feat: Implement IPTV stream proxy to resolve CORS issues and refine desktop player menu positioning for fullscreen.

app/api/iptv/route.ts

@@ -5,7 +5,7 @@
 
 import { NextRequest, NextResponse } from 'next/server';
 
-export const runtime = 'edge';
+export const runtime = 'nodejs';
 
 export async function GET(request: NextRequest) {
   const url = request.nextUrl.searchParams.get('url');

app/api/iptv/stream/route.ts

@@ -0,0 +1,125 @@
+/**
+ * IPTV Stream Proxy API Route
+ * Proxies HLS manifests and media segments to avoid CORS issues.
+ * For .m3u8 manifests, rewrites URLs to also route through this proxy.
+ */
+
+import { NextRequest, NextResponse } from 'next/server';
+
+export const runtime = 'nodejs';
+
+function resolveUrl(base: string, relative: string): string {
+  if (relative.startsWith('http://') || relative.startsWith('https://')) {
+    return relative;
+  }
+  try {
+    return new URL(relative, base).href;
+  } catch {
+    // Fallback: manual resolution
+    const baseUrl = base.substring(0, base.lastIndexOf('/') + 1);
+    return baseUrl + relative;
+  }
+}
+
+function rewriteM3u8(content: string, baseUrl: string, proxyBase: string): string {
+  return content.split('\n').map(line => {
+    const trimmed = line.trim();
+    // Skip empty lines and comments (but process URI= in EXT tags)
+    if (!trimmed) return line;
+
+    // Rewrite URI="..." in EXT-X-KEY, EXT-X-MAP, etc.
+    if (trimmed.startsWith('#') && trimmed.includes('URI="')) {
+      return line.replace(/URI="([^"]+)"/g, (_match, uri) => {
+        const absoluteUri = resolveUrl(baseUrl, uri);
+        return `URI="${proxyBase}${encodeURIComponent(absoluteUri)}"`;
+      });
+    }
+
+    // Skip other comment lines
+    if (trimmed.startsWith('#')) return line;
+
+    // This is a segment/playlist URL line - rewrite it
+    const absoluteUrl = resolveUrl(baseUrl, trimmed);
+    return `${proxyBase}${encodeURIComponent(absoluteUrl)}`;
+  }).join('\n');
+}
+
+export async function GET(request: NextRequest) {
+  const url = request.nextUrl.searchParams.get('url');
+
+  if (!url) {
+    return NextResponse.json({ error: 'Missing url parameter' }, { status: 400 });
+  }
+
+  try {
+    const response = await fetch(url, {
+      headers: {
+        'User-Agent': 'Mozilla/5.0 (compatible; KVideo/1.0)',
+        'Accept': '*/*',
+      },
+    });
+
+    if (!response.ok) {
+      return NextResponse.json(
+        { error: `Failed to fetch: ${response.status}` },
+        { status: response.status }
+      );
+    }
+
+    const contentType = response.headers.get('content-type') || '';
+    const isM3u8 = url.includes('.m3u8') ||
+      contentType.includes('mpegurl') ||
+      contentType.includes('x-mpegURL');
+
+    const corsHeaders = {
+      'Access-Control-Allow-Origin': '*',
+      'Access-Control-Allow-Methods': 'GET, OPTIONS',
+      'Access-Control-Allow-Headers': '*',
+    };
+
+    if (isM3u8) {
+      // Parse and rewrite manifest
+      const text = await response.text();
+      const proxyBase = `/api/iptv/stream?url=`;
+      const rewritten = rewriteM3u8(text, url, proxyBase);
+
+      return new NextResponse(rewritten, {
+        status: 200,
+        headers: {
+          'Content-Type': 'application/vnd.apple.mpegurl',
+          'Cache-Control': 'no-cache',
+          ...corsHeaders,
+        },
+      });
+    } else {
+      // Pipe through media segments directly
+      const body = response.body;
+      const forwardContentType = contentType || 'video/mp2t';
+
+      return new NextResponse(body, {
+        status: 200,
+        headers: {
+          'Content-Type': forwardContentType,
+          'Cache-Control': 'public, max-age=60',
+          ...corsHeaders,
+        },
+      });
+    }
+  } catch (e) {
+    return NextResponse.json(
+      { error: 'Failed to proxy stream' },
+      { status: 500 }
+    );
+  }
+}
+
+export async function OPTIONS() {
+  return new NextResponse(null, {
+    status: 204,
+    headers: {
+      'Access-Control-Allow-Origin': '*',
+      'Access-Control-Allow-Methods': 'GET, OPTIONS',
+      'Access-Control-Allow-Headers': '*',
+    },
+  });
+}