feat: Implement IPTV stream proxy to resolve CORS issues and refine desktop player menu positioning for fullscreen.

components/iptv/IPTVPlayer.tsx

@@ -2,7 +2,8 @@
 
 /**
  * IPTVPlayer - Lightweight player for IPTV live streams
- * Uses HLS.js for playback with a channel switching sidebar
+ * Uses HLS.js for playback with a channel switching sidebar.
+ * Routes streams through /api/iptv/stream proxy to avoid CORS issues.
  */
 
 import { useRef, useEffect, useState, useCallback } from 'react';
@@ -17,6 +18,10 @@ interface IPTVPlayerProps {
   onChannelChange: (channel: M3UChannel) => void;
 }
 
+function getProxiedUrl(url: string): string {
+  return `/api/iptv/stream?url=${encodeURIComponent(url)}`;
+}
+
 export function IPTVPlayer({ channel, onClose, channels, onChannelChange }: IPTVPlayerProps) {
   const videoRef = useRef<HTMLVideoElement>(null);
   const hlsRef = useRef<Hls | null>(null);
@@ -37,62 +42,117 @@ export function IPTVPlayer({ channel, onClose, channels, onChannelChange }: IPTV
       hlsRef.current = null;
     }
 
-    const url = ch.url;
+    const originalUrl = ch.url;
+    const proxiedUrl = getProxiedUrl(originalUrl);
 
-    if (url.endsWith('.m3u8') || url.includes('.m3u8')) {
-      if (Hls.isSupported()) {
-        const hls = new Hls({
+    // Try HLS.js first for all URLs (many IPTV streams are HLS even without .m3u8 extension)
+    if (Hls.isSupported()) {
+      const hls = new Hls({
+        enableWorker: true,
+        lowLatencyMode: true,
+        liveDurationInfinity: true,
+      });
+      hlsRef.current = hls;
+
+      let triedProxy = false;
+
+      const tryWithProxy = () => {
+        if (triedProxy) return;
+        triedProxy = true;
+        // Retry with proxied URL
+        hls.destroy();
+        const hlsProxy = new Hls({
           enableWorker: true,
           lowLatencyMode: true,
           liveDurationInfinity: true,
         });
-        hlsRef.current = hls;
+        hlsRef.current = hlsProxy;
 
-        hls.loadSource(url);
-        hls.attachMedia(video);
+        hlsProxy.loadSource(proxiedUrl);
+        hlsProxy.attachMedia(video);
 
-        hls.on(Hls.Events.MANIFEST_PARSED, () => {
+        hlsProxy.on(Hls.Events.MANIFEST_PARSED, () => {
           setIsLoading(false);
           video.play().catch(() => {});
         });
 
