setup_https.sh

#!/usr/bin/env bash
#
# This script helps set up mkcert for local HTTPS development.
#

# Function to check if a command exists
command_exists() {
    command -v "$1" >/dev/null 2>&1
}

# Install mkcert if not already installed
if ! command_exists mkcert; then
    echo "🔐 mkcert not found. Attempting to install..."
    
    if [[ "$OSTYPE" == "linux-gnu"* ]]; then
        # Linux (Debian/Ubuntu)
        if command_exists apt-get; then
            sudo apt-get update
            sudo apt-get install -y libnss3-tools
            # Install mkcert from source
            (
              cd /tmp || exit
              LATEST_VERSION=$(curl -s "https://api.github.com/repos/FiloSottile/mkcert/releases/latest" | grep '"tag_name":' | sed -E 's/.*"([^"]+)".*/\1/')
              if [[ -z "$LATEST_VERSION" ]]; then
                  echo "❌ Could not determine latest mkcert version. Please install manually."
                  exit 1
              fi
              echo "⬇️ Downloading mkcert version $LATEST_VERSION..."
              curl -Lo mkcert "https://github.com/FiloSottile/mkcert/releases/download/${LATEST_VERSION}/mkcert-${LATEST_VERSION}-linux-amd64"
              chmod +x mkcert
              sudo mv mkcert /usr/local/bin/
            )
        else
            echo "❌ Unsupported Linux distribution. Please install mkcert manually."
            echo "   See: https://github.com/FiloSottile/mkcert#installation"
            exit 1
        fi
    elif [[ "$OSTYPE" == "darwin"* ]]; then
        # MacOS
        if command_exists brew; then
            brew install mkcert
            brew install nss # for Firefox
        else
            echo "❌ Homebrew not found. Please install mkcert manually."
            echo "   See: https://github.com/FiloSottile/mkcert#installation"
            exit 1
        fi
    else
        echo "❌ Unsupported OS. Please install mkcert manually."
        echo "   See: https://github.com/FiloSottile/mkcert#installation"
        exit 1
    fi
    
    # Verify installation
    if ! command_exists mkcert; then
        echo "❌ mkcert installation failed. Please try installing it manually."
        exit 1
    fi
fi

echo "✅ mkcert is installed."

# Run mkcert to install the local CA
echo "🔧 Installing local Certificate Authority (CA)..."
mkcert -install

# Generate certificate for localhost
echo "🔑 Generating certificate for localhost..."
mkcert localhost 127.0.0.1

# Rename files to be more generic
mv localhost+1.pem localhost.pem
mv localhost+1-key.pem localhost-key.pem

echo ""
echo "🎉 Success! Certificate and key files created:"
echo "   - localhost.pem"
echo "   - localhost-key.pem"
echo ""
echo "Next steps:"
echo "1. Update your Google OAuth credentials to use HTTPS:"
echo "   - Authorized JavaScript origins: https://localhost:8000"
echo "   - Authorized redirect URIs:    https://localhost:8000/auth"
echo "2. Run the application with: ./run.sh"
echo "3. Access the app at: https://localhost:8000"