<?php
function request($url, $post = null, $cookies = null, $headers = null)
{
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $url);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
    curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 0);
    curl_setopt($ch, CURLOPT_ENCODING, 'gzip, deflate');
    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
    curl_setopt($ch, CURLOPT_HEADER, 1);
    curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 10.0; WOW64; rv:62.0) Gecko/20100101 Firefox/62.0');
    if (! is_null($headers))
        curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
    if (! is_null($cookies))
        curl_setopt($ch, CURLOPT_COOKIE, $cookies);
    if (!is_null($post)){
        curl_setopt($ch, CURLOPT_POST, 1);
        curl_setopt($ch, CURLOPT_POSTFIELDS, $post);
    }
    $resp = curl_exec($ch);
    $header_len = curl_getinfo($ch, CURLINFO_HEADER_SIZE);
    $header = substr($resp, 0, $header_len);
    $body = substr($resp, $header_len);
    curl_close($ch);
    preg_match_all('#Set-Cookie: ([^;]+)#', $header, $d);$cookie = '';
    for ($o=0;$o<count($d[0]);$o++) {
        $cookie.=$d[1][$o].";";
    }

    return [$header, $body, $cookie];
}
$headerd = array(
'Connection: keep-alive',
'Accept: application/json, text/javascript',
'Auth0-Client: eyJuYW1lIjoiYXV0aDAuanMiLCJ2ZXJzaW9uIjoiNi44LjQifQ',
'User-Agent: Mozilla/5.0 (Linux; Android 6.0.1; Redmi 3S Build/MMB29M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/66.0.3359.126 Mobile Safari/537.36
',
'Content-Type: application/x-www-form-urlencoded',
'Accept-Encoding: gzip, deflate',
'Accept-Language: id-ID,en-US;q=0.9',
'X-Requested-With: com.telkomsel.telkomselcm'
);
//submit otp
$d = request('https://tdwidm.telkomsel.com/oauth/ro', 'scope=openid+offline_access&response_type=token&sso=false&device=a91e911fa22f2175352511530830796a%3AMozilla%2F5.0+(Windows+NT+10.0%3B+WOW64%3B+rv%3A62.0)+Gecko%2F20100101+Firefox%2F62.0&connection=sms&username=%2B'.$_GET['nomor'].'&password='.$_GET['otp'].'&client_id=Xlj9pkfK6yYumf6G8KE2S5TDWgTtczb0&grant_type=password', null, $headerd);
$token = $d[1];
preg_match('#{"id_token":"(.+?)"#', $token, $tokenpecah);
$token = $tokenpecah[1];
echo $token;
//print_r($d);
//get info pake token
//$e = request('https://tdwidm.telkomsel.com/tokeninfo', 'id_token='.$token.'', null, $headerd);
//print_r($e);
?>