<?php
/*
 * Copyright (c) 2026 AltumCode (https://altumcode.com/)
 *
 * This software is licensed exclusively by AltumCode and is sold only via https://altumcode.com/.
 * Unauthorized distribution, modification, or use of this software without a valid license is not permitted and may be subject to applicable legal actions.
 *
 * 🌍 View all other existing AltumCode projects via https://altumcode.com/
 * 📧 Get in touch for support or general queries via https://altumcode.com/contact
 * 📤 Download the latest version via https://altumcode.com/downloads
 *
 * 🐦 X/Twitter: https://x.com/AltumCode
 * 📘 Facebook: https://facebook.com/altumcode
 * 📸 Instagram: https://instagram.com/altumcode
 */

namespace Altum\Controllers;

use Altum\Models\Payments;

defined('ALTUMCODE') || die();

class WebhookMercadopago extends Controller {

    public function index() {

        /* Make sure no cache is being used on the endpoint */
		header('Cache-Control: no-store');

        if(!in_array(settings()->license->type, ['Extended License', 'extended'])) {
            throw_404();
        }

        if((strtoupper($_SERVER['REQUEST_METHOD']) != 'POST')) {
            throw_404();
        }

        /* Get the headers */
        $headers = getallheaders();

        /* Get the payload */
        $payload = trim(@file_get_contents('php://input'));

        /* Log for debugging purposes */
        debug_log('[' . \Altum\Router::$controller . '] ' . print_r(['headers' => $headers, 'payload' => $payload], true));

        $data = json_decode($payload, true);

        if(!$data) {
            die();
        }

        if(!in_array($data['action'], ['payment.created', 'payment.updated'])) {
            die();
        }

        /* Get payment data */
        $external_payment_id = $data['data']['id'];

        $response = \Unirest\Request::get(
            'https://api.mercadopago.com/v1/payments/' . $external_payment_id,
            ['Authorization' => 'Bearer ' . settings()->mercadopago->access_token]
        );

        /* Check against errors */
        if($response->code >= 400) {
            http_response_code(400); die($response->body->error . ':' . $response->body->message);
        }

        $payment = $response->body;

        /* Make sure payment is existing */
        if(!$payment) {
            http_response_code(400); die('payment not found');
        }

        /* Make sure payment is approved */
        if($payment->status != 'approved') {
            http_response_code(400); die('payment is not approved');
        }

        $payment_subscription_id = null;

        /* Start getting the payment details */
        $payment_total = $payment->transaction_details->total_paid_amount;
        $payment_currency = $payment->currency_id;
        $payment_type = $payment_subscription_id ? 'recurring' : 'one_time';

        /* Payment payer details */
        $payer_email = $payment->payer->email;
        $payer_name = $payment->payer->first_name . ' ' . $payment->payer->last_name;

        /* Process meta data */
        $metadata = explode('&', $payment->external_reference);
        $user_id = (int) $metadata[0];
        $plan_id = (int) $metadata[1];
        $payment_frequency = $metadata[2];
        $base_amount = $metadata[3];
        $code = $metadata[4];
        $discount_amount = $metadata[5] ? $metadata[5] : 0;
        $taxes_ids = $metadata[6] ?: null;

        (new Payments())->webhook_process_payment(
            'mercadopago',
            $external_payment_id,
            $payment_total,
            $payment_currency,
            $user_id,
            $plan_id,
            $payment_frequency,
            $code,
            $discount_amount,
            $base_amount,
            $taxes_ids,
            $payment_type,
            $payment_subscription_id,
            $payer_email,
            $payer_name
        );

        echo 'successful';

    }

}
