<?php
/**
 * File: Cdnfsd_BunnyCdn_Popup.php
 *
 * @since   2.6.0
 * @package W3TC
 */

namespace W3TC;

/**
 * Class: Cdnfsd_BunnyCdn_Popup
 *
 * @since 2.6.0
 *
 * phpcs:disable Generic.CodeAnalysis.UnusedFunctionParameter
 */
class Cdnfsd_BunnyCdn_Popup {
	/**
	 * W3TC AJAX: Popup.
	 *
	 * @since  2.6.0
	 * @static
	 *
	 * @return void
	 */
	public static function w3tc_ajax() {
		$w3tc_o = new Cdnfsd_BunnyCdn_Popup();

		\add_action(
			'w3tc_ajax_cdn_bunnycdn_fsd_intro',
			array( $w3tc_o, 'w3tc_ajax_cdn_bunnycdn_fsd_intro' )
		);

		\add_action(
			'w3tc_ajax_cdn_bunnycdn_fsd_list_pull_zones',
			array( $w3tc_o, 'w3tc_ajax_cdn_bunnycdn_fsd_list_pull_zones' )
		);

		\add_action(
			'w3tc_ajax_cdn_bunnycdn_fsd_configure_pull_zone',
			array( $w3tc_o, 'w3tc_ajax_cdn_bunnycdn_fsd_configure_pull_zone' )
		);

		\add_action(
			'w3tc_ajax_cdn_bunnycdn_fsd_deauthorization',
			array( $w3tc_o, 'w3tc_ajax_cdn_bunnycdn_fsd_deauthorization' )
		);

		\add_action(
			'w3tc_ajax_cdn_bunnycdn_fsd_deauthorize',
			array( $w3tc_o, 'w3tc_ajax_cdn_bunnycdn_fsd_deauthorize' )
		);
	}

	/**
	 * W3TC AJAX: Intro -- authorization.
	 *
	 * @since 2.6.0
	 */
	public function w3tc_ajax_cdn_bunnycdn_fsd_intro() {
		$w3tc_config          = Dispatcher::config();
		$w3tc_account_api_key = $w3tc_config->get_string( 'cdn.bunnycdn.account_api_key' );

		// Ask for an account API key.
		$this->render_intro(
			array(
				'account_api_key' => empty( $w3tc_account_api_key ) ? null : $w3tc_account_api_key,
			)
		);
	}

	/**
	 * W3TC AJAX: List pull zones.
	 *
	 * @since 2.6.0
	 */
	public function w3tc_ajax_cdn_bunnycdn_fsd_list_pull_zones() {
		$w3tc_account_api_key = Util_Request::get_string( 'account_api_key' );
		$w3tc_config          = Dispatcher::config();
		$api                  = new Cdn_BunnyCdn_Api(
			Cdn_BunnyCdn_Api::client_config_from_saved(
				$w3tc_account_api_key,
				$w3tc_config,
				'cdnfsd.bunnycdn.verify_tls_certificates'
			)
		);

		// Try to retrieve pull zones.
		try {
			$pull_zones = $api->list_pull_zones();
		} catch ( \Exception $ex ) {
			Util_Debug::log( 'bunnycdn', 'fsd list_pull_zones failed: ' . $ex->getMessage() );
			$this->render_intro(
				array(
					'account_api_key' => empty( $w3tc_account_api_key ) ? null : $w3tc_account_api_key,
					/**
					 * Copilot review (PR #4): supplier passes raw,
					 * the view's sink-side `esc_html()` is the
					 * single escape point. Matches the sec-xss
					 * skill "strip the now-redundant supplier
					 * escapes" rule and avoids double-escape
					 * cosmetics (`&amp;amp;`-style entities) in
					 * the admin UI.
					 */
					'error_message'   => \__( 'Cannot list pull zones; see the W3TC debug log for details.', 'w3-total-cache' ),
				)
			);
		}

		// Save the account API key, if added or changed.
		if ( $w3tc_config->get_string( 'cdn.bunnycdn.account_api_key' ) !== $w3tc_account_api_key ) {
			$w3tc_config->set( 'cdn.bunnycdn.account_api_key', $w3tc_account_api_key );
			$w3tc_config->save();
		}

		// Print the view.
		$server_ip            = ! empty( $_SERVER['SERVER_ADDR'] ) && \filter_var( \wp_unslash( $_SERVER['SERVER_ADDR'] ), FILTER_VALIDATE_IP ) ?
			\filter_var( \wp_unslash( $_SERVER['SERVER_ADDR'] ), FILTER_SANITIZE_URL ) : null;
		$suggested_origin_url = 'http' . ( \is_ssl() ? 's' : '' ) . '://' .
			( empty( $server_ip ) ? \wp_parse_url( \home_url(), PHP_URL_HOST ) : $server_ip );

