<?php
/**
 * generate_mock_data.php
 * Standalone JWT generator — ZERO external dependencies.
 * Generates HS256 JWT matching Siro JwtService verification logic.
 */

error_reporting(E_ALL);
ini_set('display_errors', '0');

// ── Load .env ──
$loadedFiles = [];
function loadEnvFile(string $path): void {
    global $loadedFiles;
    if (!file_exists($path)) {
        $loadedFiles[] = "NOT_FOUND: $path";
        return;
    }
    $loadedFiles[] = "LOADED: $path";
    foreach (file($path, FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES) as $line) {
        $line = trim($line);
        if (empty($line) || $line[0] === '#' || strpos($line, '=') === false) continue;
        [$name, $value] = explode('=', $line, 2);
        putenv(trim($name) . '=' . trim($value, "\"'"));
        $_ENV[trim($name)] = trim($value, "\"'");
    }
}

loadEnvFile('/home/location/env/.env');
loadEnvFile(dirname(__DIR__) . '/backend/.env');

function getJwtSecret(): string {
    $keyPath = getenv('JWT_SECRET_KEY_PATH');
    if ($keyPath && file_exists($keyPath)) {
        return trim(file_get_contents($keyPath));
    }
    $key = getenv('JWT_SECRET_KEY') ?: ($_ENV['JWT_SECRET_KEY'] ?? '');
    if ($key) return $key;
    $key = getenv('JWT_SECRET') ?: ($_ENV['JWT_SECRET'] ?? '');
    if ($key) return $key;
    return '';
}

function base64url_encode(string $data): string {
    return rtrim(strtr(base64_encode($data), '+/', '-_'), '=');
}

function generate_jwt(string $secret, array $payload): string {
    $header = base64url_encode(json_encode(['alg' => 'HS256', 'typ' => 'JWT']));
    $body   = base64url_encode(json_encode($payload));
    $sig    = base64url_encode(hash_hmac('sha256', "$header.$body", $secret, true));
    return "$header.$body.$sig";
}

$secret = getJwtSecret();
if (empty($secret)) {
    echo json_encode(['error' => 'JWT secret not found in any .env', 'jwt' => '']);
    exit(0);
}

$userId = $argv[1] ?? '999999';
$role   = $argv[2] ?? 'driver';

$aud = ($role === 'driver') ? (getenv('allowedDriver2') ?: 'driver-app:ios') : (getenv('allowed2') ?: 'passenger-app:ios');
$fpPepper = getenv('FP_PEPPER') ?: ($_ENV['FP_PEPPER'] ?? '');
$fpHeader = 'mock_device_fp_' . $userId;
$fpInToken = $fpPepper ? hash('sha256', $fpHeader . $fpPepper) : null;

$payload = [
    'iss'        => getenv('APP_ISSUER') ?: 'SiroApp',
    'aud'        => $aud,
    'user_id'    => (string)$userId,
    'sub'        => (string)$userId,
    'role'       => $role,
    'token_type' => 'access',
    'jti'        => bin2hex(random_bytes(16)),
    'iat'        => time(),
    'exp'        => time() + 86400,
];
if ($fpInToken) {
    $payload['fingerPrint'] = $fpInToken;
}

$jwt = generate_jwt($secret, $payload);

echo json_encode([
    'user_id' => $userId,
    'role'    => $role,
    'jwt'     => $jwt,
    'fp'      => $fpHeader
]);