From 56e147e1c271da104ac5ad93a485f79abd8334c6 Mon Sep 17 00:00:00 2001
From: Pingu <Verwaltung@fuyuzakura.de>
Date: Mon, 20 Jul 2026 20:35:41 +0000
Subject: [PATCH] =?UTF-8?q?Webhooks/master=5Fwebhook.php=20hinzugef=C3=BCg?=
 =?UTF-8?q?t?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 Webhooks/master_webhook.php | 152 ++++++++++++++++++++++++++++++++++++
 1 file changed, 152 insertions(+)
 create mode 100644 Webhooks/master_webhook.php

diff --git a/Webhooks/master_webhook.php b/Webhooks/master_webhook.php
new file mode 100644
index 0000000..c09d855
--- /dev/null
+++ b/Webhooks/master_webhook.php
@@ -0,0 +1,152 @@
+<?php
+ini_set('display_errors', 1);
+ini_set('display_startup_errors', 1);
+error_reporting(E_ALL);
+$config = require_once __DIR__ . '/../config.php';
+
+function logMasterDebug($message) {
+    file_put_contents('webhook_master_debug.log', date('Y-m-d H:i:s') . " - " . $message . PHP_EOL, FILE_APPEND);
+}
+
+logMasterDebug("Master-Webhook aufgerufen.");
+
+
+$api_key        = $config['api_key'];
+$webhook_secret = $config['webhook_secret'];
+$nextcloud_user = $config['nextcloud']['user'];
+$nextcloud_pass = $config['nextcloud']['pass'];
+$nextcloud_urls = $config['nextcloud']['urls'];
+
+
+$signature = '';
+if (function_exists('getallheaders')) {
+    $headers = array_change_key_case(getallheaders(), CASE_LOWER);
+    $signature = $headers['x-docuseal-signature'] ?? '';
+}
+if (empty($signature)) {
+    $signature = $_SERVER['HTTP_X_DOCUSEAL_SIGNATURE'] ?? $_SERVER['x-docuseal-signature'] ?? '';
+}
+
+if (empty($signature) || $signature !== $webhook_secret) {
+    logMasterDebug("FEHLER: Secret passt nicht.");
+    http_response_code(403);
+    die('Zugriff verweigert.');
+}
+
+$json = file_get_contents('php://input');
+$data = json_decode($json, true);
+$event = $data['event_type'] ?? 'unbekannt';
+$template_id = $data['data']['template']['id'] ?? null;
+
+logMasterDebug("Event: $event | Template-ID: $template_id");
+
+if ($event !== 'submission.completed' && $event !== 'form.submitted') {
+    logMasterDebug("Event wird ignoriert.");
+    exit;
+}
+
+$pdf_url = $data['data']['documents'][0]['url'] ?? '';
+$submission_id = $data['data']['id'] ?? null;
+$fields = $data['data']['submitters'][0]['values'] ?? [];
+$values = [];
+foreach ($fields as $item) {
+    $values[strtolower($item['field'])] = $item['value'];
+}
+
+$time_raw = $data['data']['completed_at'] ?? 'now';
+$datum    = date('Y-m-d', strtotime($time_raw));
+$uhrzeit  = date('H-i', strtotime($time_raw));
+
+if (!isset($nextcloud_urls[$template_id])) {
+    logMasterDebug("Unbekannte oder nicht konfigurierte Template-ID: $template_id. Abbruch.");
+    exit;
+}
+
+$nextcloud_url = $nextcloud_urls[$template_id];
+switch ($template_id) {
+    case 2:
+        $shop_name = $values['shop_name'] ?? 'unbekannter_stand';
+        $safe_name = str_replace([' ', 'ä', 'ö', 'ü', 'ß', ';', '/'], ['_', 'ae', 'oe', 'ue', 'ss', '-', '-'], strtolower($shop_name));
+        $filename = 'haendler_' . $safe_name . '_' . $datum . '_' . $uhrzeit . '.pdf';
+        break;
+    case 4:
+
+        $vorname = $values['vorname'] ?? '';
+        $nachname = $values['nachname'] ?? 'helfer';
+        $name = trim($vorname . '_' . $nachname);
