<?php
session_start();

class PleromaAdminAuth {
    private $baseUrl;
    private $userAgent = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36';
    private $cookieFile;

    public function __construct($baseUrl) {
        $this->baseUrl = rtrim($baseUrl, '/');
        $this->cookieFile = sys_get_temp_dir() . '/pleroma_admin_cookies_' . session_id() . '.txt';
    }

    public function login($username, $password) {
        // Step 1: Initialise session by visiting admin page
        $adminPage = $this->baseUrl . '/pleroma/admin/';
        $ch = curl_init($adminPage);
        curl_setopt_array($ch, [
            CURLOPT_RETURNTRANSFER => true,
            CURLOPT_FOLLOWLOCATION => true,
            CURLOPT_USERAGENT => $this->userAgent,
            CURLOPT_SSL_VERIFYPEER => false,
            CURLOPT_SSL_VERIFYHOST => false,
            CURLOPT_COOKIEJAR => $this->cookieFile,
            CURLOPT_COOKIEFILE => $this->cookieFile,
            CURLOPT_TIMEOUT => 30
        ]);
        curl_exec($ch);
        curl_close($ch);

        // Step 2: OAuth password grant (exact flow used by modern AdminFE)
        $oauthUrl = $this->baseUrl . '/oauth/token';
        $postData = [
            'grant_type' => 'password',
            'username' => $username,
            'password' => $password,
            // These are the default AdminFE client credentials – work on nearly all instances
            'client_id' => 'ECfTrzsW11bkG7simInOJf614Ee2sBhOlvE-69KDMzs',
            'client_secret' => 'r5EbNudkfePUwvRmc7DbafP0yOXpUC4lvipSrU8QOpo',
        ];

        $ch = curl_init($oauthUrl);
        curl_setopt_array($ch, [
            CURLOPT_RETURNTRANSFER => true,
            CURLOPT_POST => true,
            CURLOPT_POSTFIELDS => http_build_query($postData),
            CURLOPT_USERAGENT => $this->userAgent,
            CURLOPT_SSL_VERIFYPEER => false,
            CURLOPT_SSL_VERIFYHOST => false,
            CURLOPT_COOKIEJAR => $this->cookieFile,
            CURLOPT_COOKIEFILE => $this->cookieFile,
            CURLOPT_HTTPHEADER => [
                'Content-Type: application/x-www-form-urlencoded',
                'Accept: application/json'
            ],
            CURLOPT_TIMEOUT => 30
        ]);

        $response = curl_exec($ch);
        $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
        curl_close($ch);

        $data = json_decode($response, true);

        if ($httpCode === 200 && isset($data['access_token'])) {
            $_SESSION['bearer_token'] = $data['access_token'];
            return ['success' => true, 'message' => 'Admin OAuth login successful', 'token' => $data['access_token']];
        }

        return ['success' => false, 'message' => 'Login failed', 'http_code' => $httpCode, 'response' => $response];
    }

    public function getCookieFile() {
        return $this->cookieFile;
    }

    public function cleanup() {
        if (file_exists($this->cookieFile)) {
            unlink($this->cookieFile);
        }
    }
}

class PleromaEmojiUploader {
    private $baseUrl;
    private $bearerToken;
    private $maxFileSize = 1048576;     // 1 MB
    private $maxDimensions = 256;      // 256×256 px

    public function __construct($baseUrl, $bearerToken) {
        $this->baseUrl = rtrim($baseUrl, '/');
        $this->bearerToken = $bearerToken;
    }

    private function validateFile($file, &$error) {
        $error = '';

        if (!is_uploaded_file($file['tmp_name'])) {
            $error = 'No file uploaded';
            return false;
        }

        if ($file['size'] > $this->maxFileSize) {
            $error = 'File too large (max 1 MB)';
            return false;
        }

        $filename = pathinfo($file['name'], PATHINFO_FILENAME);
        if (!preg_match('/^[a-zA-Z0-9_]+$/', $filename)) {
            $error = 'Shortcode (filename without extension) may only contain letters, numbers and underscores';
            return false;
        }

        $allowed = ['png', 'gif', 'webp', 'jpg', 'jpeg'];
        $ext = strtolower(pathinfo($file['name'], PATHINFO_EXTENSION));
        if (!in_array($ext, $allowed)) {
            $error = 'Only PNG, GIF, WebP, JPG/JPEG allowed';
            return false;
        }

