@codenkay/video-nsgplayer-core 0.1.3 → 0.1.5

package/dist/index.d.ts

@@ -117,12 +117,24 @@ type StreamingConfig = {
         backBufferLength?: number;
         fatalRecoveryLimit?: number;
     };
+    /**
+     * Same-origin BFF proxy for `enc.key` (preferred in production when the
+     * server IP is allowlisted by the CDN / Cloudflare).
+     */
     keyProxyUrlBuilder?: (ctx: {
         videoId: string;
         keyUrl: string;
         token?: string;
         expires?: string;
+        username?: string;
+        mobile?: string;
     }) => string;
+    /**
+     * Browser-direct AES key auth: returns the Video API access token so hls.js
+     * can send `Authorization: Bearer …` on `enc.key` requests.
+     * Use when the BFF cannot reach Appextech (Cloudflare challenge on server IP).
+     */
+    getKeyAccessToken?: () => string | null | undefined;
 };
 type LoggingConfig = {
     enabled?: boolean;
@@ -169,6 +181,7 @@ type PlayerConfig = Required<{
         engine: "hls";
         hls: Required<NonNullable<StreamingConfig["hls"]>>;
         keyProxyUrlBuilder?: StreamingConfig["keyProxyUrlBuilder"];
+        getKeyAccessToken?: StreamingConfig["getKeyAccessToken"];
     };
     logging: Required<LoggingConfig>;
     debug: Required<DebugConfig>;
@@ -242,7 +255,7 @@ type PlayerEventMap = {
 };
 
 declare const PLAYBACK_RATES: readonly [0.5, 0.75, 1, 1.25, 1.5, 2];
-declare const PACKAGE_VERSION = "0.1.3";
+declare const PACKAGE_VERSION = "0.1.5";
 declare const DEFAULT_PLAYER_BEHAVIOR: Required<PlayerBehaviorConfig>;
 declare const DEFAULT_CONTROLS: Required<ControlsConfig>;
 declare const DEFAULT_THEME: Required<ThemeConfig>;
@@ -274,6 +287,7 @@ type PlayerConfigPartial = Partial<{
         engine?: "hls";
         hls?: Partial<PlayerConfig["streaming"]["hls"]>;
         keyProxyUrlBuilder?: PlayerConfig["streaming"]["keyProxyUrlBuilder"];
+        getKeyAccessToken?: PlayerConfig["streaming"]["getKeyAccessToken"];
     };
     logging: Partial<PlayerConfig["logging"]>;
     debug: Partial<PlayerConfig["debug"]>;
@@ -388,6 +402,7 @@ type HlsEngineOptions = {
     volume?: number;
     videoId?: string;
     keyProxyUrlBuilder?: StreamingConfig["keyProxyUrlBuilder"];
+    getKeyAccessToken?: StreamingConfig["getKeyAccessToken"];
     hlsConfig: {
         enableWorker: boolean;
         lowLatencyMode: boolean;
@@ -400,10 +415,9 @@ type HlsEngineOptions = {
 /**
  * Dual-path HLS engine: hls.js when supported, otherwise native Safari HLS.
  *
- * Signed CDN playback requires auth query params on *every* HLS request
- * (master, media playlist, segments, keys). hls.js only receives the signed
- * master URL via loadSource; child URIs are relative and unsigned unless a
- * custom loader re-applies AuthParamsStore on each request.
+ * Signed CDN playback requires auth query params on every HLS request.
+ * Encrypted VOD also requires a same-origin `enc.key` proxy (Bearer + query)
+ * via `streaming.keyProxyUrlBuilder` — browser CORS cannot fetch Video API keys.
