 'id')
action = o11.parse_params(sys.argv, 'action')

bind = o11.parse_params(sys.argv, 'bind')
proxy = o11.parse_params(sys.argv, 'proxy')
doh = o11.parse_params(sys.argv, 'doh')
worker = o11.parse_params(sys.argv, 'worker')

cdm = o11.parse_params(sys.argv, 'cdm')
drm = o11.parse_params(sys.argv, 'drm')
kid = o11.parse_params(sys.argv, 'kid')
pssh = o11.parse_params(sys.argv, 'pssh')
challenge = o11.parse_params(sys.argv, 'challenge')

heartbeaturl = o11.parse_params(sys.argv, 'heartbeaturl')
heartbeatparams = o11.parse_params(sys.argv, 'heartbeatparams')

# Session setup
o11Session = o11.session(bind=bind, proxy=proxy, worker=worker)
req = o11Session.get_session()
if doh != "":
    o11.dns(doh)

if challenge == "cert":
    challenge = "CAQ="

# Configuration
WVD_PATH = './WVD.wvd'
authFile = '/Tabii_auth.json'
SCRIPT_DIR = os.path.abspath(os.path.dirname(__file__))

USER_AGENT = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36'
DEVICE_ID = '1727689846016_437242'

headers = {
    'accept': 'application/json, text/plain, */*',
    'accept-language': 'tr',
    'app-version': '1.3.2',
    'device-brand': 'Windows',
    'device-connection-type': 'Unknown',
    'device-language': 'en-GB',
    'device-model': 'Windows NT 10.0 - Chrome',
    'device-name': 'Windows NT 10.0 - Chrome',
    'device-timezone': 'Turkey/Istanbul',
    'device-network': '4g',
    'device-orientation': 'Landscape',
    'device-os-name': 'Windows',
    'device-os-version': 'NT 10.0',
    'device-resolution': 'Web',
    'device-type': 'WEBDesktop',
    'origin': 'https://www.tabii.com',
    'platform': 'Web',
    'referer': 'https://www.tabii.com/',
    'user-agent': USER_AGENT,
    'x-country-code': 'TR',
}

token = ''

def get_auth():
    try:
        return json.load(open(SCRIPT_DIR + authFile))
    except:
        return None

def save_auth(auth_data):
    json.dump(auth_data, open(SCRIPT_DIR + authFile, 'w'), indent=2)

def do_refresh(refresh_token, profile_id):
    refresh_headers = {**headers, 'device-id': DEVICE_ID, 'content-type': 'application/json;charset=UTF-8'}
    response = req.post(f'https://eu1.tabii.com/apigateway/profiles/v2/{profile_id}/token', headers=refresh_headers, json={'refreshToken': refresh_token})
    data = response.json()
    return data['accessToken'], data['refreshToken']

def login():
    global token
    print("logging in...", file=sys.stderr)
    
    auth = get_auth()
    if not auth or 'refresh_token' not in auth:
        print("No auth found. Please add Tabii auth to auth file.", file=sys.stderr)
        save_auth({'refresh_token': 'ENTER_REFRESH_TOKEN_HERE', 'profile_id': 'ENTER_PROFILE_ID_HERE'})
        sys.exit(1)
    
    try:
        tok, new_refresh = do_refresh(auth['refresh_token'], auth['profile_id'])
        save_auth({'refresh_token': new_refresh, 'profile_id': auth['profile_id']})
        token = tok
        print("logged in successfully", file=sys.stderr)
        return tok
    except Exception as e:
        print(f"Login failed: {e}", file=sys.stderr)
        sys.exit(1)

def get_token():
    global token
    if token:
        return token
    return login()

def get_pssh_from_mpd(url):
    response = req.get(url, headers={'User-Agent': USER_AGENT})
    content_protections = BeautifulSoup(response.content, features="xml").findAll('ContentProtection')
    psshs = []
    for cp in content_protections:
        if cp.get('schemeIdUri', '').lower() == 'urn:uuid:edef8ba9-79d6-4ace-a3c8-27dcd51d21ed':
            pssh_elem = cp.find('cenc:pssh')
            if pssh_elem and pssh_elem.text not in psshs:
                psshs.append(pssh_elem.text)
    return psshs if psshs else None

def get_ticket(channel_id):
    ticket_headers = {**headers, 'authorization': 'Bearer ' + token}
    response = req.get(f'https://eu1.tabii.com/apigateway/entitlement/v1/ticket/{channel_id}', params={'action': 'watch'}, headers=ticket_headers)
    try:
        return response.json()['ticket']
    except:
        return None

def do_cdm_internal(challenge_b64, resource_id, ticket):
    lic_headers = {
        'accept': '*/*',
        'origin': 'https://www.tabii.com',
        'referer': 'https://www.tabii.com/',
        'user-agent': USER_AGENT,
        'content-type': 'application/x-www-form-urlencoded',
    }
    params = {'ticket': ticket, 'resource_id': resource_id}
    response = req.post('https://eu1.tabii.com/apigateway/drm/v1/wv', headers=lic_headers, params=params, data=base64.b64decode(challenge_b64))
    response_b64 = str(base64.b64encode(response.content), 'ascii')
    if response_b64.startswith('CA'):
        return response_b64
    return None

