1f665dcb11
Adapted cookie, origin, URL validation and secret handling from MikaelKW/nodecast-tv-plus. Protect API roles, revoke logins across restart, preserve existing accounts, and isolate transcode sessions by account. Co-authored-by: Mikael <mikaelkwessel@gmail.com>
655 lines
22 KiB
JavaScript
655 lines
22 KiB
JavaScript
const express = require('express');
|
|
const router = express.Router();
|
|
const { validateHttpUrl } = require('../services/urlSecurity');
|
|
router.use((req, res, next) => {
|
|
if (req.query.url !== undefined) {
|
|
try { validateHttpUrl(req.query.url); }
|
|
catch (error) { return res.status(400).json({ error: error.message }); }
|
|
}
|
|
next();
|
|
});
|
|
const { sources } = require('../db');
|
|
const { getDb } = require('../db/sqlite'); // Import SQLite
|
|
const xtreamApi = require('../services/xtreamApi');
|
|
const epgParser = require('../services/epgParser');
|
|
const cache = require('../services/cache');
|
|
const path = require('path');
|
|
const fs = require('fs');
|
|
const http = require('http');
|
|
const https = require('https');
|
|
const { spawn } = require('child_process');
|
|
const ffmpegPath = require('ffmpeg-static');
|
|
const { Readable } = require('stream');
|
|
|
|
// Default cache max age in hours
|
|
const DEFAULT_MAX_AGE_HOURS = 24;
|
|
|
|
// Helper to get formatted category list from DB
|
|
function getCategoriesFromDb(sourceId, type, includeHidden = false) {
|
|
const db = getDb();
|
|
let query = `
|
|
SELECT category_id, name as category_name, parent_id
|
|
FROM categories
|
|
WHERE source_id = ? AND type = ?
|
|
`;
|
|
if (!includeHidden) {
|
|
query += ` AND is_hidden = 0`;
|
|
}
|
|
query += ` ORDER BY name ASC`;
|
|
const cats = db.prepare(query).all(sourceId, type);
|
|
return cats;
|
|
}
|
|
|
|
// Helper to get formatted streams from DB
|
|
function getStreamsFromDb(sourceId, type, categoryId = null, includeHidden = false) {
|
|
const db = getDb();
|
|
let query = `
|
|
SELECT item_id, name, stream_icon, added_at, rating, container_extension, year, category_id, data
|
|
FROM playlist_items
|
|
WHERE source_id = ? AND type = ?
|
|
`;
|
|
if (!includeHidden) {
|
|
query += ` AND is_hidden = 0`;
|
|
}
|
|
const params = [sourceId, type];
|
|
|
|
if (categoryId) {
|
|
query += ` AND category_id = ?`;
|
|
params.push(categoryId);
|
|
}
|
|
|
|
// Default sorting
|
|
// query += ` ORDER BY name ASC`; // Sorting usually handled by client
|
|
|
|
const items = db.prepare(query).all(...params);
|
|
|
|
// Map to Xtream format
|
|
return items.map(item => {
|
|
const data = JSON.parse(item.data || '{}');
|
|
// Override with our local fields if needed, or just return the mixed object
|
|
// We should ensure critical fields are present
|
|
return {
|
|
...data,
|
|
stream_id: item.item_id, // ensure ID matches what client expects
|
|
series_id: type === 'series' ? item.item_id : undefined,
|
|
name: item.name,
|
|
stream_icon: item.stream_icon,
|
|
cover: item.stream_icon, // series/vod often use cover
|
|
added: item.added_at,
|
|
rating: item.rating,
|
|
container_extension: item.container_extension,
|
|
category_id: item.category_id,
|
|
// Normalize EPG channel ID: Xtream uses epg_channel_id, M3U uses tvgId
|
|
epg_channel_id: data.epg_channel_id || data.tvgId || null
|
|
};
|
|
});
|
|
}
|
|
|
|
|
|
// --- Xtream Codes Proxy API --- //
|
|
|
|
// Login / Authenticate
|
|
router.get('/xtream/:sourceId', async (req, res) => {
|
|
try {
|
|
const source = await sources.getById(req.params.sourceId);
|
|
if (!source || source.type !== 'xtream') return res.status(404).send('Source not found');
|
|
|
|
