<?php
if(!defined('ABSPATH')){
    exit;
}
if (!function_exists('pl_access_control_set_olduser_cookie')) {
	function pl_access_control_set_olduser_cookie($old_user_id, $pop = false, $token = '')
	{
		$pl_access_control_secure_auth_cookie = Pl_Access_Control_Role_Editor::pl_access_control_secure_auth_cookie();
		$pl_access_control_secure_olduser_cookie = Pl_Access_Control_Role_Editor::pl_access_control_secure_olduser_cookie();
		$expiration = time() + 172800; // 48 hours
		$auth_cookie = pl_access_control_get_auth_cookie();
		$olduser_cookie = wp_generate_auth_cookie($old_user_id, $expiration, 'logged_in', $token);

		if ($pl_access_control_secure_auth_cookie) {
			$auth_cookie_name = PL_ACCESS_CONTROL_USER_SWITCHING_SECURE_COOKIE;
			$scheme = 'secure_auth';
		} else {
			$auth_cookie_name = PL_ACCESS_CONTROL_USER_SWITCHING_COOKIE;
			$scheme = 'auth';
		}

		if ($pop) {
			array_pop($auth_cookie);
		} else {
			array_push($auth_cookie, wp_generate_auth_cookie($old_user_id, $expiration, $scheme, $token));
		}

		$auth_cookie = wp_json_encode($auth_cookie);

		if (false === $auth_cookie) {
			return;
		}
		do_action('access_control_set_cookie', $auth_cookie, $expiration, $old_user_id, $scheme, $token);

		$scheme = 'logged_in';
		do_action('pl_access_control_set_olduser_cookie', $olduser_cookie, $expiration, $old_user_id, $scheme, $token);
		if (!apply_filters('pl_access_control_send_auth_cookies', true)) {
			return;
		}

		setcookie($auth_cookie_name, $auth_cookie, $expiration, SITECOOKIEPATH, COOKIE_DOMAIN, $pl_access_control_secure_auth_cookie, true);
		setcookie(PL_ACCESS_CONTROL_USER_SWITCHING_OLDUSER_COOKIE, $olduser_cookie, $expiration, COOKIEPATH, COOKIE_DOMAIN, $pl_access_control_secure_olduser_cookie, true);
	}
}

if (!function_exists('pl_access_control_clear_olduser_cookie')) {
	function pl_access_control_clear_olduser_cookie($clear_all = true)
	{
		$auth_cookie = pl_access_control_get_auth_cookie();
		if (!empty($auth_cookie)) {
			array_pop($auth_cookie);
		}
		if ($clear_all || empty($auth_cookie)) {
			do_action('pl_access_control_clear_olduser_cookie');

			if (!apply_filters('pl_access_control_send_auth_cookies', true)) {
				return;
			}

			$expire = time() - 31536000;
			setcookie(PL_ACCESS_CONTROL_USER_SWITCHING_COOKIE, ' ', $expire, SITECOOKIEPATH, COOKIE_DOMAIN);
			setcookie(PL_ACCESS_CONTROL_USER_SWITCHING_SECURE_COOKIE, ' ', $expire, SITECOOKIEPATH, COOKIE_DOMAIN);
			setcookie(PL_ACCESS_CONTROL_USER_SWITCHING_OLDUSER_COOKIE, ' ', $expire, COOKIEPATH, COOKIE_DOMAIN);
		} else {
			if (Pl_Access_Control_Role_Editor::pl_access_control_secure_auth_cookie()) {
				$scheme = 'secure_auth';
			} else {
				$scheme = 'auth';
			}

			$old_cookie = end($auth_cookie);

