Zibbp / ganymede

Twitch VOD and Live Stream archiving platform. Includes a rendered and real-time chat for each archive.
https://github.com/Zibbp/ganymede
GNU General Public License v3.0
457 stars 24 forks source link

[Feature Request] Only logged in users can see the VODs #121

Open szotyo-sys opened 1 year ago

szotyo-sys commented 1 year ago

Idea: If the user is not logged in, they can't see nothing in the webpage except the login form.

Problem: I'm running the service exposed to the internet with reverse proxy and don't want to generate a large amount of traffic from unknown users streaming these vods.

My Solution: In an "alternative" solution I was thinking to use Nginx proxy managers basic auth to restrict the page, but I don't know if this would affect the ganymede-api or ganymede-nginx.

Thanks for your reply.

Zibbp commented 1 year ago

Hi, The frontend container has an optional environment variable REQUIRE_LOGIN that if set to true will require users to be authenticated to view videos. More information can be found in the release notes that introduced this feature.

Does this help?

szotyo-sys commented 1 year ago

Yes, that's awesome thanks, furthermore this existing feature could get some upgrade or maybe via introducing a new optional variable to hide the complete "Recently Archived, Channels, Playlists" for unauthorized requests and just the login/register page is available.

MadMakz commented 1 year ago

Hi, The frontend container has an optional environment variable REQUIRE_LOGIN that if set to true will require users to be authenticated to view videos. More information can be found in the release notes that introduced this feature.

Just a headsup that there's no additional session / security check here. You can rebuild the stream URL / .m3u8 by looking at the page source and play them in an alternative player like VLC.