-        hls.on(Hls.Events.ERROR, (_, data) => {
+        hlsProxy.on(Hls.Events.ERROR, (_, data) => {
           if (data.fatal) {
             setIsLoading(false);
-            if (data.type === Hls.ErrorTypes.NETWORK_ERROR) {
-              setError('网络错误，无法加载频道');
-            } else if (data.type === Hls.ErrorTypes.MEDIA_ERROR) {
-              hls.recoverMediaError();
+            if (data.type === Hls.ErrorTypes.MEDIA_ERROR) {
+              hlsProxy.recoverMediaError();
             } else {
-              setError('播放错误，请尝试其他频道');
+              // Last resort: try direct video element
+              hlsProxy.destroy();
+              hlsRef.current = null;
+              tryDirectVideo(proxiedUrl);
             }
           }
         });
-      } else if (video.canPlayType('application/vnd.apple.mpegurl')) {
-        // Native HLS (Safari/iOS)
-        video.src = url;
-        video.addEventListener('loadedmetadata', () => {
+      };
+
+      // First try direct URL
+      hls.loadSource(originalUrl);
+      hls.attachMedia(video);
+
+      hls.on(Hls.Events.MANIFEST_PARSED, () => {
+        setIsLoading(false);
+        video.play().catch(() => {});
+      });
+
+      hls.on(Hls.Events.ERROR, (_, data) => {
+        if (data.fatal) {
+          if (data.type === Hls.ErrorTypes.NETWORK_ERROR) {
+            // Likely CORS - try proxy
+            tryWithProxy();
+          } else if (data.type === Hls.ErrorTypes.MEDIA_ERROR) {
+            hls.recoverMediaError();
+          } else {
+            tryWithProxy();
+          }
+        }
+      });
+    } else if (video.canPlayType('application/vnd.apple.mpegurl')) {
+      // Native HLS (Safari/iOS) - try direct first, fall back to proxy
+      tryNativeHls(video, originalUrl, proxiedUrl);
+    } else {
+      tryDirectVideo(originalUrl);
+    }
+
+    function tryNativeHls(vid: HTMLVideoElement, url: string, fallbackUrl: string) {
+      vid.src = url;
+      const onLoad = () => {
+        setIsLoading(false);
+        vid.play().catch(() => {});
+      };
+      const onError = () => {
+        vid.removeEventListener('loadedmetadata', onLoad);
+        // Try proxied URL
+        vid.src = fallbackUrl;
+        vid.addEventListener('loadedmetadata', () => {
           setIsLoading(false);
-          video.play().catch(() => {});
+          vid.play().catch(() => {});
         }, { once: true });
-        video.addEventListener('error', () => {
+        vid.addEventListener('error', () => {
           setIsLoading(false);
           setError('播放错误');
         }, { once: true });
-      } else {
-        setError('您的浏览器不支持 HLS 播放');
+      };
+      vid.addEventListener('loadedmetadata', onLoad, { once: true });
+      vid.addEventListener('error', onError, { once: true });
+    }
+
+    function tryDirectVideo(url: string) {
+      const vid = videoRef.current;
+      if (!vid) return;
+      vid.src = url;
+      vid.addEventListener('loadedmetadata', () => {
         setIsLoading(false);
-      }
-    } else {
-      // Direct video URL (mp4, etc.)
-      video.src = url;
-      video.addEventListener('loadedmetadata', () => {
-        setIsLoading(false);
-        video.play().catch(() => {});
+        vid.play().catch(() => {});
       }, { once: true });
-      video.addEventListener('error', () => {
+      vid.addEventListener('error', () => {
         setIsLoading(false);
-        setError('播放错误');
+        setError('播放错误，请尝试其他频道');
       }, { once: true });
     }
   }, []);

components/player/desktop/DesktopMoreMenu.tsx

@@ -93,9 +93,9 @@ export function DesktopMoreMenu({
     const calculateMenuPosition = React.useCallback(() => {
         if (!buttonRef.current || !containerRef.current) return;
 
-        if (!isRotated) {
-            // Normal Mode: Non-rotated (Portrait on Mobile)
-            // Use Viewport Coordinates but position relative to button (User Request: "Below button")
+        if (!isRotated && !isFullscreen) {
+            // Normal Mode: Non-rotated, non-fullscreen
+            // Use Viewport Coordinates but position relative to button
             // And use Body Portal to escape container clipping
             const buttonRect = buttonRef.current.getBoundingClientRect();
             const viewportHeight = window.innerHeight;
@@ -136,6 +136,47 @@ export function DesktopMoreMenu({
                 openUpward: openUpward,
                 align: align
             });
+        } else if (isFullscreen && !isRotated) {
+            // Fullscreen Mode (not rotated): Use container-relative coordinates
+            // Portal goes to containerRef to stay visible within fullscreen element
+            let top = 0;
+            let left = 0;
+            let el: HTMLElement | null = buttonRef.current;
+
+            while (el && el !== containerRef.current) {
+                top += el.offsetTop;
+                left += el.offsetLeft;
+                el = el.offsetParent as HTMLElement;
+            }
+
+            const buttonHeight = buttonRef.current.offsetHeight;
+            const buttonWidth = buttonRef.current.offsetWidth;
+            const containerWidth = containerRef.current.offsetWidth;
+            const containerHeight = containerRef.current.offsetHeight;
+
+            const spaceBelow = containerHeight - (top + buttonHeight) - 10;
+            const spaceAbove = top - 10;
+
+            const estimatedMenuHeight = 450;
+            const actualMenuHeight = menuRef.current?.offsetHeight || estimatedMenuHeight;
+
+            const openUpward = spaceBelow < Math.min(actualMenuHeight, 300) && spaceAbove > spaceBelow;
+            const maxHeight = openUpward
+                ? Math.min(spaceAbove, actualMenuHeight)
+                : Math.min(spaceBelow, containerHeight * 0.7);
+
+            const isLeftHalf = left < containerWidth / 2;
+            const align = isLeftHalf ? 'left' : 'right';
+
+            setMenuPosition({
+                top: openUpward
+                    ? top - 10
+                    : top + buttonHeight + 10,
+                left: isLeftHalf ? left : left + buttonWidth,
+                maxHeight: `${maxHeight}px`,
+                openUpward: openUpward,
+                align: align
+            });
         } else {
             // Rotated Mode: Use Container Coordinates (offset loop) and Portal to Container
             let top = 0;
@@ -185,7 +226,7 @@ export function DesktopMoreMenu({
                 align: align
             });
         }
-    }, [containerRef, isRotated]);
+    }, [containerRef, isRotated, isFullscreen]);
 
