@codenkay/video-nsgplayer-core 3.0.2 → 3.0.4

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # Changelog
 
+## 3.0.4
+
+### Patch Changes
+
+- Preserve "use client" in React/UI builds, forward analytics, intermittent watermark, Angular Ivy packaging, and packaging metadata.
+
+## 3.0.3
+
+- Browser-direct AES keys: after signed-query CORS/network failure, retry once
+  with `getKeyAccessToken` Bearer before XHR (needed when AUTH_MODE=browser and
+  Appextech enables CORS + Authorization on `enc.key`).
+- Clearer KEY_LOAD_ERROR message distinguishing BFF vs browser-direct CORS.
+
 ## 3.0.2
 
 - Fix pack/build regression on AES `enc.key`: do **not** statically import

package/dist/index.cjs

@@ -213,7 +213,7 @@ var AuthManager = class {
 
 // src/config/defaults.ts
 var PLAYBACK_RATES = [0.5, 0.75, 1, 1.25, 1.5, 2];
-var PACKAGE_VERSION = "3.0.2";
+var PACKAGE_VERSION = "3.0.3";
 var DEFAULT_PLAYER_BEHAVIOR = {
   autoplay: true,
   startMuted: true,
@@ -237,7 +237,8 @@ var DEFAULT_CONTROLS = {
   showSkip: true,
   showLive: true,
   seekCueDurationMs: 720,
-  keyboardShortcuts: true
+  keyboardShortcuts: true,
+  persistQualityPreference: false
 };
 var DEFAULT_THEME = {
   playIconPreset: "triangle",
@@ -859,7 +860,8 @@ function rememberBuiltin(HlsClass, loader) {
 function getStashedBuiltinLoader(loader) {
   return loader[BUILTIN_LOADER_REF];
 }
-function resolveBuiltinHlsLoader(HlsClass) {
+function resolveBuiltinHlsLoader(HlsModule) {
+  const HlsClass = HlsModule;
   const cached = builtinLoaderByHls.get(HlsClass);
   if (cached) return cached;
   const start = HlsClass.DefaultConfig.loader;
@@ -1090,7 +1092,9 @@ async function loadEncryptionKeyEnterprise(context, callbacks, plan, signal, sta
     );
     return "ok";
   }
-  const needsBearer = Boolean(plan.accessToken) && (queryResult.status === 401 || queryResult.status === 403);
+  const needsBearer = Boolean(plan.accessToken) && (queryResult.status === 401 || queryResult.status === 403 || // Browser-direct: opaque CORS/network on unsigned GET — try Bearer once
+  // Appextech allows ACAO + Authorization (AUTH_MODE=browser, no BFF).
+  queryResult.cors || queryResult.status === 0);
   if (needsBearer && plan.accessToken) {
     const bearerResult = await fetchEncryptionKeyBytes(
       plan.signedKeyUrl,
@@ -1105,7 +1109,7 @@ async function loadEncryptionKeyEnterprise(context, callbacks, plan, signal, sta
       );
       return "ok";
     }
-    if (bearerResult.cors) {
+    if (bearerResult.cors || bearerResult.status === 0) {
       return "try_xhr";
     }
     callbacks.onError(
@@ -1133,7 +1137,8 @@ async function loadEncryptionKeyEnterprise(context, callbacks, plan, signal, sta
   );
   return "ok";
 }
-function createAuthParamsLoader(HlsClass, store, options = {}) {
+function createAuthParamsLoader(HlsModule, store, options = {}) {
+  const HlsClass = HlsModule;
   const BaseLoader = resolveBuiltinHlsLoader(HlsClass);
   rememberBuiltin(HlsClass, BaseLoader);
   const maxProxyFailures = typeof options.keyProxyMaxFailures === "number" && options.keyProxyMaxFailures >= 0 ? options.keyProxyMaxFailures : KEY_PROXY_MAX_FAILURES;
@@ -1343,7 +1348,7 @@ var HlsEngine = class {
         if (!data.fatal) return;
       } else if (!data.fatal) {
         callbacks.onFatalError?.(
-          status ? `Encryption key load failed (HTTP ${status}).` : "Encryption key load failed (network/CORS). Ensure signed query params are applied, or use keyProxyUrlBuilder / getKeyAccessToken when the key host requires API Bearer."
+          status ? `Encryption key load failed (HTTP ${status}).` : "Encryption key load failed (network/CORS). For browser-direct mode the key host must allow CORS (and Authorization if Bearer is required). Otherwise use keyProxyUrlBuilder (same-origin BFF) when the server IP can reach Appextech."
         );
         return;
       }