<?php
// ================== TUPPAFRICA CONSULTANT UPDATER ==================
// Fetches fresh product data from the Tupperware API and saves to tupperware.json.

$json_file = 'tupperware.json';
$login_phone = '0646174008';
$login_pin = '5489';

// --- CORRECT ENDPOINTS AND FIELDS (from network inspection) ---
$login_url = 'https://tma.tuppafrica.co.za/api/login';
$products_url = 'https://tma.tuppafrica.co.za/api/common/getshopdata/-1';

// The payload field names as observed in the Network tab
$phone_field = 'SMSQueryCell';
$pin_field = 'MobiPass';
$pwa_field = 'IsPWA';          // always set to 1

// Login expects JSON (Content-Type: application/json)
$use_json_payload = true;

// -------------------------------------------------------------------
function fetchProducts($login_url, $login_phone, $login_pin, $products_url, $phone_field, $pin_field, $pwa_field, $use_json_payload) {
    $ch = curl_init();

    // --- LOGIN REQUEST (exact payload from browser) ---
    $login_data = [
        $pwa_field => 1,
        $phone_field => $login_phone,
        $pin_field => $login_pin
    ];

    curl_setopt($ch, CURLOPT_URL, $login_url);
    curl_setopt($ch, CURLOPT_POST, true);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36');
    curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);

    if ($use_json_payload) {
        curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($login_data));
        curl_setopt($ch, CURLOPT_HTTPHEADER, ['Content-Type: application/json']);
    } else {
        curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($login_data));
        curl_setopt($ch, CURLOPT_HTTPHEADER, ['Content-Type: application/x-www-form-urlencoded']);
    }

    $login_response = curl_exec($ch);
    $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);

    if ($http_code !== 200) {
        return ['error' => "Login POST failed with HTTP $http_code. Response: " . substr($login_response, 0, 500)];
    }

    $login_data = json_decode($login_response, true);
    if (!$login_data) {
        return ['error' => "Login response is not valid JSON: " . substr($login_response, 0, 500)];
    }

    // Extract token from the response structure
    $token = $login_data['data']['token'] ?? null;
    if (!$token) {
        $debug = "Keys in top-level: " . implode(', ', array_keys($login_data));
        if (isset($login_data['data'])) {
            $debug .= " | data keys: " . implode(', ', array_keys($login_data['data']));
        }
        return ['error' => "No token found. $debug. Full response: " . substr($login_response, 0, 500)];
    }

    // --- FETCH PRODUCTS using Bearer token ---
    curl_setopt($ch, CURLOPT_URL, $products_url);
    curl_setopt($ch, CURLOPT_POST, false);
    curl_setopt($ch, CURLOPT_HTTPGET, true);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_HTTPHEADER, [
        'Authorization: Bearer ' . $token,
        'Content-Type: application/json',
        'User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36'
    ]);
    curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);

    $json_data = curl_exec($ch);
    $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
    curl_close($ch);

    if ($http_code !== 200) {
        return ['error' => "Failed to fetch products: HTTP $http_code. Response: " . substr($json_data, 0, 500)];
    }

    // Validate JSON
    $decoded = json_decode($json_data, true);
    if ($decoded === null) {
        return ['error' => "Invalid JSON from products endpoint: " . substr($json_data, 0, 500)];
    }

    return ['success' => true, 'data' => $json_data];
}

// -------------------------------------------------------------------
$fetch_result = fetchProducts($login_url, $login_phone, $login_pin, $products_url, $phone_field, $pin_field, $pwa_field, $use_json_payload);

if (isset($fetch_result['error'])) {
    $hasData = false;
    if (file_exists($json_file)) {
        $content = file_get_contents($json_file);
        $json = json_decode($content, true);
        if (!empty($json['data'])) {
            $hasData = true;
        }
    }
} else {
    file_put_contents($json_file, $fetch_result['data']);
    $hasData = true;
}
?>
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <title>Tupperware Products</title>
    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css" rel="stylesheet">
    <style>
        body { background: #f8f9fa; height: 100vh; display: flex; align-items: center; justify-content: center; font-family: system-ui, -apple-system, sans-serif; }
        .box { max-width: 500px; text-align: center; }
    </style>
</head>
<body>
<div class="box">
    <?php if ($hasData): ?>
        <div class="spinner-border text-success mb-4" style="width: 4.5rem; height: 4.5rem;" role="status"></div>
        <h3 class="text-success">Loading...</h3>
        <script>setTimeout(() => window.location.href = 'products.php', 1200);</script>
    <?php else: ?>
        <div class="alert alert-warning p-4">
            <h4>⚠️ Could not fetch products</h4>
            <p class="mb-3"><?= htmlspecialchars($fetch_result['error'] ?? 'Unknown error') ?></p>
            <p><strong>Current settings:</strong></p>
            <ul class="text-start">
                <li>Login URL: <?= htmlspecialchars($login_url) ?></li>
                <li>Products URL: <?= htmlspecialchars($products_url) ?></li>
                <li>Phone field: <?= htmlspecialchars($phone_field) ?></li>
                <li>PIN field: <?= htmlspecialchars($pin_field) ?></li>
                <li>JSON payload: <?= $use_json_payload ? 'true' : 'false' ?></li>
            </ul>
            <a href="products.php" class="btn btn-outline-secondary mt-3">Try products.php anyway</a>
        </div>
    <?php endif; ?>
</div>
</body>
</html>