<?php

if ( ! defined( 'ABSPATH' ) ) {
	exit; // Exit if accessed directly
}

/**
 * PayPal Express Integrated PayPal Signup Handler.
 */
class WC_Gateway_PPEC_IPS_Handler {

	const MIDDLEWARE_BASE_URL = 'https://connect.woocommerce.com';

	/**
	 * Countries that support IPS.
	 *
	 * @var array
	 */
	// @codingStandardsIgnoreStart
	private $_supported_countries = array(
		'AL', 'DZ', 'AO', 'AI', 'AG', 'AR', 'AM', 'AW', 'AU', 'AT', 'AZ', 'BS',
		'BH', 'BB', 'BE', 'BZ', 'BJ', 'BM', 'BT', 'BO', 'BA', 'BW', 'VG', 'BN',
		'BG', 'BF', 'BI', 'KH', 'CA', 'CV', 'KY', 'TD', 'CL', 'CN', 'C2', 'CO',
		'KM', 'CG', 'CK', 'CR', 'HR', 'CY', 'CZ', 'CD', 'DK', 'DJ', 'DM', 'DO',
		'EC', 'EG', 'SV', 'ER', 'EE', 'ET', 'FK', 'FM', 'FJ', 'FI', 'FR', 'GF',
		'PF', 'GA', 'GM', 'GE', 'DE', 'GI', 'GR', 'GL', 'GD', 'GP', 'GU', 'GT',
		'GN', 'GW', 'GY', 'VA', 'HN', 'HK', 'HU', 'IS', 'ID', 'IE', 'IT', 'JM',
		'JO', 'KZ', 'KE', 'KI', 'KW', 'KG', 'LA', 'LV', 'LS', 'LI', 'LT', 'LU',
		'MG', 'MW', 'MY', 'MV', 'ML', 'MT', 'MH', 'MQ', 'MR', 'MU', 'YT', 'MX',
		'MN', 'MS', 'MA', 'MZ', 'NA', 'NR', 'NP', 'NL', 'AN', 'NC', 'NZ', 'NI',
		'NE', 'NU', 'NF', 'NO', 'OM', 'PW', 'PA', 'PG', 'PE', 'PH', 'PN', 'PL',
		'PT', 'QA', 'RE', 'RO', 'RU', 'RW', 'SH', 'KN', 'LC', 'PM', 'VC', 'WS',
		'SM', 'ST', 'SA', 'SN', 'RS', 'SC', 'SL', 'SG', 'SK', 'SI', 'SB', 'SO',
		'ZA', 'KR', 'ES', 'LK', 'SR', 'SJ', 'SZ', 'SE', 'CH', 'TW', 'TJ', 'TH',
		'TG', 'TO', 'TT', 'TN', 'TR', 'TM', 'TC', 'TV', 'UG', 'UA', 'AE', 'GB',
		'TZ', 'US', 'UY', 'VU', 'VE', 'VN', 'WF', 'YE', 'ZM',
	);
	// @codingStandardsIgnoreEnd

	/**
	 * Get merchant redirect URL for IPS.
	 *
	 * This is store URL that will be redirected from middleware.
	 *
	 * @param string $env Environment
	 *
	 * @return string Redirect URL
	 */
	public function get_redirect_url( $env ) {
		if ( ! in_array( $env, array( 'live', 'sandbox' ), true ) ) {
			$env = 'live';
		}

		return add_query_arg(
			array(
				'env'                     => $env,
				'wc_ppec_ips_admin_nonce' => wp_create_nonce( 'wc_ppec_ips' ),
			),
			wc_gateway_ppec()->get_admin_setting_link()
		);
	}

	/**
	 * Get login URL to WC middleware.
	 *
	 * @param string $env Environment
	 *
	 * @return string Signup URL
	 */
	public function get_middleware_login_url( $env ) {
		$service = 'ppe';
		if ( 'sandbox' === $env ) {
			$service = 'ppesandbox';
		}

		return self::MIDDLEWARE_BASE_URL . '/login/' . $service;
	}

	/**
	 * Get signup URL to WC middleware.
	 *
	 * @param string $env Environment
	 *
	 * @return string Signup URL
	 */
	public function get_signup_url( $env ) {
		$query_args = array(
			'redirect'    => urlencode( $this->get_redirect_url( $env ) ), /* phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.urlencode_urlencode */
			'countryCode' => WC()->countries->get_base_country(),
			'merchantId'  => md5( site_url( '/' ) . time() ),
		);

		return add_query_arg( $query_args, $this->get_middleware_login_url( $env ) );
	}

	/**
	 * Check if base location country supports IPS.
	 *
	 * @return bool Returns true of base country in supported countries
	 */
	public function is_supported() {
		return in_array( WC()->countries->get_base_country(), $this->_supported_countries, true );
	}

	/**
	 * Redirect with messages.
	 *
	 * @return void
	 */
	protected function _redirect_with_messages( $error_msg ) {
		if ( ! is_array( $error_msg ) ) {
			$error_msgs = array( array( 'error' => $error_msg ) );
		} else {
			$error_msgs = $error_msg;
		}

		add_option( 'woo_pp_admin_error', $error_msgs );
		wp_safe_redirect( wc_gateway_ppec()->get_admin_setting_link() );
		exit;
	}