// Proxy auth check to upstream to ensure credentials are still valid
|
|
|
|
const cached = cache.get('xtream', source.id, 'auth', 300000);
|
|
if (cached) return res.json(cached);
|
|
|
|
const api = xtreamApi.createFromSource(source);
|
|
const data = await api.authenticate();
|
|
cache.set('xtream', source.id, 'auth', data);
|
|
res.json(data);
|
|
} catch (err) {
|
|
res.status(502).json({ error: 'Upstream error', details: err.message });
|
|
}
|
|
});
|
|
|
|
// Live Categories
|
|
router.get('/xtream/:sourceId/live_categories', async (req, res) => {
|
|
try {
|
|
const sourceId = parseInt(req.params.sourceId);
|
|
const includeHidden = req.query.includeHidden === 'true';
|
|
const cats = getCategoriesFromDb(sourceId, 'live', includeHidden);
|
|
res.json(cats);
|
|
} catch (err) {
|
|
console.error(err);
|
|
res.status(500).json({ error: 'Database error' });
|
|
}
|
|
});
|
|
|
|
// Live Streams
|
|
router.get('/xtream/:sourceId/live_streams', async (req, res) => {
|
|
try {
|
|
const sourceId = parseInt(req.params.sourceId);
|
|
const categoryId = req.query.category_id;
|
|
const includeHidden = req.query.includeHidden === 'true';
|
|
const streams = getStreamsFromDb(sourceId, 'live', categoryId, includeHidden);
|
|
res.json(streams);
|
|
} catch (err) {
|
|
console.error(err);
|
|
res.status(500).json({ error: 'Database error' });
|
|
}
|
|
});
|
|
|
|
// VOD Categories
|
|
router.get('/xtream/:sourceId/vod_categories', async (req, res) => {
|
|
try {
|
|
const sourceId = parseInt(req.params.sourceId);
|
|
const includeHidden = req.query.includeHidden === 'true';
|
|
const cats = getCategoriesFromDb(sourceId, 'movie', includeHidden);
|
|
res.json(cats);
|
|
} catch (err) {
|
|
console.error(err);
|
|
res.status(500).json({ error: 'Database error' });
|
|
}
|
|
});
|
|
|
|
// VOD Streams
|
|
router.get('/xtream/:sourceId/vod_streams', async (req, res) => {
|
|
try {
|
|
const sourceId = parseInt(req.params.sourceId);
|
|
const categoryId = req.query.category_id;
|
|
const includeHidden = req.query.includeHidden === 'true';
|
|
const streams = getStreamsFromDb(sourceId, 'movie', categoryId, includeHidden);
|
|
res.json(streams);
|
|
} catch (err) {
|
|
console.error(err);
|
|
res.status(500).json({ error: 'Database error' });
|
|
}
|
|
});
|
|
|
|
// Series Categories
|
|
router.get('/xtream/:sourceId/series_categories', async (req, res) => {
|
|
try {
|
|
const sourceId = parseInt(req.params.sourceId);
|
|
const includeHidden = req.query.includeHidden === 'true';
|
|
const cats = getCategoriesFromDb(sourceId, 'series', includeHidden);
|
|
res.json(cats);
|
|
} catch (err) {
|
|
console.error(err);
|
|
res.status(500).json({ error: 'Database error' });
|
|
}
|
|
});
|
|
|
|
// Series
|
|
router.get('/xtream/:sourceId/series', async (req, res) => {
|
|
try {
|
|
const sourceId = parseInt(req.params.sourceId);
|
|
const categoryId = req.query.category_id;
|
|
const includeHidden = req.query.includeHidden === 'true';
|
|
const streams = getStreamsFromDb(sourceId, 'series', categoryId, includeHidden);
|
|
res.json(streams);
|
|
} catch (err) {
|
|
console.error(err);
|
|
res.status(500).json({ error: 'Database error' });
|
|
}
|
|
});
|
|
|
|
// Series Info (Episodes)
|
|
// Proxy series info request
|
|
router.get('/xtream/:sourceId/series_info', async (req, res) => {
|
|
try {
|
|
const source = await sources.getById(req.params.sourceId);
|
|
if (!source) return res.status(404).send('Source not found');
|
|
|
|
const seriesId = req.query.series_id;
|
|
if (!seriesId) return res.status(400).send('series_id required');
|
|
|
|
const cacheKey = `series_info_${seriesId}`;
|
|
const cached = cache.get('xtream', source.id, cacheKey, 3600000);
