<?php
if ( ! defined( 'ABSPATH' ) ) exit;

function zerocert_register_endpoint() {
    add_rewrite_rule(
        '^\.well-known/0cert$',
        'index.php?zerocert_verify=1',
        'top'
    );
    add_rewrite_tag( '%zerocert_verify%', '([^&]+)' );
}

function zerocert_handle_endpoint() {
    if ( get_query_var( 'zerocert_verify' ) ) {
        $identity = get_option( 'zerocert_identity', '' );
        $kgc      = get_option( 'zerocert_kgc', ZEROCERT_KGC_DEFAULT );
        $status   = get_option( 'zerocert_status', 'not_configured' );
        $key_id   = get_option( 'zerocert_key_id', '' );

        $payload = array(
            'ok'        => true,
            'version'   => ZEROCERT_VERSION,
            'identity'  => $identity,
            'kgc'       => $kgc,
            'status'    => ( $status === 'verified' ) ? 'verified' : 'pending',
            'keyId'     => $key_id,
            'algorithm' => 'CL-PKC-ECDH-v2',
            'plugin'    => 'wordpress',
        );

        header( 'Content-Type: application/json' );
        header( 'Access-Control-Allow-Origin: *' );
        header( 'Cache-Control: no-cache' );
        echo wp_json_encode( $payload );
        exit;
    }
}