// RSA+AES-256-GCM hybrid encryption (browser version)
async function encryptData(publicKey, plaintext) {
    const publicKeyBytes = Uint8Array.from(atob(publicKey), c => c.charCodeAt(0));
    const publicKeyObj = await crypto.subtle.importKey(
        "spki", publicKeyBytes,
        { name: "RSA-OAEP", hash: "SHA-256" }, true, ["encrypt"]
    );
    const aesKey = await crypto.subtle.generateKey(
        { name: "AES-GCM", length: 256 }, true, ["encrypt"]
    );
    const nonce = crypto.getRandomValues(new Uint8Array(12));
    const data = new TextEncoder().encode(plaintext);
    const ciphertext = new Uint8Array(
        await crypto.subtle.encrypt({ name: "AES-GCM", iv: nonce }, aesKey, data)
    );
    const aesKeyBytes = new Uint8Array(await crypto.subtle.exportKey("raw", aesKey));
    const encryptedAesKey = new Uint8Array(
        await crypto.subtle.encrypt(
            { name: "RSA-OAEP", hash: "SHA-256" }, publicKeyObj, aesKeyBytes
        )
    );
    const combined = new Uint8Array(encryptedAesKey.length + nonce.length + ciphertext.length);
    combined.set(encryptedAesKey, 0);
    combined.set(nonce, encryptedAesKey.length);
    combined.set(ciphertext, encryptedAesKey.length + nonce.length);
    return btoa(String.fromCharCode(...combined));
}

// Send a print request (browser version, plaintext mode when publicKey is empty)
async function sendPrintRequest(target, printData, publicKey) {
    const plaintext = JSON.stringify(printData);
    const data = publicKey ? await encryptData(publicKey, plaintext) : plaintext;
    const response = await fetch("https://<Api Endpoint>/api/print", {
        method: "POST",
        headers: { "Content-Type": "application/json" },
        body: JSON.stringify({ target, data }),
    });
    if (!response.ok) throw await response.json();
    return { status: "success" };
}

// ── Build request data ──
const target = "<printer ID>";
const publicKey = "MIIBIjANBgkqhkiG9w0BAQEFAAO...";
const printData = {
    url: "https://example.com/document.pdf",
    copies: 1,
    id: "order_123",
    callbackUrl: "https://your-server.com/callback",
};

// ── Encrypted mode: recommended for production ──
sendPrintRequest(target, printData, publicKey)
    .then(() => console.log("Encrypted mode - request successful"))
    .catch((error) => console.error("Request failed:", error));

// ── Plaintext mode: debug only ──
sendPrintRequest(target, printData)
    .then(() => console.log("Plaintext mode - request successful"))
    .catch((error) => console.error("Request failed:", error));