{"name":"Secure HLS Streaming Proxy","description":"An isolated edge proxy that decrypts play tokens, manages CORS contexts, validates system-level expirations, and directly proxies masked M3U8 streams without leaking original manifest URLs to client-side runtimes.","version":"1.1.0","endpoints":{"root":{"path":"/","method":"GET","headers":{"Origin":"Allowed frontends / client-side pages"},"response":"This API documentation schema."},"health":{"path":"/health","method":"GET","headers":{"Origin":"Allowed frontends / client-side pages"},"response":{"status":"ok","timestamp":"ISO 8601 String"}},"play":{"path":"/play","method":"GET","query_parameters":{"token":{"required":true,"type":"String (Hex)","format":"IV_HEX:CIPHERTEXT_HEX","encryption_cipher":"AES-256-GCM (Keys Derived via SHA-256)","payload_structure":{"stream_url":"String (The raw destination .m3u8 URL to stream)","expire":"Number/String (Unix Timestamp in seconds or ISO Expiration Date)","user_token":"String (Optional identifier token parsed by PHP session backend)","stream_id":"String/Number (Optional streaming ID node verified against database)"}}},"response":"Standard Stream Manifest Content (application/vnd.apple.mpegurl / application/x-mpegURL)"}},"security_architecture":{"origin_protection":"Strictly checks Origin/Referer header bindings against predefined whitelist arrays.","edge_rate_limiting":"Restricts operations to 100 hits per 60s on a rolling client-IP basis.","logging_policy":"Complies with high-security guidelines: absolute suppression of stream URLs, decrypted payload states, and secrets inside operational logs."}}