def do_cdm_external(pssh_b64, resource_id, ticket):
    try:
        pssh_obj = PSSH(pssh_b64)
        device_obj = Device.load(WVD_PATH)
        cdm_obj = Cdm.from_device(device_obj)
        session_id = cdm_obj.open()
        challenge_data = cdm_obj.get_license_challenge(session_id, pssh_obj)
        lic_headers = {
            'accept': '*/*',
            'origin': 'https://www.tabii.com',
            'referer': 'https://www.tabii.com/',
            'user-agent': USER_AGENT,
            'content-type': 'application/x-www-form-urlencoded',
        }
        params = {'ticket': ticket, 'resource_id': resource_id}
        licence = req.post('https://eu1.tabii.com/apigateway/drm/v1/wv', headers=lic_headers, params=params, data=challenge_data)
        cdm_obj.parse_license(session_id, licence.content)
        keys = []
        for key in cdm_obj.get_keys(session_id):
            if key.type != 'SIGNING':
                keys.append(f"{key.kid.hex}:{key.key.hex()}")
        cdm_obj.close(session_id)
        return keys
    except Exception as e:
        print(f'CDM external failed: {e}', file=sys.stderr)
        return None

def do_action():
    get_token()
    
    if action == "login":
        login()
        sys.exit()
    
    if action == "channels":
        output = {'Channels': []}
        response = req.get('https://www.tabii.com/watch/live/trt1', headers={'user-agent': USER_AGENT})
        try:
            soup = BeautifulSoup(response.content, features='lxml')
            next_data = json.loads(soup.find('script', {'id': '__NEXT_DATA__'}).text)
            for ch in next_data['props']['pageProps'].get('liveChannels', []):
                media = None
                for m in ch.get('media', []):
                    if m.get('drmSchema') == 'widevine':
                        media = m
                        break
                if not media:
                    for m in ch.get('media', []):
                        if m.get('drmSchema') == 'clear':
                            media = m
                            break
                
                channel = {
                    'Name': ch.get('title', 'Unknown'),
                    'Mode': 'live',
                    'SessionManifest': True,
                    'ManifestScript': f"id={json.dumps(ch)}",
                    'CdmType': 'widevine' if media and media.get('drmSchema') == 'widevine' else 'none',
                    'UseCdm': media and media.get('drmSchema') == 'widevine',
                    'Cdm': f"id={ch.get('id', '')}",
                    'Video': 'best',
                    'OnDemand': True,
                    'SpeedUp': True,
                }
                output['Channels'].append(channel)
            print(json.dumps(output, indent=2))
        except Exception as e:
            print(f"Error: {e}", file=sys.stderr)
            return "error"
    
    elif action == "events":
        output = {'Events': []}
        print(json.dumps(output, indent=2))
    
    elif action == "heartbeat":
        sys.exit()
    
    elif action == "manifest":
        try:
            ch_data = json.loads(id)
            media = None
            for m in ch_data.get('media', []):
                if m.get('drmSchema') == 'widevine':
                    media = m
                    break
            if not media:
                for m in ch_data.get('media', []):
                    if m.get('drmSchema') == 'clear':
                        media = m
                        break
            
            if not media or 'url' not in media:
                return "error"
            
            video_url = media['url']
            output = {
                "Cdn": [{"Name": "default", "ManifestUrl": video_url}],
                "ManifestUrl": video_url,
                "Headers": {"Manifest": {'User-Agent': USER_AGENT}, "Media": {'User-Agent': USER_AGENT}},
                "Heartbeat": {"Url": '', "Params": '', "PeriodMs": 5*60*1000},
                "ResourceId": media.get('resourceId', ''),
                "ChannelId": ch_data.get('id', '')
            }
            print(json.dumps(output))
        except Exception as e:
            print(f"Error: {e}", file=sys.stderr)
            return "error"
    
    elif action == "cdm" and cdm == "internal":
        try:
            ch_data = json.loads(id) if id.startswith('{') else {'id': id}
            channel_id = ch_data.get('id', id)
            media = None
            for m in ch_data.get('media', []):
                if m.get('drmSchema') == 'widevine':
                    media = m
                    break
            resource_id = media.get('resourceId', '') if media else ''
            ticket = get_ticket(channel_id)
            if ticket and resource_id:
                result = do_cdm_internal(challenge, resource_id, ticket)
                if result:
                    print(result)
                else:
                    return "error"
            else:
                return "error"
        except Exception as e:
            print(f"Error: {e}", file=sys.stderr)
            return "error"
    
    elif action == "cdm" and cdm == "external":
        try:
            ch_data = json.loads(id) if id.startswith('{') else {'id': id}
            channel_id = ch_data.get('id', id)
            media = None
            for m in ch_data.get('media', []):
                if m.get('drmSchema') == 'widevine':
                    media = m
                    break
            if not media:
                return "error"
            
            resource_id = media.get('resourceId', '')
            video_url = media.get('url', '')
            ticket = get_ticket(channel_id)
            
            if ticket and resource_id:
                psshs = get_pssh_from_mpd(video_url) if not pssh else [pssh]
                if psshs:
                    all_keys = []
                    for p in psshs:
                        keys = do_cdm_external(p, resource_id, ticket)
                        if keys:
                            all_keys.extend(keys)
                    if all_keys:
                        for key in all_keys:
                            print(key)
                    else:
                        return "error"
                else:
                    return "error"
            else:
                return "error"
        except Exception as e:
            print(f"Error: {e}", file=sys.stderr)
            return "error"
    
    else:
        print("invalid action: " + action, file=sys.stderr)

if do_action() == "error":
    login()
    do_action()