// Function to generate a random Base64-encoded string
function generateRandomBase64($length = 60) {
    return base64_encode(random_bytes($length));
}

// Function to generate a SHA-512 hashed secret
function generateApiSecret($secret) {
    return crypt($secret, '$6$');
}

// Load the XML file
$xml = new DOMDocument();
$xml->load('/conf/config.xml');

// XPath to find the root user node
$xpath = new DOMXPath($xml);
$query = "/opnsense/system/user[name='root']";
$rootUser = $xpath->query($query)->item(0);

if ($rootUser) {
    // Find or create the <apikeys> element
    $apikeys = $rootUser->getElementsByTagName('apikeys')->item(0);
    if (!$apikeys) {
        $apikeys = $xml->createElement('apikeys');
        $rootUser->appendChild($apikeys);
    }

    // Generate new API key and secret
    $newApiKey = generateRandomBase64();
    $newApiSecret = generateRandomBase64();

    // Create the new <item> element with <key> and <secret>
    $item = $xml->createElement('item');
    $key = $xml->createElement('key', $newApiKey);
    $secret = $xml->createElement('secret', generateApiSecret($newApiSecret));

    $item->appendChild($key);
    $item->appendChild($secret);
    $apikeys->appendChild($item);

    // Save the updated XML back to the file
    $xml->save('/conf/config.xml');

    // Save the original API key and secret to a file
    $fileContent = "APIKEY='$newApiKey'\nAPISECRET='$newApiSecret'\n";
    file_put_contents('./apikey', $fileContent);

    echo "API key and secret added successfully.\n";
    echo "API Key: $newApiKey\n";
    echo "API Secret: $newApiSecret\n";
} else {
    echo "Root user not found.\n";
}

?>