eyevinn-channel-engine 4.3.6 → 4.3.7

package/dist/engine/preflight.d.ts

@@ -0,0 +1 @@
+export function handler(req: any, res: any, next: any): any;

package/dist/engine/preflight.js

@@ -0,0 +1,43 @@
+var constants = {
+    ALLOW_HEADERS: [
+        'accept',
+        'accept-version',
+        'content-type',
+        'request-id',
+        'origin',
+        'x-api-version',
+        'x-request-id',
+        'x-requested-with'
+    ],
+    EXPOSE_HEADERS: [
+        'api-version',
+        'content-length',
+        'content-md5',
+        'content-type',
+        'date',
+        'request-id',
+        'response-time'
+    ],
+    AC_REQ_METHOD: 'access-control-request-method',
+    AC_REQ_HEADERS: 'access-control-request-headers',
+    AC_ALLOW_CREDS: 'access-control-allow-credentials',
+    AC_ALLOW_ORIGIN: 'access-control-allow-origin',
+    AC_ALLOW_HEADERS: 'access-control-allow-headers',
+    AC_ALLOW_METHODS: 'access-control-allow-methods',
+    AC_EXPOSE_HEADERS: 'access-control-expose-headers',
+    AC_MAX_AGE: 'access-control-max-age',
+    STR_VARY: 'vary',
+    STR_ORIGIN: 'origin',
+    HTTP_NO_CONTENT: 204
+};
+exports.handler = function (req, res, next) {
+    if (req.method !== 'OPTIONS')
+        return next();
+    res.once('header', function () {
+        res.header(constants.AC_ALLOW_ORIGIN, '*');
+        res.header(constants.AC_ALLOW_CREDS, true);
+        res.header(constants.AC_ALLOW_METHODS, ['GET', 'OPTIONS']);
+        res.header(constants.AC_ALLOW_HEADERS, ['x-health-key']);
+    });
+    res.send(constants.HTTP_NO_CONTENT);
+};

package/dist/engine/server.d.ts

@@ -33,6 +33,7 @@ export interface ChannelEngineOpts {
     sessionResetKey?: string;
     keepAliveTimeout?: number;
     sessionEventStream?: boolean;
+    sessionHealthKey?: string;
 }
 export interface VodRequest {
     sessionId: string;
@@ -153,6 +154,7 @@ export declare class ChannelEngine {
     private autoCreateSession;
     private sessionResetKey;
     private sessionEventStream;
+    private sessionHealthKey;
     constructor(assetMgr: IAssetManager, options?: ChannelEngineOpts);
     updateStreamSwitchAsync(): Promise<void>;
     updateChannelsAsync(channelMgr: any, options: any): Promise<void>;

