Test using PFX certificates

<?php
require_once('vendor/autoload.php');

use Facebook\WebDriver\Remote\RemoteWebDriver;
use Facebook\WebDriver\Remote\DesiredCapabilities;
use Facebook\WebDriver\WebDriverException;

class BrowserStackClientCertTest
{
    private const USERNAME = "";
    private const ACCESS_KEY = "";
    // NOTE: HUB_URL is defined WITHOUT credentials here
    private const HUB_URL = "https://hub-cloud.browserstack.com/wd/hub";

    public static function runTest()
    {
        $driver = null;
        try {
            // 1. Base capabilities
            $capabilities = DesiredCapabilities::chrome();
            $capabilities->setCapability('browserVersion', '126.0'); // Use stable version

            // 2. bstack:options (MUST include 'user' and 'key' explicitly for Hub processing)
            $bstackOptions = [
                'os'          => 'OS X',
                'osVersion'   => 'Sequoia',

                'userName'    => self::USERNAME,
                'accessKey'   => self::ACCESS_KEY, 

                // Optional metadata
                'projectName' => 'test-cert',
                'buildName'   => 'pfx cert check',
                'sessionName' => 'csharp certificate test',
                'accessibility' => true,
                'selfHeal'    => true,
                'debug'       => true,

                // --- Certificate and Media Configuration ---
                'uploadMedia' => ['media://xyz'],

                'customCertificate' => [
                    'media://xyz' => [
                        'password' => 'badssl.com'
                    ]
                ],
                "chromeOptions" => [
                    'prefs' => [
                                    "profile.managed_auto_select_certificate_for_urls" => [
                                            json_encode([
                                                "pattern" => "https://client.badssl.com",
                                                "filter"  => [
                                                    "SUBJECT" => [ "CN" => "BadSSL Client Certificate" ]
                                                ]
                                            ])
                                    ]
                    ]
                ]
                
            ];

            // 4. Attach capabilities
            $capabilities->setCapability('bstack:options', $bstackOptions);

            echo "Connecting to BrowserStack...\n";
            
            // 5. Build driver using clean HUB URL and rely on BStack capabilities for auth
            $driver = RemoteWebDriver::create(self::HUB_URL, $capabilities, 300000, 300000); 

            echo "Connected successfully. Session ID: " . $driver->getSessionID() . PHP_EOL;

            // 6. Run test
            $driver->get('https://client.badssl.com/');

            // simple sleep to let browser load and (hopefully) auto-select certificate
            sleep(5);

            // Take screenshot
            $imagePath = 'screenshotpfx.png';
            $driver->takeScreenshot($imagePath);
            echo "Screenshot saved to {$imagePath}\n";

        } catch (WebDriverException $e) {
            error_log("WebDriverException: " . $e->getMessage());
            echo "WebDriverException: " . $e->getMessage() . PHP_EOL;
        } catch (\Exception $e) {
            error_log("Exception: " . $e->getMessage());
            echo "Exception: " . $e->getMessage() . PHP_EOL;
        } finally {
            if ($driver !== null) {
                $driver->quit();
            }
        }
    }
}

BrowserStackClientCertTest::runTest();