Gabriel Kaszewski
81df6eb8ff
- Introduced AccessMode enum to define channel access levels: Public, PasswordProtected, AccountRequired, and OwnerOnly. - Updated Channel and ProgrammingBlock entities to include access_mode and access_password_hash fields. - Enhanced create and update channel functionality to handle access mode and password. - Implemented access checks in channel routes based on the defined access modes. - Modified frontend components to support channel creation and editing with access control options. - Added ChannelPasswordModal for handling password input when accessing restricted channels. - Updated API calls to include channel and block passwords as needed. - Created database migrations to add access_mode and access_password_hash columns to channels table.
64 lines
2.1 KiB
TypeScript
64 lines
2.1 KiB
TypeScript
import { NextRequest } from "next/server";
|
|
|
|
// Server-side URL of the K-TV backend (never exposed to the browser).
|
|
// Falls back to the public URL if the internal one isn't set.
|
|
const API_URL =
|
|
process.env.API_URL ??
|
|
process.env.NEXT_PUBLIC_API_URL ??
|
|
"http://localhost:4000/api/v1";
|
|
|
|
/**
|
|
* GET /api/stream/[channelId]?token=<bearer>
|
|
*
|
|
* Resolves the backend's 307 stream redirect and returns the final
|
|
* Jellyfin URL as JSON. Browsers can't read the Location header from a
|
|
* redirected fetch, so this server-side route does it for them.
|
|
*
|
|
* Returns:
|
|
* 200 { url: string } — stream URL ready to use as <video src>
|
|
* 204 — channel is in a gap (no-signal)
|
|
* 401 — missing token
|
|
* 502 — backend error
|
|
*/
|
|
export async function GET(
|
|
request: NextRequest,
|
|
{ params }: { params: Promise<{ channelId: string }> },
|
|
) {
|
|
const { channelId } = await params;
|
|
const token = request.nextUrl.searchParams.get("token");
|
|
const channelPassword = request.nextUrl.searchParams.get("channel_password");
|
|
const blockPassword = request.nextUrl.searchParams.get("block_password");
|
|
|
|
let res: Response;
|
|
try {
|
|
const headers: Record<string, string> = {};
|
|
if (token) headers["Authorization"] = `Bearer ${token}`;
|
|
if (channelPassword) headers["X-Channel-Password"] = channelPassword;
|
|
if (blockPassword) headers["X-Block-Password"] = blockPassword;
|
|
res = await fetch(`${API_URL}/channels/${channelId}/stream`, {
|
|
headers,
|
|
redirect: "manual",
|
|
});
|
|
} catch {
|
|
return new Response(null, { status: 502 });
|
|
}
|
|
|
|
if (res.status === 204) {
|
|
return new Response(null, { status: 204 });
|
|
}
|
|
|
|
if (res.status === 401 || res.status === 403) {
|
|
const body = await res.json().catch(() => ({}));
|
|
return Response.json(body, { status: res.status });
|
|
}
|
|
|
|
if (res.status === 307 || res.status === 302 || res.status === 301) {
|
|
const location = res.headers.get("Location");
|
|
if (location) {
|
|
return Response.json({ url: location });
|
|
}
|
|
}
|
|
|
|
return new Response(null, { status: 502 });
|
|
}
|