		$details = array(
			'pull_zones'                => $pull_zones,
			'suggested_origin_url'      => $suggested_origin_url, // Suggested origin URL or IP.
			'suggested_zone_name'       => \substr( \str_replace( '.', '-', \wp_parse_url( \home_url(), PHP_URL_HOST ) ), 0, 60 ), // Suggested pull zone name.
			'pull_zone_id'              => $w3tc_config->get_integer( 'cdnfsd.bunnycdn.pull_zone_id' ),
			'suggested_custom_hostname' => \wp_parse_url( \home_url(), PHP_URL_HOST ), // Suggested custom hostname.
		);

		include W3TC_DIR . '/Cdnfsd_BunnyCdn_Popup_View_Pull_Zones.php';
		\wp_die();
	}

	/**
	 * W3TC AJAX: Configure pull zone.
	 *
	 * @since 2.6.0
	 *
	 * @see Cdn_BunnyCdn_Api::get_default_edge_rules()
	 */
	public function w3tc_ajax_cdn_bunnycdn_fsd_configure_pull_zone() {
		$w3tc_config           = Dispatcher::config();
		$w3tc_account_api_key  = $w3tc_config->get_string( 'cdn.bunnycdn.account_api_key' );
		$pull_zone_id          = Util_Request::get_integer( 'pull_zone_id' );
		$w3tc_origin_url       = Util_Request::get_string( 'origin_url' ); // Origin URL or IP.
		$w3tc_name             = Util_Request::get_string( 'name' ); // Pull zone name.
		$w3tc_cdn_hostname     = Util_Request::get_string( 'cdn_hostname' ); // Pull zone CDN hostname (system).
		$w3tc_custom_hostnames = explode( ',', Util_Request::get_string( 'custom_hostnames' ) );

		// If not selecting a pull zone. then create a new one.
		if ( empty( $pull_zone_id ) ) {
			$api = new Cdn_BunnyCdn_Api(
				Cdn_BunnyCdn_Api::client_config_from_saved(
					$w3tc_account_api_key,
					$w3tc_config,
					'cdnfsd.bunnycdn.verify_tls_certificates'
				)
			);

			// Try to create a new pull zone.
			try {
				$response = $api->add_pull_zone(
					array(
						'Name'                  => $w3tc_name, // The name/hostname for the pull zone where the files will be accessible; only letters, numbers, and dashes.
						'OriginUrl'             => $w3tc_origin_url, // Origin URL or IP (with optional port number).
						'AddHostHeader'         => true, // Determines if the zone should forward the requested host header to the origin.
						'CacheErrorResponses'   => true, // If enabled, bunny.net will temporarily cache error responses (304+ HTTP status codes) from your servers for 5 seconds to prevent DDoS attacks on your origin. If disabled, error responses will be set to no-cache.
						'DisableCookies'        => false, // Determines if the Pull Zone should automatically remove cookies from the responses.
						'EnableTLS1'            => false, // TLS 1.0 was deprecated in 2018.
						'EnableTLS1_1'          => false, // TLS 1.1 was EOL's on March 31,2020.
						'ErrorPageWhitelabel'   => true, // Any bunny.net branding will be removed from the error page and replaced with a generic term.
						'UseStaleWhileUpdating' => true, // Serve stale content while updating.  If Stale While Updating is enabled, cache will not be refreshed if the origin responds with a non-cacheable resource.
						'UseStaleWhileOffline'  => true, // Serve stale content if the origin is offline.
					)
				);

				$pull_zone_id      = (int) $response['Id'];
				$w3tc_name         = $response['Name'];
				$w3tc_cdn_hostname = $response['Hostnames'][0]['Value'];
			} catch ( \Exception $ex ) {
				Util_Debug::log( 'bunnycdn', 'fsd configure_pull_zone failed: ' . $ex->getMessage() );
				$this->render_intro(
					array(
						'account_api_key' => empty( $w3tc_account_api_key ) ? null : $w3tc_account_api_key,
						/**
						 * Same supplier-passes-raw contract as the
						 * list_pull_zones catch above.
						 */
						'error_message'   => \__( 'Cannot select or add a pull zone; see the W3TC debug log for details.', 'w3-total-cache' ),
					)
				);
			}

			// Initialize an error messages array.
			$error_messages = array();

			// Add Edge Rules.
			foreach ( Cdn_BunnyCdn_Api::get_default_edge_rules() as $edge_rule ) {
				try {
					$api->add_edge_rule( $edge_rule, $pull_zone_id );
				} catch ( \Exception $ex ) {
					$error_messages[] = sprintf(
						// translators: 1: Edge Rule description/name.
						\__( 'Could not add Edge Rule "%1$s".', 'w3-total-cache' ) . '; ',
						\esc_html( $edge_rule['Description'] )
					) . $ex->getMessage();
				}
			}

			// Add custom hostnames, if any.
			if ( ! empty( $w3tc_custom_hostnames ) ) {

				foreach ( $w3tc_custom_hostnames as $custom_hostname ) {
					try {
						$api->add_custom_hostname( $custom_hostname, $pull_zone_id );
					} catch ( \Exception $ex ) {
						$error_messages[] = sprintf(
							// translators: 1: hostname.
							\__( 'Could not add custom hostname "%1$s"', 'w3-total-cache' ) . '; ',
							\esc_html( $custom_hostname )
						) . $ex->getMessage();
					}
				}
			}

