<?php

/**
 * @package    Grav\Common\Service
 *
 * @copyright  Copyright (c) 2015 - 2026 Trilby Media, LLC. All rights reserved.
 * @license    MIT License; see LICENSE file for details.
 */

namespace Grav\Common\Service;

use Grav\Common\Uri;
use Nyholm\Psr7\Factory\Psr17Factory;
use Nyholm\Psr7Server\ServerRequestCreator;
use Pimple\Container;
use Pimple\ServiceProviderInterface;
use Psr\Http\Message\ServerRequestInterface;
use Psr\Http\Message\UriInterface;
use function explode;
use function fopen;
use function function_exists;
use function in_array;
use function is_array;
use function strtolower;
use function trim;

/**
 * Class RequestServiceProvider
 * @package Grav\Common\Service
 */
class RequestServiceProvider implements ServiceProviderInterface
{
    /**
     * @param Container $container
     * @return void
     */
    public function register(Container $container)
    {
        $container['request'] = function () {
            $psr17Factory = new Psr17Factory();
            $creator = new ServerRequestCreator(
                $psr17Factory, // ServerRequestFactory
                $psr17Factory, // UriFactory
                $psr17Factory, // UploadedFileFactory
                $psr17Factory  // StreamFactory
            );

            $server = $_SERVER;
            if (false === isset($server['REQUEST_METHOD'])) {
                $server['REQUEST_METHOD'] = 'GET';
            }
            $method = $server['REQUEST_METHOD'];

            $headers = function_exists('getallheaders') ? getallheaders() : $creator::getHeadersFromServer($_SERVER);

            $post = null;
            if (in_array($method, ['POST', 'PUT', 'PATCH', 'DELETE'])) {
                foreach ($headers as $headerName => $headerValue) {
                    if ('content-type' !== strtolower($headerName)) {
                        continue;
                    }

                    $contentType = strtolower(trim(explode(';', $headerValue, 2)[0]));
                    switch ($contentType) {
                        case 'application/x-www-form-urlencoded':
                        case 'multipart/form-data':
                            $post = $_POST;
                            break 2;
                        case 'application/json':
                        case 'application/vnd.api+json':
                            // Decoded once the configuration has loaded, within its limits:
                            // see JsonBody::parseRequest() in InitializeProcessor.
                            break 2;
                    }
                }
            }

            $get = $_GET;

            // The web server did not pass the query string on: read it from the request URI.
            $query = static::queryFromRequestUri($server, $get);
            if ($query !== null) {
                $server['QUERY_STRING'] = $query;
                parse_str($query, $get);
            }

            // Remove _url from ngnix routes.
            unset($get['_url']);
            if (isset($server['QUERY_STRING'])) {
                $query = $server['QUERY_STRING'];
                if (str_contains($query, '_url=')) {
                    parse_str($query, $query);
                    unset($query['_url']);
                    $server['QUERY_STRING'] = http_build_query($query);
                }
            }

            // Setup needs the request before configuration is available.
            $server['REQUEST_SCHEME'] = Uri::getSchemeFromEnvironment($server);
            unset($server['HTTP_X_FORWARDED_PROTO']);
            $request = $creator->fromArrays($server, $headers, $_COOKIE, $get, $post, $_FILES, fopen('php://input', 'rb') ?: null);

            return $request->withUri(self::withoutStandardPort($request->getUri()->withScheme($server['REQUEST_SCHEME'])))->withAttribute('grav.server', $_SERVER);
        };

        $container['route'] = $container->factory(fn() => clone Uri::getCurrentRoute());
    }

    /**
     * Apply protocol forwarding once configuration has been loaded.
     */
    public static function applyForwardedProtocol(ServerRequestInterface $request, bool $enabled): ServerRequestInterface
    {
        $server = $request->getAttribute('grav.server', $request->getServerParams());
        $uri = $request->getUri()->withScheme(Uri::getSchemeFromEnvironment($server, $enabled));
        if ($enabled && isset($server['HTTP_CLOUDFRONT_FORWARDED_PROTO']) && !isset($server['HTTP_X_FORWARDED_PORT']) && !isset($server['X-FORWARDED-PORT'])) {
            $uri = $uri->withPort(null);
        }

        return $request->withUri(self::withoutStandardPort($uri));
    }

    /**
     * Drop port 80 or 443 whichever scheme the request ends up with, as Uri::hasStandardPort() does.
     * Behind a proxy that ends TLS, the web server reports HTTPS=on on port 80, and keeping the port
     * would send redirects to https://host:80/.
     */
    private static function withoutStandardPort(UriInterface $uri): UriInterface
    {
        return in_array($uri->getPort(), [80, 443], true) ? $uri->withPort(null) : $uri;
    }

    /**
     * The query string to take from REQUEST_URI, or null when the web server passed one itself.
     *
     * A server that rewrites to index.php without the query string (nginx
     * `try_files $uri $uri/ /index.php;`, a `proxy_pass` built from `$uri`, an
     * Apache rule with QSD) leaves QUERY_STRING and $_GET empty while REQUEST_URI
     * still has the query. Uri::init() reads REQUEST_URI in that case, so
     * `$grav['uri']->query()` kept working while `$grav['request']->getQueryParams()`
     * came back empty, and every query parameter of an API request was ignored
     * without an error (#4338).
     *
     * @param array $server Server variables.
     * @param array $get Query parameters PHP parsed ($_GET).
     * @return string|null
     */
    public static function queryFromRequestUri(array $server, array $get): ?string
    {
        if ($get || (string)($server['QUERY_STRING'] ?? '') !== '') {
            return null;
        }

        $query = parse_url('http://example.com' . ($server['REQUEST_URI'] ?? '/'), PHP_URL_QUERY);

        return is_string($query) && $query !== '' ? $query : null;
    }
}