<?php

if (!defined('ABSPATH')) {
    exit;
}

function canto_handle_detail()
{
    if (!current_user_can('upload_files')) {
        wp_send_json_error('Unauthorized', 403);
    }

    if (!isset($_POST['_wpnonce']) || !wp_verify_nonce($_POST['_wpnonce'], 'canto_detail')) {
        wp_send_json_error('Invalid nonce', 403);
    }

    $subdomain = get_option('fbc_flight_domain');
    $app_api   = get_option('fbc_app_api');
    $scheme    = isset($_POST['scheme']) ? sanitize_text_field($_POST['scheme']) : '';
    $id        = isset($_POST['id']) ? sanitize_text_field($_POST['id']) : '';
    $token     = get_option('fbc_app_token');

    if (!$subdomain || !$app_api || !$scheme || !$id) {
        wp_send_json_error('Missing required parameters', 400);
    }

    $url = 'https://' . $subdomain . '.' . $app_api . '/api/v1/' . $scheme . '/' . $id;

    $response = wp_safe_remote_get(
        $url,
        array(
            'headers' => array(
                'Authorization' => 'Bearer ' . $token,
                'user-agent'    => 'Wordpress Plugin',
                'Content-Type'  => 'application/json;charset=utf-8',
            ),
            'sslverify' => true,
        )
    );

    if (is_wp_error($response)) {
        wp_send_json_error('Unable to fetch data from Canto', 500);
    }

    $body = wp_remote_retrieve_body($response);
    wp_send_json_success($body);
}

add_action('wp_ajax_canto_detail', 'canto_handle_detail');