Session-Bound Stream Proxy
HLS manifests, TS/fMP4 segments, and byte-range VOD streams are rewritten through signed, audience-bound playback sessions with SSRF and private-network protection.
High-throughput media backend powering session-bound HLS & MP4 proxy streaming, OAuth-style Smart TV device linking, multi-profile parental controls, and automated XMLTV EPG pipelines.
HLS manifests, TS/fMP4 segments, and byte-range VOD streams are rewritten through signed, audience-bound playback sessions with SSRF and private-network protection.
Searchable movies, multi-season series, intro/recap skip markers, profile-scoped watch history, Kids-safe filtering, and window-indexed live TV schedules.
One-time 8-character device pairing codes, idempotent voucher redemption, strict concurrent device limits, and instant device/IP revocation.
Protected client endpoints use scoped Sanctum bearer tokens together with profile and device identifiers.
Accept: application/json
Authorization: Bearer {access_token}
X-Profile-ID: {profile_id}
X-Device-ID: {unique_hardware_id}
| Endpoint | Method | Description | Scope |
|---|---|---|---|
| /api/auth/device/code | POST | Issues a short-lived Smart TV pairing code and polling secret. | Public |
| /api/discover | GET | Aggregated home screen feed: hero banner, continue watching, featured VOD, and top live channels. | content:read |
| /api/channels | GET | Cached live channel lineup with optional category_id, is_featured, and q filters. |
content:read |
| /api/epg/live | GET | Current and next airing EPG programs per active channel. | content:read |
| /api/vod/movies | GET | Paginated movie catalog supporting search (q), category filter, and sorting. |
content:read |
| /api/vod/series/{id} | GET | Full series metadata with ordered seasons, episodes, skip markers, and signed stream URLs. | content:read |