package/dist/engine/server.js

@@ -52,6 +52,7 @@ var SessionStateStore = require('./session_state.js').SessionStateStore;
 var SessionLiveStateStore = require('./session_live_state.js').SessionLiveStateStore;
 var PlayheadStateStore = require('./playhead_state.js').PlayheadStateStore;
 var _a = require('./util.js'), filterQueryParser = _a.filterQueryParser, toHHMMSS = _a.toHHMMSS, WaitTimeGenerator = _a.WaitTimeGenerator;
+var preflight = require('./preflight.js');
 var version = require('../package.json').version;
 var AUTO_CREATE_CHANNEL_TIMEOUT = 3000;
 var sessions = {}; // Should be a persistent store...
@@ -73,6 +74,7 @@ var ChannelEngine = /** @class */ (function () {
         this.autoCreateSession = false;
         this.sessionResetKey = "";
         this.sessionEventStream = false;
+        this.sessionHealthKey = "";
         this.options = options;
         if (options && options.adCopyMgrUri) {
             this.adCopyMgrUri = options.adCopyMgrUri;
@@ -92,6 +94,9 @@ var ChannelEngine = /** @class */ (function () {
         if (options && options.sessionResetKey) {
             this.sessionResetKey = options.sessionResetKey;
         }
+        if (options && options.sessionHealthKey) {
+            this.sessionHealthKey = options.sessionHealthKey;
+        }
         this.alwaysNewSegments = false;
         if (options && options.alwaysNewSegments) {
             this.alwaysNewSegments = true;
@@ -245,30 +250,7 @@ var ChannelEngine = /** @class */ (function () {
                 }
             });
         }); });
-        this.server.opts('/live/:file', function (req, res, next) { return __awaiter(_this, void 0, void 0, function () {
-            return __generator(this, function (_a) {
-                res.sendRaw(204, "", {
-                    headers: {
-                        "Access-Control-Allow-Origin": "*",
-                        "Access-Control-Allow-Methods": "GET, OPTIONS",
-                    },
-                });
-                next();
-                return [2 /*return*/];
-            });
-        }); });
-        this.server.opts('/channels/:channelId/:file', function (req, res, next) { return __awaiter(_this, void 0, void 0, function () {
-            return __generator(this, function (_a) {
-                res.sendRaw(204, "", {
-                    headers: {
-                        "Access-Control-Allow-Origin": "*",
-                        "Access-Control-Allow-Methods": "GET, OPTIONS",
-                    },
-                });
-                next();
-                return [2 /*return*/];
-            });
-        }); });
+        this.server.pre(preflight.handler);
         this.server.get('/eventstream/:sessionId', this._handleEventStream.bind(this));
         this.server.get('/status/:sessionId', this._handleStatus.bind(this));
         this.server.get('/health', this._handleAggregatedSessionHealth.bind(this));
@@ -1203,6 +1185,15 @@ var ChannelEngine = /** @class */ (function () {
                 switch (_b.label) {
                     case 0:
                         debug("req.url=".concat(req.url));
+                        if (this.sessionHealthKey && this.sessionHealthKey !== req.headers['x-health-key']) {
+                            res.sendRaw(403, JSON.stringify({ "message": "Invalid Session-Health-Key" }), {
+                                "Content-Type": "application/json",
+                                "Access-Control-Allow-Origin": "*",
+                                "Cache-Control": "no-cache",
+                            });
+                            next();
+                            return [2 /*return*/];
+                        }
                         failingSessions = [];
                         endpoints = [];
                         _i = 0, _a = Object.keys(sessions);

package/dist/examples/default.js

@@ -94,7 +94,8 @@ var engineOptions = {
     defaultSlateUri: "https://maitv-vod.lab.eyevinn.technology/slate-consuo.mp4/master.m3u8",
     slateRepetitions: 10,
     redisUrl: process.env.REDIS_URL,
-    keepAliveTimeout: process.env.KEEP_ALIVE_TIMEOUT ? parseInt(process.env.KEEP_ALIVE_TIMEOUT) * 1000 : undefined
+    keepAliveTimeout: process.env.KEEP_ALIVE_TIMEOUT ? parseInt(process.env.KEEP_ALIVE_TIMEOUT) * 1000 : undefined,
+    sessionHealthKey: 'eyevinn'
 };
 var engine = new index_1.ChannelEngine(refAssetManager, engineOptions);
 engine.start();

package/dist/package.json

@@ -1,6 +1,6 @@
 {
   "name": "eyevinn-channel-engine",
-  "version": "4.3.6",
+  "version": "4.3.7",
   "description": "OTT TV Channel Engine",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/engine/preflight.js

@@ -0,0 +1,44 @@
+const constants = {
+  ALLOW_HEADERS: [
+    'accept',
+    'accept-version',
+    'content-type',
+    'request-id',
+    'origin',
+    'x-api-version',
+    'x-request-id',
+    'x-requested-with'
+  ],
+  EXPOSE_HEADERS: [
+    'api-version',
+    'content-length',
+    'content-md5',
+    'content-type',
+    'date',
+    'request-id',
+    'response-time'
+  ],
+  AC_REQ_METHOD: 'access-control-request-method',
+  AC_REQ_HEADERS: 'access-control-request-headers',
+  AC_ALLOW_CREDS: 'access-control-allow-credentials',
+  AC_ALLOW_ORIGIN: 'access-control-allow-origin',
+  AC_ALLOW_HEADERS: 'access-control-allow-headers',
+  AC_ALLOW_METHODS: 'access-control-allow-methods',
+  AC_EXPOSE_HEADERS: 'access-control-expose-headers',
+  AC_MAX_AGE: 'access-control-max-age',
+  STR_VARY: 'vary',
+  STR_ORIGIN: 'origin',
+  HTTP_NO_CONTENT: 204
+}
+
+exports.handler = function (req, res, next) {
+  if (req.method !== 'OPTIONS') return next();
+  res.once('header', function () {
+    res.header(constants.AC_ALLOW_ORIGIN, '*');
+    res.header(constants.AC_ALLOW_CREDS, true);
+    res.header(constants.AC_ALLOW_METHODS, ['GET', 'OPTIONS']);
+    res.header(constants.AC_ALLOW_HEADERS, ['x-health-key']);
+  });
+
+  res.send(constants.HTTP_NO_CONTENT);
+}

