Nicolas
b6818655b1
All checks were successful
Publier l'image Docker / publish (push) Successful in 6s
Three changes requested:
1. Server proxies Emby, browser never talks to it directly. Login is
now POST /api/auth/login {username,password} on our own backend;
the backend calls Emby's AuthenticateByName server-side and mints
its own opaque session (httpOnly cookie), storing
{embyToken,userId,userName} in memory. The browser never sees or
holds a real Emby access token. Every other call - search, item
details, images, HLS streaming, party actions - goes to our own
/api/* origin, authenticated by that cookie; server/src/embyProxy.js
forwards to Emby server-side and streams the response back
(including a playlist-rewrite pass for HLS .m3u8 so hls.js never
gets handed a URL pointing at Emby directly). This also sidesteps
the CORS problem the previous direct-to-Emby design had.
2. EMBY_SERVER_URL is backend-only config (.env.example); the login
form no longer asks for a server address at all.
3. client/css/app.css now uses colors read directly off the live Emby
server's own dark theme (--theme-primary-color-* etc, fetched via a
JS probe against the running client, not guessed): accent green
#52b54b/#6ccf65, near-black background #151216.
Tested for real: ran the server locally against the actual
EMBY_SERVER_URL and submitted intentionally-wrong credentials through
the UI - confirmed the full round trip (browser -> our backend -> real
Emby -> real 401 -> our error message) with no CORS issue, since it's
all server-to-server now. Login itself hasn't been exercised with real
credentials, so catalog/streaming remain unverified - see
docs/architecture.md.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
24 lines
784 B
JavaScript
24 lines
784 B
JavaScript
import { route, start, navigate } from './router.js';
|
|
import { auth, restoreSession } from './embyApi.js';
|
|
import { renderLogin } from './views/login.js';
|
|
import { renderBrowse } from './views/browse.js';
|
|
import { renderItemDetail } from './views/itemDetail.js';
|
|
import { renderPartyPlayer } from './views/player.js';
|
|
|
|
function requireAuth(renderFn) {
|
|
return async (root, params) => {
|
|
if (!auth.isLoggedIn && !(await restoreSession())) {
|
|
navigate('/login');
|
|
return;
|
|
}
|
|
renderFn(root, params);
|
|
};
|
|
}
|
|
|
|
route('/', () => navigate('/browse'));
|
|
route('/login', renderLogin);
|
|
route('/browse', requireAuth(renderBrowse));
|
|
route('/item/:id', requireAuth(renderItemDetail));
|
|
route('/party/:id', requireAuth(renderPartyPlayer));
|
|
|
|
start(document.getElementById('app'));
|