/**
 * VERITAS Dashboard - API Proxy
 * Compatible with PHP 5.4+ and all WordPress versions
 * In WPCode: paste as-is (leave "Run snippet" type as PHP)
 * In functions.php: paste as-is after the opening <?php line
 */

add_action( 'wp_ajax_veritas_proxy',        'veritas_proxy_handler' );
add_action( 'wp_ajax_nopriv_veritas_proxy', 'veritas_proxy_handler' );

function veritas_proxy_handler() {

    $raw     = isset( $_POST['payload'] ) ? stripslashes( $_POST['payload'] ) : '{}';
    $payload = json_decode( $raw, true );

    if ( empty( $payload ) || ! isset( $payload['url'] ) ) {
        wp_send_json_error( 'No URL provided' );
        return;
    }

    $url     = esc_url_raw( $payload['url'] );
    $method  = isset( $payload['method'] )  ? strtoupper( $payload['method'] )  : 'GET';
    $headers = isset( $payload['headers'] ) ? $payload['headers']                : array();
    $body    = isset( $payload['body'] )    ? $payload['body']                   : null;

    $args = array(
        'method'    => $method,
        'headers'   => $headers,
        'timeout'   => 30,
        'sslverify' => true,
    );

    if ( ! empty( $body ) ) {
        $args['body'] = $body;
    }

    $response = wp_remote_request( $url, $args );

    if ( is_wp_error( $response ) ) {
        wp_send_json( array( 'error' => array( 'message' => $response->get_error_message() ) ) );
        return;
    }

    $body_raw = wp_remote_retrieve_body( $response );
    $decoded  = json_decode( $body_raw, true );

    if ( $decoded !== null ) {
        echo json_encode( $decoded );
    } else {
        echo $body_raw;
    }

    wp_die();
}