  */
 declare class HlsEngine {
     private readonly options;
@@ -417,6 +431,8 @@ declare class HlsEngine {
     constructor(options: HlsEngineOptions);
     start(): Promise<void>;
     private startWithHlsJs;
+    private handleHlsError;
+    private applyStartPositionAndAutoplay;
     private bindMediaEvents;
     updateAuthParams(): void;
     resumeAfterAuthRenew(): void;
@@ -582,11 +598,16 @@ type HlsLoader = new (config: object) => {
 type AuthParamsLoaderOptions = {
     videoId?: string;
     keyProxyUrlBuilder?: StreamingConfig["keyProxyUrlBuilder"];
+    getKeyAccessToken?: StreamingConfig["getKeyAccessToken"];
 };
 /**
  * Rewrites an HLS request URL so signed auth query params are present.
  * Master playlists are signed on loadSource; child playlists / segments / keys
  * are relative and would otherwise be fetched unsigned → CDN 403.
+ *
+ * AES `enc.key` handling (pick one):
+ * 1. `keyProxyUrlBuilder` — same-origin BFF (needs Cloudflare-allowlisted server IP)
+ * 2. `getKeyAccessToken` — browser-direct CDN fetch with API Bearer header
  */
 declare function rewriteHlsRequestUrl(rawUrl: string, store: AuthParamsStore, options?: AuthParamsLoaderOptions, baseOrigin?: string): string;
 /**

package/dist/index.js

@@ -146,7 +146,7 @@ var AuthManager = class {
 
 // src/config/defaults.ts
 var PLAYBACK_RATES = [0.5, 0.75, 1, 1.25, 1.5, 2];
-var PACKAGE_VERSION = "0.1.3";
+var PACKAGE_VERSION = "0.1.5";
 var DEFAULT_PLAYER_BEHAVIOR = {
   autoplay: true,
   startMuted: true,
@@ -239,7 +239,8 @@ var SKIP_DEEP_SCAN_KEYS = /* @__PURE__ */ new Set([
   "gettoken",
   "getsource",
   "refreshsource",
-  "keyproxyurlbuilder"
+  "keyproxyurlbuilder",
+  "getkeyaccesstoken"
 ]);
 var SECRET_SCAN_MAX_DEPTH = 32;
 function isPlainObject(value) {
@@ -323,7 +324,8 @@ function mergePlayerConfig(partial) {
         ...DEFAULT_PLAYER_CONFIG.streaming.hls,
         ...partial?.streaming?.hls
       },
-      keyProxyUrlBuilder: partial?.streaming?.keyProxyUrlBuilder
+      keyProxyUrlBuilder: partial?.streaming?.keyProxyUrlBuilder,
+      getKeyAccessToken: partial?.streaming?.getKeyAccessToken
     },
     logging: { ...DEFAULT_PLAYER_CONFIG.logging, ...partial?.logging },
     debug: { ...DEFAULT_PLAYER_CONFIG.debug, ...partial?.debug },
@@ -753,7 +755,14 @@ function seekToLiveEdge(media, options) {
 }
 
 // src/streaming/authParamsLoader.ts
-var ENC_KEY_PATH_RE = /\/enc\.key$/i;
+var ENC_KEY_PATH_RE = /enc\.key$/i;
+function isEncryptionKeyUrl(rawUrl, baseOrigin = typeof location !== "undefined" ? location.origin : "http://localhost") {
+  try {
+    return ENC_KEY_PATH_RE.test(new URL(rawUrl, baseOrigin).pathname);
+  } catch {
+    return /enc\.key/i.test(rawUrl);
+  }
+}
 function rewriteHlsRequestUrl(rawUrl, store, options = {}, baseOrigin = typeof location !== "undefined" ? location.origin : "http://localhost") {
   if (!rawUrl) return rawUrl;
   const parsed = new URL(rawUrl, baseOrigin);
@@ -764,7 +773,9 @@ function rewriteHlsRequestUrl(rawUrl, store, options = {}, baseOrigin = typeof l
       videoId: options.videoId,
       keyUrl: parsed.toString(),
       token: snapshot.token,
-      expires: snapshot.expires
+      expires: snapshot.expires,
+      username: snapshot.username,
+      mobile: snapshot.mobile
     });
   }
   if (!store.hasParams()) return parsed.toString();
@@ -776,7 +787,18 @@ function createAuthParamsLoader(HlsClass, store, options = {}) {
     load(context, config, callbacks) {
       if (context.url) {
         try {