+        $safe_name = str_replace([' ', 'ä', 'ö', 'ü', 'ß', ';', '/'], ['_', 'ae', 'oe', 'ue', 'ss', '-', '-'], strtolower($name));
+        $filename = 'helfer_' . $safe_name . '_' . $datum . '_' . $uhrzeit . '.pdf';
+        break;
+    case 5:
+        $act_name = $values['act_name'] ?? 'unbekannter_act';
+        $safe_name = str_replace([' ', 'ä', 'ö', 'ü', 'ß', ';', '/'], ['_', 'ae', 'oe', 'ue', 'ss', '-', '-'], strtolower($act_name));
+        $filename = 'showact_' . $safe_name . '_' . $datum . '_' . $uhrzeit . '.pdf';
+        break;
+    default:
+        $name = $values['contact_name'] ?? $values['shop_name'] ?? 'eintrag';
+        $safe_name = str_replace([' ', 'ä', 'ö', 'ü', 'ß', ';', '/'], ['_', 'ae', 'oe', 'ue', 'ss', '-', '-'], strtolower($name));
+        $filename = 'formular_' . $template_id . '_' . $safe_name . '_' . $datum . '_' . $uhrzeit . '.pdf';
+        break;
+}
+
+if (!empty($pdf_url)) {
+
+    $ch_down = curl_init($pdf_url);
+    curl_setopt($ch_down, CURLOPT_RETURNTRANSFER, true);
+    curl_setopt($ch_down, CURLOPT_FOLLOWLOCATION, true);
+    $pdf_content = curl_exec($ch_down);
+    $down_status = curl_getinfo($ch_down, CURLINFO_HTTP_CODE);
+    curl_close($ch_down);
+
+    if ($pdf_content && $down_status == 200) {
+
+        $full_target_url = rtrim($nextcloud_url, '/') . '/' . rawurlencode($filename);
+        
+        $fh = tmpfile();
+        fwrite($fh, $pdf_content);
+        fseek($fh, 0); 
+        
+        $ch_up = curl_init($full_target_url);
+        curl_setopt($ch_up, CURLOPT_USERPWD, $nextcloud_user . ':' . $nextcloud_pass);
+        
+        curl_setopt($ch_up, CURLOPT_UPLOAD, true); 
+        
+        curl_setopt($ch_up, CURLOPT_INFILE, $fh);
+        curl_setopt($ch_up, CURLOPT_INFILESIZE, strlen($pdf_content));
+        curl_setopt($ch_up, CURLOPT_RETURNTRANSFER, true);
+        curl_setopt($ch_up, CURLOPT_HTTPHEADER, [
+            'Expect:', 
+            'Content-Type: application/pdf'
+        ]);
+        
+        $result = curl_exec($ch_up);
+        $http_code = curl_getinfo($ch_up, CURLINFO_HTTP_CODE);
+        curl_close($ch_up);
+        fclose($fh);
+        
+        if ($http_code >= 200 && $http_code < 300) {
+            logMasterDebug("Erfolgreich hochgeladen: $filename in Ordner für Template $template_id");
+
+            if ($submission_id) {
+                $ch_del = curl_init("https://docusign.fuyuzakura.de/api/v1/submissions/" . $submission_id);
+                curl_setopt($ch_del, CURLOPT_CUSTOMREQUEST, "DELETE");
+                curl_setopt($ch_del, CURLOPT_HTTPHEADER, [
+                    "X-Auth-Token: " . $api_key,
+                    "Content-Type: application/json"
+                ]);
+                curl_setopt($ch_del, CURLOPT_RETURNTRANSFER, true);
+                curl_exec($ch_del);
+                curl_close($ch_del);
+            }
+            echo "Erfolg!";
+        } else {
+            logMasterDebug("Nextcloud Upload Fehler. HTTP: $http_code");
+            http_response_code(500);
+        }
+    } else {
+        logMasterDebug("Fehler beim Herunterladen der PDF von DocuSeal. HTTP-Code: $down_status");
+    }
+} else {
+    logMasterDebug("Keine PDF-URL im Payload gefunden.");
+}
+?>
\ No newline at end of file