			$old_user_id = wp_validate_auth_cookie($old_cookie, $scheme);
			if ($old_user_id) {
				$parts = wp_parse_auth_cookie($old_cookie, $scheme);

				if (false !== $parts) {
					pl_access_control_set_olduser_cookie($old_user_id, true, $parts['token']);
				}
			}
		}
	}
}

if (!function_exists('pl_access_control_get_olduser_cookie')) {
	function pl_access_control_get_olduser_cookie()
	{
		if (isset($_COOKIE[PL_ACCESS_CONTROL_USER_SWITCHING_OLDUSER_COOKIE])) {
			return sanitize_text_field(wp_unslash($_COOKIE[PL_ACCESS_CONTROL_USER_SWITCHING_OLDUSER_COOKIE]));
		} else {
			return false;
		}
	}
}

if (!function_exists('pl_access_control_get_auth_cookie')) {
	function pl_access_control_get_auth_cookie()
	{
		if (Pl_Access_Control_Role_Editor::pl_access_control_secure_auth_cookie()) {
			$auth_cookie_name = PL_ACCESS_CONTROL_USER_SWITCHING_SECURE_COOKIE;
		} else {
			$auth_cookie_name = PL_ACCESS_CONTROL_USER_SWITCHING_COOKIE;
		}

		if (isset($_COOKIE[$auth_cookie_name]) && is_string($_COOKIE[$auth_cookie_name])) {
			$cookie = json_decode(sanitize_text_field(wp_unslash($_COOKIE[$auth_cookie_name])));

		}
		if (!isset($cookie) || !is_array($cookie)) {
			$cookie = array();
		}
		return $cookie;
	}
}

if (!function_exists('pl_access_control_switch_to_user')) {
	function pl_access_control_switch_to_user($user_id, $remember = false, $set_old_user = true)
	{
		$user = get_userdata($user_id);

		if (!$user) {
			return false;
		}

		$old_user_id = (is_user_logged_in()) ? get_current_user_id() : false;
		$old_token = wp_get_session_token();
		$auth_cookies = pl_access_control_get_auth_cookie();
		$auth_cookie = end($auth_cookies);
		$cookie_parts = $auth_cookie ? wp_parse_auth_cookie($auth_cookie) : false;

		if ($set_old_user && $old_user_id) {
			// Switching to another user
			$new_token = '';
			pl_access_control_set_olduser_cookie($old_user_id, false, $old_token);
		} else {
			// Switching back, either after being switched off or after being switched to another user
			$new_token = $cookie_parts['token'] ?? '';
			pl_access_control_clear_olduser_cookie(false);
		}
		$session_filter = function (array $session) use ($old_user_id, $old_token) {
			$session['switched_from_id'] = $old_user_id;
			$session['switched_from_session'] = $old_token;
			return $session;
		};

		add_filter('attach_session_information', $session_filter, 99);

		wp_clear_auth_cookie();
		wp_set_auth_cookie($user_id, $remember, '', $new_token);
		wp_set_current_user($user_id);

		remove_filter('attach_session_information', $session_filter, 99);

		if ($set_old_user && $old_user_id) {
			do_action('pl_access_control_switch_to_user', $user_id, $old_user_id, $new_token, $old_token);
		} else {
			do_action('pl_access_control_switch_back_user', $user_id, $old_user_id, $new_token, $old_token);
		}

		if ($old_token && $old_user_id && !$set_old_user) {
			// When switching back, destroy the session for the old user
			$manager = WP_Session_Tokens::get_instance($old_user_id);
			$manager->destroy($old_token);
		}

		return $user;
	}
}

if (!function_exists('pl_access_control_switch_off_user')) {
	function pl_access_control_switch_off_user()
	{
		$old_user_id = get_current_user_id();

		if (!$old_user_id) {
			return false;
		}

		$old_token = wp_get_session_token();

		pl_access_control_set_olduser_cookie($old_user_id, false, $old_token);
		wp_clear_auth_cookie();
		wp_set_current_user(0);
		do_action('pl_access_control_switch_off_user', $old_user_id, $old_token);

		return true;
	}
}

if (!function_exists('pl_access_control_current_user_switched')) {
	function pl_access_control_current_user_switched()
	{
		if (!is_user_logged_in()) {
			return false;
		}

		return Pl_Access_Control_Role_Editor::pl_access_control_get_old_user();
	}
}