-          context.url = rewriteHlsRequestUrl(context.url, store, options);
+          const originalUrl = context.url;
+          const isKey = isEncryptionKeyUrl(originalUrl);
+          context.url = rewriteHlsRequestUrl(originalUrl, store, options);
+          if (isKey && !options.keyProxyUrlBuilder && options.getKeyAccessToken) {
+            const accessToken = options.getKeyAccessToken();
+            if (accessToken) {
+              context.headers = {
+                ...context.headers ?? {},
+                Authorization: `Bearer ${accessToken}`
+              };
+            }
+          }
         } catch {
         }
       }
@@ -786,6 +808,9 @@ function createAuthParamsLoader(HlsClass, store, options = {}) {
 }
 
 // src/streaming/HlsEngine.ts
+function isAuthHttpStatus(code) {
+  return code === 401 || code === 403;
+}
 var HlsEngine = class {
   constructor(options) {
     this.options = options;
@@ -798,49 +823,47 @@ var HlsEngine = class {
     this.qualitySelection = "auto";
   }
   async start() {
-    const { videoEl, playbackUrl, autoplay, startMuted, volume, startPosition } = this.options;
+    const { videoEl, playbackUrl, startMuted, volume } = this.options;
     videoEl.muted = startMuted;
-    if (typeof volume === "number") videoEl.volume = Math.min(1, Math.max(0, volume));
+    if (typeof volume === "number") {
+      videoEl.volume = Math.min(1, Math.max(0, volume));
+    }
     const Hls = (await import("hls.js")).default;
     if (Hls.isSupported()) {
       this.supportMode = "hls.js";
       this.options.callbacks.onSupportMode?.("hls.js");
       await this.startWithHlsJs(Hls, playbackUrl);
-    } else if (videoEl.canPlayType("application/vnd.apple.mpegurl")) {
+      return;
+    }
+    if (videoEl.canPlayType("application/vnd.apple.mpegurl")) {
       this.supportMode = "native";
       this.options.callbacks.onSupportMode?.("native");
       videoEl.src = this.options.authParams.applyToUrl(playbackUrl);
       this.bindMediaEvents();
       this.options.callbacks.onStateChange?.("ready");
-    } else {
-      this.supportMode = "unsupported";
-      this.options.callbacks.onSupportMode?.("unsupported");
-      this.options.callbacks.onFatalError?.("HLS is not supported in this browser");
+      await this.applyStartPositionAndAutoplay();
       return;
     }
-    if (typeof startPosition === "number" && startPosition > 0) {
-      videoEl.currentTime = startPosition;
-    }
-    if (autoplay) {
-      try {
-        await videoEl.play();
-      } catch {
-        if (!videoEl.muted) {
-          videoEl.muted = true;
-          try {
-            await videoEl.play();
-          } catch {
-            this.options.logger.warn("Autoplay blocked");
-          }
-        }
-      }
-    }
+    this.supportMode = "unsupported";
+    this.options.callbacks.onSupportMode?.("unsupported");
+    this.options.callbacks.onFatalError?.(
+      "HLS is not supported in this browser"
+    );
   }
   async startWithHlsJs(Hls, playbackUrl) {
-    const { videoEl, authParams, hlsConfig, callbacks, videoId, keyProxyUrlBuilder } = this.options;
+    const {
+      videoEl,
+      authParams,
+      hlsConfig,
+      callbacks,
+      videoId,
+      keyProxyUrlBuilder,
+      getKeyAccessToken
+    } = this.options;
     const loader = createAuthParamsLoader(Hls, authParams, {
       videoId,
-      keyProxyUrlBuilder
+      keyProxyUrlBuilder,
+      getKeyAccessToken
     });
     this.hls = new Hls({
       enableWorker: hlsConfig.enableWorker,
@@ -851,6 +874,7 @@ var HlsEngine = class {