package/engine/server.ts

@@ -15,6 +15,8 @@ const { SessionLiveStateStore } = require('./session_live_state.js');
 const { PlayheadStateStore } = require('./playhead_state.js');
 
 const { filterQueryParser, toHHMMSS, WaitTimeGenerator } = require('./util.js');
+const preflight = require('./preflight.js');
+
 const { version } = require('../package.json');
 
 const AUTO_CREATE_CHANNEL_TIMEOUT = 3000;
@@ -62,6 +64,7 @@ export interface ChannelEngineOpts {
   sessionResetKey?: string;
   keepAliveTimeout?: number;
   sessionEventStream?: boolean;
+  sessionHealthKey?: string;
 }
 
 interface StreamerOpts {
@@ -209,6 +212,7 @@ export class ChannelEngine {
   private autoCreateSession: boolean = false;
   private sessionResetKey: string = "";
   private sessionEventStream: boolean = false;
+  private sessionHealthKey: string = "";
   
   constructor(assetMgr: IAssetManager, options?: ChannelEngineOpts) {
     this.options = options;
@@ -232,6 +236,9 @@ export class ChannelEngine {
     if (options && options.sessionResetKey) {
       this.sessionResetKey = options.sessionResetKey;
     }
+    if (options && options.sessionHealthKey) {
+      this.sessionHealthKey = options.sessionHealthKey;
+    }
     this.alwaysNewSegments = false;
     if (options && options.alwaysNewSegments) {
       this.alwaysNewSegments = true;
@@ -353,25 +360,8 @@ export class ChannelEngine {
     this.server.get('/channels/:channelId/:file', async (req, res, next) => {
       req.query['channel'] = req.params.channelId;
       await handleMasterRoute(req, res, next);
-    });   
-    this.server.opts('/live/:file', async (req, res, next) => {
-      res.sendRaw(204, "", {
-        headers: {
-          "Access-Control-Allow-Origin": "*",
-          "Access-Control-Allow-Methods": "GET, OPTIONS",
-        },
-      });
-      next();
-    });
-    this.server.opts('/channels/:channelId/:file', async (req, res, next) => {
-      res.sendRaw(204, "", {
-        headers: {
-          "Access-Control-Allow-Origin": "*",
-          "Access-Control-Allow-Methods": "GET, OPTIONS",
-        },
-      });
-      next();
     });
+    this.server.pre(preflight.handler);
     this.server.get('/eventstream/:sessionId', this._handleEventStream.bind(this));
     this.server.get('/status/:sessionId', this._handleStatus.bind(this));
     this.server.get('/health', this._handleAggregatedSessionHealth.bind(this));
@@ -957,6 +947,16 @@ export class ChannelEngine {
 
   async _handleAggregatedSessionHealth(req, res, next) {
     debug(`req.url=${req.url}`);
+    if (this.sessionHealthKey && this.sessionHealthKey !== req.headers['x-health-key']) {
+      res.sendRaw(403, JSON.stringify({ "message": "Invalid Session-Health-Key" }),
+      {
+        "Content-Type": "application/json",
+        "Access-Control-Allow-Origin": "*",
+        "Cache-Control": "no-cache",
+      });
+      next();
+      return;
+    }
     let failingSessions = [];
     let endpoints = [];
     for (const sessionId of Object.keys(sessions)) {

package/examples/default.ts

@@ -106,7 +106,8 @@ const engineOptions: ChannelEngineOpts = {
     "https://maitv-vod.lab.eyevinn.technology/slate-consuo.mp4/master.m3u8",
   slateRepetitions: 10,
   redisUrl: process.env.REDIS_URL,
-  keepAliveTimeout: process.env.KEEP_ALIVE_TIMEOUT ? parseInt(process.env.KEEP_ALIVE_TIMEOUT) * 1000: undefined
+  keepAliveTimeout: process.env.KEEP_ALIVE_TIMEOUT ? parseInt(process.env.KEEP_ALIVE_TIMEOUT) * 1000: undefined,
+  sessionHealthKey: 'eyevinn'
 };
 
 const engine = new ChannelEngine(refAssetManager, engineOptions);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "eyevinn-channel-engine",
-  "version": "4.3.6",
+  "version": "4.3.7",
   "description": "OTT TV Channel Engine",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",