			// Convert error messages array to a string.
			$error_messages = implode( "\r\n", $error_messages );
		}

		// Save configuration.
		$w3tc_config->set( 'cdnfsd.bunnycdn.pull_zone_id', (int) $pull_zone_id );
		$w3tc_config->set( 'cdnfsd.bunnycdn.name', $w3tc_name );
		$w3tc_config->set( 'cdnfsd.bunnycdn.origin_url', $w3tc_origin_url );
		$w3tc_config->set( 'cdnfsd.bunnycdn.cdn_hostname', $w3tc_cdn_hostname );
		$w3tc_config->save();

		// Print success view.
		include W3TC_DIR . '/Cdnfsd_BunnyCdn_Popup_View_Configured.php';
		\wp_die();
	}

	/**
	 * W3TC AJAX: Deauthorization form.
	 *
	 * @since 2.6.0
	 */
	public function w3tc_ajax_cdn_bunnycdn_fsd_deauthorization() {
		$w3tc_config         = Dispatcher::config();
		$w3tc_origin_url     = $w3tc_config->get_string( 'cdnfsd.bunnycdn.origin_url' ); // Origin URL or IP.
		$w3tc_name           = $w3tc_config->get_string( 'cdnfsd.bunnycdn.name' ); // Pull zone name.
		$w3tc_cdn_hostname   = $w3tc_config->get_string( 'cdnfsd.bunnycdn.cdn_hostname' ); // Pull zone CDN hostname.
		$cdn_pull_zone_id    = $w3tc_config->get_string( 'cdn.bunnycdn.pull_zone_id' ); // CDN pull zone id.
		$cdnfsd_pull_zone_id = $w3tc_config->get_string( 'cdnfsd.bunnycdn.pull_zone_id' ); // CDN FSD pull zone id.

		// Present details and ask to deauthorize and optionally delete the pull zone.
		include W3TC_DIR . '/Cdnfsd_BunnyCdn_Popup_View_Deauthorize.php';
		\wp_die();
	}

	/**
	 * W3TC AJAX: Deauthorize.
	 *
	 * Deauthorize and optionally delete the pull zone.
	 *
	 * @since 2.6.0
	 */
	public function w3tc_ajax_cdn_bunnycdn_fsd_deauthorize() {
		$w3tc_config          = Dispatcher::config();
		$w3tc_account_api_key = $w3tc_config->get_string( 'cdn.bunnycdn.account_api_key' );
		$cdn_pull_zone_id     = $w3tc_config->get_integer( 'cdn.bunnycdn.pull_zone_id' ); // CDN pull zone id.
		$cdnfsd_pull_zone_id  = $w3tc_config->get_integer( 'cdnfsd.bunnycdn.pull_zone_id' ); // CDN FSD pull zone id.
		$delete_pull_zone     = Util_Request::get_string( 'delete_pull_zone' );

		// Delete pull zone, if requested.
		if ( 'yes' === $delete_pull_zone ) {
			$api = new Cdn_BunnyCdn_Api(
				Cdn_BunnyCdn_Api::client_config_from_saved(
					$w3tc_account_api_key,
					$w3tc_config,
					'cdnfsd.bunnycdn.verify_tls_certificates'
				)
			);

			// Try to delete pull zone.
			try {
				$api->delete_pull_zone( $cdnfsd_pull_zone_id );
			} catch ( \Exception $ex ) {
				$delete_error_message = $ex->getMessage();
			}

			// If the same pull zone is used for CDN Objects, then deauthorize that too.
			if ( ! empty( $cdnfsd_pull_zone_id ) && $cdnfsd_pull_zone_id === $cdn_pull_zone_id ) {
				$w3tc_config->set( 'cdn.bunnycdn.pull_zone_id', null );
				$w3tc_config->set( 'cdn.bunnycdn.name', null );
				$w3tc_config->set( 'cdn.bunnycdn.origin_url', null );
				$w3tc_config->set( 'cdn.bunnycdn.cdn_hostname', null );
			}
		}

		$w3tc_config->set( 'cdnfsd.bunnycdn.pull_zone_id', null );
		$w3tc_config->set( 'cdnfsd.bunnycdn.name', null );
		$w3tc_config->set( 'cdnfsd.bunnycdn.origin_url', null );
		$w3tc_config->set( 'cdnfsd.bunnycdn.cdn_hostname', null );
		$w3tc_config->save();

		// Print success view.
		include W3TC_DIR . '/Cdnfsd_BunnyCdn_Popup_View_Deauthorized.php';
		\wp_die();
	}

	/**
	 * Render intro.
	 *
	 * @since  2.6.0
	 * @access private
	 *
	 * @param array $details {
	 *     Details for the modal.
	 *
	 *     @type string $w3tc_account_api_key Account API key.
	 *     @type string $error_message Error message (optional).
	 * }
	 */
	private function render_intro( array $details ) {
		include W3TC_DIR . '/Cdnfsd_BunnyCdn_Popup_View_Intro.php';
		\wp_die();
	}
}