     this.hls.attachMedia(videoEl);
     this.hls.loadSource(authParams.applyToUrl(playbackUrl));
     this.hls.on(Hls.Events.MANIFEST_PARSED, (_event, data) => {
+      if (this.destroyed) return;
       this.qualities = (data.levels ?? []).map((level, index) => ({
         index,
         height: level.height ?? 0,
@@ -860,42 +884,95 @@ var HlsEngine = class {
       }));
       callbacks.onQualitiesChange?.(this.qualities);
       callbacks.onStateChange?.("ready");
+      void this.applyStartPositionAndAutoplay();
     });
     this.hls.on(Hls.Events.ERROR, (_event, data) => {
-      if (!data.fatal) {
-        if (data.type === Hls.ErrorTypes.NETWORK_ERROR && (data.details === Hls.ErrorDetails.FRAG_LOAD_ERROR || data.details === Hls.ErrorDetails.LEVEL_LOAD_ERROR || data.details === Hls.ErrorDetails.KEY_LOAD_ERROR)) {
-          callbacks.onAuthRecoveryNeeded?.(
-            data.details === Hls.ErrorDetails.KEY_LOAD_ERROR ? "key_error" : data.details === Hls.ErrorDetails.LEVEL_LOAD_ERROR ? "level_error" : "frag_error"
-          );
+      this.handleHlsError(Hls, data);
+    });
+    this.bindMediaEvents();
+  }
+  handleHlsError(Hls, data) {
+    if (this.destroyed) return;
+    const { callbacks, hlsConfig, keyProxyUrlBuilder, getKeyAccessToken } = this.options;
+    const status = data.response?.code;
+    if (data.details === Hls.ErrorDetails.KEY_LOAD_ERROR && !keyProxyUrlBuilder && !getKeyAccessToken) {
+      callbacks.onFatalError?.(
+        "Encryption key load failed. Configure streaming.getKeyAccessToken (browser Bearer) or streaming.keyProxyUrlBuilder (Cloudflare-allowlisted BFF) for Appextech AES-encrypted HLS."
+      );
+      return;
+    }
+    const authFailure = isAuthHttpStatus(status) || data.details === Hls.ErrorDetails.KEY_LOAD_ERROR && (status === void 0 || status === 0 || isAuthHttpStatus(status));
+    if (!data.fatal) {
+      if (authFailure && data.type === Hls.ErrorTypes.NETWORK_ERROR && (data.details === Hls.ErrorDetails.FRAG_LOAD_ERROR || data.details === Hls.ErrorDetails.LEVEL_LOAD_ERROR || data.details === Hls.ErrorDetails.KEY_LOAD_ERROR)) {
+        callbacks.onAuthRecoveryNeeded?.(
+          data.details === Hls.ErrorDetails.KEY_LOAD_ERROR ? "key_error" : data.details === Hls.ErrorDetails.LEVEL_LOAD_ERROR ? "level_error" : "frag_error"
+        );
+      }
+      return;
+    }
+    if (data.type === Hls.ErrorTypes.NETWORK_ERROR) {
+      this.networkRecoveryCount += 1;
+      if (this.networkRecoveryCount <= hlsConfig.fatalRecoveryLimit) {
+        if (authFailure) {
+          callbacks.onAuthRecoveryNeeded?.("fatal_network");
         }
+        this.hls?.startLoad();
         return;
       }
-      if (data.type === Hls.ErrorTypes.NETWORK_ERROR) {
-        this.networkRecoveryCount += 1;
-        if (this.networkRecoveryCount <= hlsConfig.fatalRecoveryLimit) {
-          callbacks.onAuthRecoveryNeeded?.("fatal_network");
-          this.hls?.startLoad();
-          return;
+    }
+    if (data.type === Hls.ErrorTypes.MEDIA_ERROR) {
+      this.mediaRecoveryCount += 1;
+      if (this.mediaRecoveryCount <= hlsConfig.fatalRecoveryLimit) {
+        this.hls?.recoverMediaError();
+        return;
+      }
+    }
+    callbacks.onFatalError?.(data.details || "Fatal HLS error");
+  }
+  async applyStartPositionAndAutoplay() {
+    if (this.destroyed) return;
+    const { videoEl, autoplay, startPosition } = this.options;
+    if (typeof startPosition === "number" && startPosition > 0) {
+      const seek = () => {