	/**
	 * Maybe received credentials after successfully returned from IPS flow.
	 *
	 * @return mixed
	 */
	public function maybe_received_credentials() {
		if ( ! is_admin() || ! is_user_logged_in() ) {
			return false;
		}

		// Require the nonce.
		if ( empty( $_GET['wc_ppec_ips_admin_nonce'] ) || empty( $_GET['env'] ) ) {
			return false;
		}
		$env = in_array( $_GET['env'], array( 'live', 'sandbox' ), true ) ? $_GET['env'] : 'live'; // phpcs:ignore WordPress.Security.NonceVerification.Recommended,WordPress.Security.ValidatedSanitizedInput.InputNotSanitized,WordPress.Security.ValidatedSanitizedInput.MissingUnslash

		// Verify the nonce.
		if ( ! wp_verify_nonce( $_GET['wc_ppec_ips_admin_nonce'], 'wc_ppec_ips' ) ) { // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized,WordPress.Security.ValidatedSanitizedInput.MissingUnslash
			wp_die( __( 'Invalid connection request', 'woocommerce-gateway-paypal-express-checkout' ) ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
		}

		wc_gateway_ppec_log( sprintf( '%s: returned back from IPS flow with parameters: %s', __METHOD__, print_r( $_GET, true ) ) ); // phpcs:ignore WordPress.PHP.DevelopmentFunctions.error_log_print_r

		// Check if error.
		if ( ! empty( $_GET['error'] ) ) {
			$error_message = ! empty( $_GET['error_message'] ) ? $_GET['error_message'] : ''; // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized,WordPress.Security.ValidatedSanitizedInput.MissingUnslash
			wc_gateway_ppec_log( sprintf( '%s: returned back from IPS flow with error: %s', __METHOD__, $error_message ) );

			$this->_redirect_with_messages( __( 'Sorry, Easy Setup encountered an error.  Please try again.', 'woocommerce-gateway-paypal-express-checkout' ) );
		}

		// Make sure credentials present in query string.
		foreach ( array( 'api_style', 'api_username', 'api_password', 'signature' ) as $param ) {
			if ( empty( $_GET[ $param ] ) ) {
				wc_gateway_ppec_log( sprintf( '%s: returned back from IPS flow but missing parameter %s', __METHOD__, $param ) );

				$this->_redirect_with_messages( __( 'Sorry, Easy Setup encountered an error.  Please try again.', 'woocommerce-gateway-paypal-express-checkout' ) );
			}
		}

		$creds = new WC_Gateway_PPEC_Client_Credential_Signature( $_GET['api_username'], $_GET['api_password'], $_GET['signature'] ); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotValidated,WordPress.Security.ValidatedSanitizedInput.InputNotSanitized,WordPress.Security.ValidatedSanitizedInput.MissingUnslash

		$error_msgs = array();
		try {
			$payer_id = wc_gateway_ppec()->client->test_api_credentials( $creds, $env );

			if ( ! $payer_id ) {
				$this->_redirect_with_messages( __( 'Easy Setup was able to obtain your API credentials, but was unable to verify that they work correctly.  Please make sure your PayPal account is set up properly and try Easy Setup again.', 'woocommerce-gateway-paypal-express-checkout' ) );
			}
		} catch ( PayPal_API_Exception $ex ) {
			$error_msgs[] = array(
				'warning' => __( 'Easy Setup was able to obtain your API credentials, but an error occurred while trying to verify that they work correctly.  Please try Easy Setup again.', 'woocommerce-gateway-paypal-express-checkout' ),
			);
		}

		$error_msgs[] = array(
			'success' => __( 'Success!  Your PayPal account has been set up successfully.', 'woocommerce-gateway-paypal-express-checkout' ),
		);

		if ( ! empty( $error_msgs ) ) {
			wc_gateway_ppec_log( sprintf( '%s: returned back from IPS flow: %s', __METHOD__, print_r( $error_msgs, true ) ) ); // phpcs:ignore WordPress.PHP.DevelopmentFunctions.error_log_print_r
		}

		// Save credentials to settings API
		$settings_array = (array) get_option( 'woocommerce_ppec_paypal_settings', array() );

		if ( 'live' === $env ) {
			$settings_array['environment']     = 'live';
			$settings_array['api_username']    = $creds->get_username();
			$settings_array['api_password']    = $creds->get_password();
			$settings_array['api_signature']   = is_callable( array( $creds, 'get_signature' ) ) ? $creds->get_signature() : '';
			$settings_array['api_certificate'] = is_callable( array( $creds, 'get_certificate' ) ) ? $creds->get_certificate() : '';
			$settings_array['api_subject']     = $creds->get_subject();
		} else {
			$settings_array['environment']             = 'sandbox';
			$settings_array['sandbox_api_username']    = $creds->get_username();
			$settings_array['sandbox_api_password']    = $creds->get_password();
			$settings_array['sandbox_api_signature']   = is_callable( array( $creds, 'get_signature' ) ) ? $creds->get_signature() : '';
			$settings_array['sandbox_api_certificate'] = is_callable( array( $creds, 'get_certificate' ) ) ? $creds->get_certificate() : '';
			$settings_array['sandbox_api_subject']     = $creds->get_subject();
		}

		update_option( 'woocommerce_ppec_paypal_settings', $settings_array );

		$this->_redirect_with_messages( $error_msgs );
	}
}