        $info = getimagesize($file['tmp_name']);
        if (!$info || $info[0] > $this->maxDimensions || $info[1] > $this->maxDimensions) {
            $error = 'Image dimensions too large (max 256×256 px)';
            return false;
        }

        return true;
    }

    public function uploadEmoji($packName, $uploadedFile) {
        $error = '';
        if (!$this->validateFile($uploadedFile, $error)) {
            return ['success' => false, 'error' => $error];
        }

        // Modern endpoint (2024–2026 Akkoma/Pleroma)
        $url = $this->baseUrl . '/api/v1/pleroma/emoji/packs/files?name=' . urlencode($packName);

        $postData = [
            'file' => new CURLFile($uploadedFile['tmp_name'], $uploadedFile['type'], $uploadedFile['name'])
        ];

        $ch = curl_init($url);
        $headers = [
            'Authorization: Bearer ' . $this->bearerToken,
            'Accept: application/json'
        ];

        curl_setopt_array($ch, [
            CURLOPT_RETURNTRANSFER => true,
            CURLOPT_POST => true,
            CURLOPT_POSTFIELDS => $postData,
            CURLOPT_USERAGENT => 'Mozilla/5.0',
            CURLOPT_SSL_VERIFYPEER => false,
            CURLOPT_SSL_VERIFYHOST => false,
            CURLOPT_HTTPHEADER => $headers,
            CURLOPT_TIMEOUT => 60
        ]);

        $response = curl_exec($ch);
        $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
        curl_close($ch);

        $shortcode = pathinfo($uploadedFile['name'], PATHINFO_FILENAME);

        return [
            'success' => ($httpCode >= 200 && $httpCode < 300),
            'http_code' => $httpCode,
            'shortcode' => $shortcode,
            'pack' => $packName,
            'response' => $response
        ];
    }
}
?>

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Pleroma/Akkoma Admin – Login + Emoji Upload (2026)</title>
    <style>
        body { font-family: Arial, sans-serif; background: #f5f5f5; margin: 0; padding: 20px; }
        .container { max-width: 900px; margin: 0 auto; background: #fff; border-radius: 10px; box-shadow: 0 2px 10px rgba(0,0,0,0.1); }
        .tabs { display: flex; background: #8e44ad; }
        .tab { flex: 1; padding: 16px; text-align: center; color: white; font-weight: bold; cursor: pointer; }
        .tab.active { background: #9b59b6; }
        .panel { padding: 30px; display: none; }
        .panel.active { display: block; }
        h1 { color: #333; border-bottom: 2px solid #8e44ad; padding-bottom: 10px; }
        .warning { background: #fff3cd; border: 1px solid #ffeaa7; padding: 15px; border-radius: 5px; margin-bottom: 20px; }
        input[type="text"], input[type="password"], input[type="url"], input[type="file"] {
            width: 100%; padding: 10px; margin: 8px 0; border: 1px solid #ddd; border-radius: 5px; font-size: 16px; box-sizing: border-box;
        }
        button { background: #8e44ad; color: white; padding: 12px; border: none; border-radius: 5px; cursor: pointer; font-size: 16px; width: 100%; }
        button:hover { background: #9b59b6; }
        .result { margin-top: 30px; padding: 20px; border-radius: 5px; }
        .success { background: #d4edda; border: 1px solid #c3e6cb; color: #155724; }
        .error { background: #f8d7da; border: 1px solid #f5c6cb; color: #721c24; }
        .token-box { background: #f3e8ff; padding: 12px; border-radius: 5px; margin: 10px 0; word-break: break-all; }
    </style>
</head>
<body>
<div class="container">
    <div class="tabs">
        <div class="tab active" data-tab="login">1. Admin Login</div>
        <div class="tab" data-tab="upload">2. Emoji Uploader</div>
    </div>

    <div id="login" class="panel active">
        <h1>🔐 Admin Login (OAuth)</h1>
        <div class="warning">
            <strong>⚠️ Administrators only!</strong><br>
            Uses the same OAuth password flow as the official admin panel.
        </div>

        <form method="POST">
            <label>Server URL:</label>
            <input type="url" name="server_url" placeholder="https://your-instance.com" required
                   value="<?php echo htmlspecialchars($_POST['server_url'] ?? ''); ?>">

            <label>Admin Username/Email:</label>
            <input type="text" name="username" placeholder="admin@domain.com" required
                   value="<?php echo htmlspecialchars($_POST['username'] ?? ''); ?>">