+        if (this.destroyed) return;
+        try {
+          videoEl.currentTime = startPosition;
+        } catch {
         }
+      };
+      if (videoEl.seekable.length > 0) {
+        seek();
+      } else {
+        videoEl.addEventListener("loadedmetadata", seek, { once: true });
       }
-      if (data.type === Hls.ErrorTypes.MEDIA_ERROR) {
-        this.mediaRecoveryCount += 1;
-        if (this.mediaRecoveryCount <= hlsConfig.fatalRecoveryLimit) {
-          this.hls?.recoverMediaError();
-          return;
+    }
+    if (!autoplay) return;
+    try {
+      await videoEl.play();
+    } catch {
+      if (!videoEl.muted) {
+        videoEl.muted = true;
+        try {
+          await videoEl.play();
+        } catch {
+          this.options.logger.warn("Autoplay blocked");
         }
       }
-      callbacks.onFatalError?.(data.details || "Fatal HLS error");
-    });
-    this.bindMediaEvents();
+    }
   }
   bindMediaEvents() {
     const { videoEl, callbacks } = this.options;
-    videoEl.addEventListener("playing", () => callbacks.onStateChange?.("playing"));
+    videoEl.addEventListener(
+      "playing",
+      () => callbacks.onStateChange?.("playing")
+    );
     videoEl.addEventListener("pause", () => {
       if (!videoEl.ended) callbacks.onStateChange?.("paused");
     });
-    videoEl.addEventListener("waiting", () => callbacks.onStateChange?.("buffering"));
+    videoEl.addEventListener(
+      "waiting",
+      () => callbacks.onStateChange?.("buffering")
+    );
     videoEl.addEventListener("ended", () => {
       callbacks.onStateChange?.("ended");
       callbacks.onEnded?.();
@@ -913,6 +990,7 @@ var HlsEngine = class {
     }
   }
   resumeAfterAuthRenew() {
+    this.networkRecoveryCount = 0;
     this.hls?.startLoad();
     this.updateAuthParams();
   }
@@ -1055,7 +1133,8 @@ function createVideoPlayer(options) {
         startPosition: config.player.startPosition,
         volume: config.player.volume,
         videoId: options.videoId,
-        keyProxyUrlBuilder: options.streaming?.keyProxyUrlBuilder,
+        keyProxyUrlBuilder: config.streaming.keyProxyUrlBuilder,
+        getKeyAccessToken: config.streaming.getKeyAccessToken,
         hlsConfig: config.streaming.hls,
         logger,
         callbacks: {
@@ -1116,6 +1195,14 @@ function createVideoPlayer(options) {
           onRenewing: () => setState("renewing"),
           onRenewed: (nextExpiresAt) => {
             engine?.resumeAfterAuthRenew();
+            if (!destroyed) {
+              const el2 = videoEl;
+              if (el2 && !el2.paused && !el2.ended) {
+                setState("playing");
+              } else {
+                setState("ready");
+              }
+            }
             events.emit("tokenrefresh", { expiresAt: nextExpiresAt });
             events.emit("sourcechange", { expiresAt: nextExpiresAt });
           },
@@ -1317,7 +1404,8 @@ function createVideoPlayer(options) {
         streaming: {
           engine: "hls",
           hls: { ...config.streaming.hls, ...partial?.streaming?.hls },
-          keyProxyUrlBuilder: partial?.streaming?.keyProxyUrlBuilder ?? config.streaming.keyProxyUrlBuilder
+          keyProxyUrlBuilder: partial?.streaming?.keyProxyUrlBuilder ?? config.streaming.keyProxyUrlBuilder,
+          getKeyAccessToken: partial?.streaming?.getKeyAccessToken ?? config.streaming.getKeyAccessToken
         },
         logging: { ...config.logging, ...partial?.logging },
         debug: { ...config.debug, ...partial?.debug },