|
|
if (cached) return res.json(cached);
|
|
|
|
const api = xtreamApi.createFromSource(source);
|
|
const data = await api.getSeriesInfo(seriesId);
|
|
cache.set('xtream', source.id, cacheKey, data);
|
|
res.json(data);
|
|
} catch (err) {
|
|
res.status(502).json({ error: 'Upstream error', details: err.message });
|
|
}
|
|
});
|
|
|
|
// VOD Info
|
|
router.get('/xtream/:sourceId/vod_info', async (req, res) => {
|
|
try {
|
|
const source = await sources.getById(req.params.sourceId);
|
|
if (!source) return res.status(404).send('Source not found');
|
|
|
|
const vodId = req.query.vod_id;
|
|
if (!vodId) return res.status(400).send('vod_id required');
|
|
|
|
const cacheKey = `vod_info_${vodId}`;
|
|
const cached = cache.get('xtream', source.id, cacheKey, 3600000);
|
|
if (cached) return res.json(cached);
|
|
|
|
const api = xtreamApi.createFromSource(source);
|
|
const data = await api.getVodInfo(vodId);
|
|
cache.set('xtream', source.id, cacheKey, data);
|
|
res.json(data);
|
|
} catch (err) {
|
|
res.status(502).json({ error: 'Upstream error', details: err.message });
|
|
}
|
|
});
|
|
|
|
// Get Stream URL for playback
|
|
// Returns the direct stream URL for a given stream ID
|
|
router.get('/xtream/:sourceId/stream/:streamId/:type', async (req, res) => {
|
|
try {
|
|
const source = await sources.getById(req.params.sourceId);
|
|
if (!source || source.type !== 'xtream') {
|
|
return res.status(404).json({ error: 'Xtream source not found' });
|
|
}
|
|
|
|
const streamId = req.params.streamId;
|
|
const type = req.params.type || 'live';
|
|
const container = req.query.container || 'm3u8';
|
|
|
|
// Construct the Xtream stream URL
|
|
// Format: http://server:port/live/username/password/streamId.container (for live)
|
|
// Format: http://server:port/movie/username/password/streamId.container (for movie)
|
|
// Format: http://server:port/series/username/password/streamId.container (for series)
|
|
|
|
let streamUrl;
|
|
const baseUrl = source.url.replace(/\/$/, ''); // Remove trailing slash
|
|
|
|
if (type === 'live') {
|
|
streamUrl = `${baseUrl}/live/${source.username}/${source.password}/${streamId}.${container}`;
|
|
} else if (type === 'movie') {
|
|
streamUrl = `${baseUrl}/movie/${source.username}/${source.password}/${streamId}.${container}`;
|
|
} else if (type === 'series') {
|
|
streamUrl = `${baseUrl}/series/${source.username}/${source.password}/${streamId}.${container}`;
|
|
} else {
|
|
return res.status(400).json({ error: 'Invalid stream type' });
|
|
}
|
|
|
|
res.json({ url: streamUrl });
|
|
} catch (err) {
|
|
console.error('Error getting stream URL:', err);
|
|
res.status(500).json({ error: 'Failed to get stream URL' });
|
|
}
|
|
});
|
|
|
|
|
|
// --- Other Proxy Routes --- //
|
|
|
|
// M3U Playlist
|
|
// (For M3U sources, we now have data in DB. We can reconstruct M3U or return JSON)
|
|
// Frontend ChannelList.js for M3U sources calls `API.proxy.m3u.get(sourceId)`
|
|
// which points here. It expects { channels, groups }.
|
|
router.get('/m3u/:sourceId', async (req, res) => {
|
|
try {
|
|
const sourceId = parseInt(req.params.sourceId);
|
|
const includeHidden = req.query.includeHidden === 'true';
|
|
|
|
// Fetch from DB
|
|
const channels = getStreamsFromDb(sourceId, 'live', null, includeHidden);
|
|
const groups = getCategoriesFromDb(sourceId, 'live', includeHidden);
|
|
|
|
// Format for frontend helper
|
|
// ChannelList expects:
|
|
// {
|
|
// channels: [ { id, name, groupTitle, url, tvgLogo, ... } ],
|
|
// groups: [ { id, name, channelCount } ]
|
|
// }
|
|
// Note: DB `live` items from M3U sync have `category_id` as their group name usually.
