<?php
/**
 * Nabeh Integration — Verify Payment (Proxy to Wallet Server)
 *
 * This script forwards requests to the actual Wallet Server endpoint
 * where the Gemini AI and invoice processing logic resides.
 */
header('Access-Control-Allow-Origin: *');
header('Access-Control-Allow-Methods: POST, OPTIONS');
header('Access-Control-Allow-Headers: Content-Type, X-API-Key');

if ($_SERVER['REQUEST_METHOD'] === 'OPTIONS') {
    http_response_code(200);
    exit;
}

require_once __DIR__ . '/../core/bootstrap.php';

$walletUrl = getenv('WALLET_SERVER_URL') ?: 'https://walletintaleq.intaleq.xyz';
$endpoint = rtrim($walletUrl, '/') . '/v2/main/ride/nabeh/verify_payment.php';

$headers = [
    'Content-Type: application/json'
];

if (isset($_SERVER['HTTP_X_API_KEY'])) {
    $headers[] = 'X-API-Key: ' . $_SERVER['HTTP_X_API_KEY'];
}

$rawInput = file_get_contents('php://input');

$ch = curl_init($endpoint);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS, $rawInput);
curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
// curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); // Enable in local dev if needed

$response = curl_exec($ch);
$httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

if ($httpCode) {
    http_response_code($httpCode);
} else {
    http_response_code(500);
    $response = json_encode(['status' => 'error', 'message' => 'Failed to connect to Wallet Server']);
}

echo $response;