From 0aa8929f293f04831516bfad4fc2c5e63e338a3f Mon Sep 17 00:00:00 2001 From: Simon Date: Mon, 19 Oct 2026 07:53:08 +0000 Subject: [PATCH] Docs: the redirect-proxy rule applies to verified Hot Tub app clients only Co-Authored-By: Claude Sonnet 5.5 Claude-Session: https://claude.ai/code/session_01MUYdCh2nCVsQYgJAT7gwSi --- docs/provider-playbook.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/provider-playbook.md b/docs/provider-playbook.md index ef3778e..6c84824 100644 --- a/docs/provider-playbook.md +++ b/docs/provider-playbook.md @@ -26,7 +26,7 @@ These rules cut across every step below. They are intentionally grouped at the t ### Output Shape -- **Never put a redirecting URL in `formats[].url`**: the Hot Tub app cannot follow redirects there. Redirect proxies (`REDIRECT_PROXIES` in `src/proxy.rs`) are for `video.url`; `api.rs` moves such formats to `url` for verified app clients as a safety net. +- **Verified Hot Tub app clients cannot follow redirects in `formats[].url`.** Redirect proxies (`REDIRECT_PROXIES` in `src/proxy.rs`) are for `video.url` in the app response; `api.rs` moves such formats to `url` for verified app clients as a safety net. Other clients keep the redirect-proxy URLs in `formats`. - Use `formats` for real media URLs (HLS, multi-quality, signed token), and keep `video.url` on a stable page URL. Never set `video.url` to a tokenized stream that needs a `Referer` to play — the `url` field has no header contract. - If thumbnails need a `Referer` and the player has no per-thumb header mechanism, proxy them via `/proxy/-thumb/...`. The same applies to manifests with relative URIs. - Keep filter `id` values stable and machine-targeted. Display `title`s change; ids route.