|
|
|
|
const reformattedChannels = channels.map(c => ({
|
|
...c,
|
|
id: c.stream_id,
|
|
groupTitle: c.category_id || 'Uncategorized',
|
|
url: c.stream_url || c.url,
|
|
tvgLogo: c.stream_icon
|
|
}));
|
|
|
|
const reformattedGroups = groups.map(g => ({
|
|
id: g.category_id,
|
|
name: g.category_name,
|
|
channelCount: 0 // Frontend calculates this or we can
|
|
}));
|
|
|
|
// Add implicit groups check?
|
|
// The frontend M3U parser generates groups from the channels if explicit groups missing.
|
|
// Our SyncService `saveCategories` handles explicit groups.
|
|
|
|
res.json({ channels: reformattedChannels, groups: reformattedGroups });
|
|
|
|
} catch (err) {
|
|
console.error(err);
|
|
res.status(500).json({ error: 'Database error' });
|
|
}
|
|
});
|
|
|
|
// EPG
|
|
router.get('/epg/:sourceId', async (req, res) => {
|
|
try {
|
|
const sourceId = parseInt(req.params.sourceId);
|
|
const db = getDb();
|
|
|
|
// Time window: 24 hours ago to 24 hours from now
|
|
// This prevents returning millions of rows and crashing the server/browser
|
|
const windowStart = Date.now() - (24 * 60 * 60 * 1000); // -24 hours
|
|
const windowEnd = Date.now() + (24 * 60 * 60 * 1000); // +24 hours
|
|
|
|
// Fetch programs within the time window
|
|
let programsQuery = `
|
|
SELECT channel_id as channelId, start_time, end_time, title, description, data
|
|
FROM epg_programs
|
|
WHERE source_id = ? AND end_time > ? AND start_time < ?
|
|
`;
|
|
const params = [sourceId, windowStart, windowEnd];
|
|
|
|
const programs = db.prepare(programsQuery).all(...params);
|
|
|
|
const formattedPrograms = programs.map(p => ({
|
|
channelId: p.channelId,
|
|
start: new Date(p.start_time).toISOString(), // EpgGuide parse this back
|
|
stop: new Date(p.end_time).toISOString(),
|
|
title: p.title,
|
|
description: p.description
|
|
}));
|
|
|
|
// Fetch EPG channels from playlist_items (type='epg_channel')
|
|
|
|
|
|
let epgChannels = [];
|
|
|
|
// Try getting stored channels first
|
|
const storedChannels = db.prepare(`
|
|
SELECT item_id as id, name, stream_icon as icon, data
|
|
FROM playlist_items
|
|
WHERE source_id = ? AND type = 'epg_channel'
|
|
`).all(sourceId);
|
|
|
|
if (storedChannels.length > 0) {
|
|
epgChannels = storedChannels;
|
|
} else {
|
|
// Fallback: Build from unique channelIds in programmes (Legacy behavior)
|
|
const uniqueChannelIds = [...new Set(programs.map(p => p.channelId))];
|
|
epgChannels = uniqueChannelIds.map(id => ({
|
|
id: id,
|
|
name: id // Use channelId as name (fallback)
|
|
}));
|
|
}
|
|
|
|
res.json({
|
|
channels: epgChannels,
|
|
programmes: formattedPrograms
|
|
});
|
|
|
|
} catch (err) {
|
|
console.error(err);
|
|
res.status(500).json({ error: 'Database error' });
|
|
}
|
|
});
|
|
|
|
// Clear cache (kept for compatibility)
|
|
router.delete('/cache/:sourceId', (req, res) => {
|
|
const sourceId = req.params.sourceId;
|
|
cache.clearSource(sourceId);
|
|
res.json({ success: true });
|
|
});
|
|
|
|
|
|
|
|
/**
|
|
* Proxy Xtream API calls
|
|
* GET /api/proxy/xtream/:sourceId/:action
|
|
*/
|
|
router.get('/xtream/:sourceId/:action', async (req, res) => {
|
|
try {
|
|
const sourceId = req.params.sourceId;
|
|
const source = await sources.getById(sourceId);
|
|
if (!source || source.type !== 'xtream') {
|
|
return res.status(404).json({ error: 'Xtream source not found' });
|
|
}
|
|
|
|
const { action } = req.params;
|
|
const { category_id, stream_id, vod_id, series_id, limit, refresh, maxAge } = req.query;
|
|
const forceRefresh = refresh === '1';
|
|
const maxAgeHours = parseInt(maxAge) || DEFAULT_MAX_AGE_HOURS;