            <label>Admin Password:</label>
            <input type="password" name="password" required>

            <button type="submit" name="admin_login">Login as Admin</button>
        </form>

        <?php
        if (isset($_POST['admin_login'])) {
            $serverUrl = trim($_POST['server_url']);
            $username = trim($_POST['username']);
            $password = $_POST['password'];

            if (empty($serverUrl) || empty($username) || empty($password)) {
                echo '<div class="result error">Please fill all fields.</div>';
            } elseif (!filter_var($serverUrl, FILTER_VALIDATE_URL)) {
                echo '<div class="result error">Invalid URL.</div>';
            } else {
                $auth = new PleromaAdminAuth($serverUrl);
                $result = $auth->login($username, $password);

                if ($result['success']) {
                    $_SESSION['base_url'] = $serverUrl;
                    $_SESSION['bearer_token'] = $result['token'];
                    echo '<div class="result success">';
                    echo '<h3>✅ Login Successful!</h3>';
                    echo '<p>You are now authenticated.</p>';
                    if (!empty($result['token'])) {
                        echo '<div class="token-box"><strong>Bearer Token:</strong><br>' . htmlspecialchars($result['token']) . '</div>';
                    }
                    echo '<p>Switch to the Emoji Uploader tab.</p>';
                    echo '</div>';
                } else {
                    $auth->cleanup();
                    echo '<div class="result error">';
                    echo '<h3>❌ Login Failed</h3>';
                    echo '<p>' . htmlspecialchars($result['message']) . '</p>';
                    if (isset($result['http_code'])) echo '<p>HTTP Code: ' . $result['http_code'] . '</p>';
                    echo '</div>';
                }
            }
        }
        ?>
    </div>

    <div id="upload" class="panel">
        <h1>🎨 Emoji Uploader</h1>
        <div class="warning">
            Requires successful admin login.<br>
            <strong>Pack must already exist</strong> (create it first in the web Admin → Settings → Emoji if needed).
        </div>

        <?php if (isset($_SESSION['bearer_token']) && isset($_SESSION['base_url'])): ?>
            <form method="POST" enctype="multipart/form-data">
                <label>Pack Name:</label>
                <input type="text" name="packName" placeholder="CeaMoji" value="<?php echo htmlspecialchars($_POST['packName'] ?? 'CeaMoji'); ?>" required>

                <label>Emoji Image (max 1 MB, 256×256 px):</label>
                <input type="file" name="emojiFile" accept=".png,.gif,.webp,.jpg,.jpeg" required>

                <button type="submit" name="do_upload">Upload Emoji</button>
            </form>

            <?php
            if (isset($_POST['do_upload'])) {
                $uploader = new PleromaEmojiUploader($_SESSION['base_url'], $_SESSION['bearer_token']);
                $uploadResult = $uploader->uploadEmoji($_POST['packName'], $_FILES['emojiFile']);

                echo '<div class="result ' . ($uploadResult['success'] ? 'success' : 'error') . '">';
                if ($uploadResult['success']) {
                    echo '<h3>✅ Emoji Uploaded Successfully!</h3>';
                    echo '<p>Shortcode: <strong>:' . htmlspecialchars($uploadResult['shortcode']) . ':</strong></p>';
                    echo '<p>Pack: <strong>' . htmlspecialchars($uploadResult['pack']) . '</strong></p>';
                    echo '<p>You may need to refresh the admin panel or reload emojis for it to appear immediately.</p>';
                } else {
                    echo '<h3>❌ Upload Failed</h3>';
                    echo '<p>HTTP Code: ' . $uploadResult['http_code'] . '</p>';
                    if (!empty($uploadResult['response'])) {
                        echo '<pre>' . htmlspecialchars($uploadResult['response']) . '</pre>';
                    }
                }
                echo '</div>';
            }
            ?>
        <?php else: ?>
            <div class="result error">
                <strong>No active admin session.</strong><br>
                Please log in first on the Login tab.
            </div>
        <?php endif; ?>
    </div>
</div>

<script>
    document.querySelectorAll('.tab').forEach(tab => {
        tab.addEventListener('click', () => {
            document.querySelectorAll('.tab').forEach(t => t.classList.remove('active'));
            document.querySelectorAll('.panel').forEach(p => p.classList.remove('active'));
            tab.classList.add('active');
            document.getElementById(tab.dataset.tab).classList.add('active');
        });
    });
</script>
</body>
</html>