|
|
const maxAgeMs = maxAgeHours * 60 * 60 * 1000;
|
|
|
|
// Actions that should be cached
|
|
const cacheableActions = [
|
|
'live_categories', 'live_streams',
|
|
'vod_categories', 'vod_streams',
|
|
'series_categories', 'series'
|
|
];
|
|
|
|
// Build cache key (include category_id if present)
|
|
const cacheKey = category_id ? `${action}_${category_id}` : action;
|
|
|
|
// Check cache for cacheable actions
|
|
if (!forceRefresh && cacheableActions.includes(action)) {
|
|
const cached = cache.get('xtream', sourceId, cacheKey, maxAgeMs);
|
|
if (cached) {
|
|
return res.json(cached);
|
|
}
|
|
}
|
|
|
|
// Fetch fresh data
|
|
const api = xtreamApi.createFromSource(source);
|
|
let data;
|
|
switch (action) {
|
|
case 'auth':
|
|
data = await api.authenticate();
|
|
break;
|
|
case 'live_categories':
|
|
data = await api.getLiveCategories();
|
|
break;
|
|
case 'live_streams':
|
|
data = await api.getLiveStreams(category_id);
|
|
break;
|
|
case 'vod_categories':
|
|
data = await api.getVodCategories();
|
|
break;
|
|
case 'vod_streams':
|
|
data = await api.getVodStreams(category_id);
|
|
break;
|
|
case 'vod_info':
|
|
data = await api.getVodInfo(vod_id);
|
|
break;
|
|
case 'series_categories':
|
|
data = await api.getSeriesCategories();
|
|
break;
|
|
case 'series':
|
|
data = await api.getSeries(category_id);
|
|
break;
|
|
case 'series_info':
|
|
data = await api.getSeriesInfo(series_id);
|
|
break;
|
|
case 'short_epg':
|
|
data = await api.getShortEpg(stream_id, limit);
|
|
break;
|
|
default:
|
|
return res.status(400).json({ error: 'Unknown action' });
|
|
}
|
|
|
|
// Cache the result for cacheable actions
|
|
if (cacheableActions.includes(action)) {
|
|
cache.set('xtream', sourceId, cacheKey, data);
|
|
}
|
|
|
|
res.json(data);
|
|
} catch (err) {
|
|
console.error('Xtream proxy error:', err);
|
|
res.status(500).json({ error: err.message });
|
|
}
|
|
});
|
|
|
|
/**
|
|
* Get Xtream stream URL
|
|
* GET /api/proxy/xtream/:sourceId/stream/:streamId
|
|
*/
|
|
router.get('/xtream/:sourceId/stream/:streamId/:type?', async (req, res) => {
|
|
try {
|
|
const source = await sources.getById(req.params.sourceId);
|
|
if (!source || source.type !== 'xtream') {
|
|
return res.status(404).json({ error: 'Xtream source not found' });
|
|
}
|
|
|
|
const api = xtreamApi.createFromSource(source);
|
|
const { streamId, type = 'live' } = req.params;
|
|
const { container = 'm3u8' } = req.query;
|
|
|
|
const url = api.buildStreamUrl(streamId, type, container);
|
|
res.json({ url });
|
|
} catch (err) {
|
|
console.error('Stream URL error:', err);
|
|
res.status(500).json({ error: err.message });
|
|
}
|
|
});
|
|
|
|
/**
|
|
* Fetch and parse EPG (with file-based caching)
|
|
* GET /api/proxy/epg/:sourceId
|
|
* Query params:
|
|
* - refresh=1 Force refresh, bypass cache
|
|
* - maxAge=N Max cache age in hours (default 24)
|
|
*/
|
|
router.get('/epg/:sourceId', async (req, res) => {
|
|
try {
|
|
const sourceId = req.params.sourceId;
|
|
const source = await sources.getById(sourceId);
|
|
if (!source || (source.type !== 'epg' && source.type !== 'xtream')) {
|
|
return res.status(404).json({ error: 'Valid EPG source not found' });
|
|
}
|
|
|
|
const forceRefresh = req.query.refresh === '1';
|
|
const maxAgeHours = parseInt(req.query.maxAge) || DEFAULT_MAX_AGE_HOURS;
|
|
const maxAgeMs = maxAgeHours * 60 * 60 * 1000;
|
|
|
|
// Check file cache (unless force refresh)
|
|
if (!forceRefresh) {
|
|
const cached = cache.get('epg', sourceId, 'data', maxAgeMs);
|
|
if (cached) {
|
|
return res.json(cached);
|
|
}
|
|
}
|
|
|
|
// Fetch fresh data
|
|
let url = source.url;
|
|
if (source.type === 'xtream') {
|
|
const api = xtreamApi.createFromSource(source);
|
|
url = api.getXmltvUrl();
|
|
}
|
|
|
|
const data = await epgParser.fetchAndParse(url);
|
|
|
|
// Store in file cache
|
|
cache.set('epg', sourceId, 'data', data);
|
|
|
|
res.json(data);
|
|
} catch (err) {
|
|
console.error('EPG proxy error:', err);
|
|
res.status(500).json({ error: err.message });
|
|
}
|
|
});
|
|
|
|
/**
|
|
* Clear cache for a source
|
|
* DELETE /api/proxy/cache/:sourceId
|
|
*/
|
|
router.delete('/cache/:sourceId', (req, res) => {
|
|
const sourceId = req.params.sourceId;
|
|
cache.clearSource(sourceId);
|
|
res.json({ success: true });
|
|
});
|
|
|
|
/**
|
|
* Clear EPG cache for a source (legacy endpoint, calls clearSource)
|
|
* DELETE /api/proxy/epg/:sourceId/cache
|
|
*/
|
|
router.delete('/epg/:sourceId/cache', (req, res) => {
|
|
const sourceId = req.params.sourceId;
|
|
cache.clear('epg', sourceId, 'data');
|
|
res.json({ success: true });
|
|
});
|
|
|
|
/**
|
|
* Get EPG for specific channels
|
|
* POST /api/proxy/epg/:sourceId/channels
|
|
*/
|
|
router.post('/epg/:sourceId/channels', async (req, res) => {
|
|
try {
|
|
const source = await sources.getById(req.params.sourceId);
|
|
if (!source || source.type !== 'epg') {
|
|
return res.status(404).json({ error: 'EPG source not found' });
|
|
}
|
|
|
|
const { channelIds } = req.body;
|
|
if (!channelIds || !Array.isArray(channelIds)) {
|
|
return res.status(400).json({ error: 'channelIds array required' });
|
|
}
|
|
|
|
const data = await epgParser.fetchAndParse(source.url);
|
|
|
|
// Filter programmes for requested channels
|
|
const result = {};
|
|
for (const channelId of channelIds) {
|
|
result[channelId] = epgParser.getCurrentAndUpcoming(data.programmes, channelId);
|
|
}
|
|
|
|
res.json(result);
|
|
} catch (err) {
|
|
console.error('EPG channels error:', err);
|
|
res.status(500).json({ error: err.message });
|
|
}
|
|
});
|
|
|
|
/**
|
|
* Proxy stream for playback
|
|
* This handles CORS for streams that don't allow cross-origin
|
|
* Supports HTTP Range requests for video seeking
|
|
*/
|
|
router.get('/stream', require('../services/proxyStream'));
|
|
|
|
/**
|
|
* Proxy images (channel logos, posters)
|
|
* Fixes mixed content errors when loading HTTP images on HTTPS pages
|
|
* GET /api/proxy/image?url=...
|
|
*/
|
|
router.get('/image', async (req, res) => {
|
|
try {
|
|
const { url } = req.query;
|
|
if (!url) {
|
|
return res.status(400).json({ error: 'URL required' });
|
|
}
|
|
|
|
const response = await fetch(url, {
|
|
headers: {
|
|
'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36',
|
|
'Accept': 'image/*,*/*;q=0.8'
|
|
}
|
|
});
|
|
|
|
if (!response.ok) {
|
|
return res.status(response.status).send('Failed to fetch image');
|
|
}
|
|
|
|
const contentType = response.headers.get('content-type') || 'image/png';
|
|
res.set('Content-Type', contentType);
|
|
res.set('Access-Control-Allow-Origin', '*');
|
|
res.set('Cache-Control', 'public, max-age=86400'); // Cache for 24 hours
|
|
|
|
// Efficiently pipe the response body
|
|
if (response.body) {
|
|
// response.body is an AsyncIterable in standard fetch/undici
|
|
// Readable.from converts it to a Node.js Readable stream
|
|
const stream = Readable.from(response.body);
|
|
stream.pipe(res);
|
|
} else {
|
|
res.end();
|
|
}
|
|
|
|
} catch (err) {
|
|
console.error('Image proxy error:', err.message);
|
|
res.status(500).send('Image proxy error');
|
|
}
|
|
});
|
|
|
|
module.exports = router;
|