 
 
@@ -583,7 +624,7 @@ export function DesktopMoreMenu({
 
             {/* More Menu Dropdown (Portal) */}
             {/* More Menu Dropdown (Portal) */}
-            {showMoreMenu && typeof document !== 'undefined' && createPortal(MenuContent, (isRotated && containerRef.current) ? containerRef.current : document.body)}
+            {showMoreMenu && typeof document !== 'undefined' && createPortal(MenuContent, ((isRotated || isFullscreen) && containerRef.current) ? containerRef.current : document.body)}
         </div>
     );
 }

components/player/desktop/DesktopSpeedMenu.tsx

@@ -51,9 +51,9 @@ export function DesktopSpeedMenu({
     const calculateMenuPosition = React.useCallback(() => {
         if (!buttonRef.current || !containerRef.current) return;
 
-        if (!isRotated) {
-            // Normal Mode: Non-rotated
-            // Use Viewport Coordinates but position relative to button (User Request: "Below button")
+        if (!isRotated && !isFullscreen) {
+            // Normal Mode: Non-rotated, non-fullscreen
+            // Use Viewport Coordinates but position relative to button
             // And use Body Portal to escape container clipping
             const buttonRect = buttonRef.current.getBoundingClientRect();
             const viewportHeight = window.innerHeight;
@@ -94,6 +94,46 @@ export function DesktopSpeedMenu({
                 openUpward: openUpward,
                 align: align
             });
+        } else if (isFullscreen && !isRotated) {
+            // Fullscreen Mode (not rotated): Use container-relative coordinates
+            let top = 0;
+            let left = 0;
+            let el: HTMLElement | null = buttonRef.current;
+
+            while (el && el !== containerRef.current) {
+                top += el.offsetTop;
+                left += el.offsetLeft;
+                el = el.offsetParent as HTMLElement;
+            }
+
+            const buttonHeight = buttonRef.current.offsetHeight;
+            const buttonWidth = buttonRef.current.offsetWidth;
+            const containerWidth = containerRef.current.offsetWidth;
+            const containerHeight = containerRef.current.offsetHeight;
+
+            const spaceBelow = containerHeight - (top + buttonHeight) - 10;
+            const spaceAbove = top - 10;
+
+            const estimatedMenuHeight = 250;
+            const actualMenuHeight = menuRef.current?.offsetHeight || estimatedMenuHeight;
+
+            const openUpward = spaceBelow < Math.min(actualMenuHeight, 200) && spaceAbove > spaceBelow;
+            const maxHeight = openUpward
+                ? Math.min(spaceAbove, actualMenuHeight)
+                : Math.min(spaceBelow, containerHeight * 0.7);
+
+            const isLeftHalf = left < containerWidth / 2;
+            const align = isLeftHalf ? 'left' : 'right';
+
+            setMenuPosition({
+                top: openUpward
+                    ? top - 10
+                    : top + buttonHeight + 10,
+                left: isLeftHalf ? left : left + buttonWidth,
+                maxHeight: `${maxHeight}px`,
+                openUpward: openUpward,
+                align: align
+            });
         } else {
             // Rotated Mode: Fullscreen/Landscape forced
             // Use Container Coordinates (offset loop) and Portal to Container
@@ -146,7 +186,7 @@ export function DesktopSpeedMenu({
                 align: align
             });
         }
-    }, [containerRef, isRotated]);
+    }, [containerRef, isRotated, isFullscreen]);
 
 
 
@@ -255,7 +295,7 @@ export function DesktopSpeedMenu({
                 So portaling to containerRef is SAFE and CORRECT.
             */}
             {/* Speed Menu (Portal) */}
-            {showSpeedMenu && typeof document !== 'undefined' && createPortal(MenuContent, (isRotated && containerRef.current) ? containerRef.current : document.body)}
+            {showSpeedMenu && typeof document !== 'undefined' && createPortal(MenuContent, ((isRotated || isFullscreen) && containerRef.current) ? containerRef.current : document.body)}
         </div>
     );
 }

components/settings/AccountSettings.tsx

@@ -24,6 +24,8 @@ export function AccountSettings() {
   const [showConfigGen, setShowConfigGen] = useState(false);
   const [configEntries, setConfigEntries] = useState<ConfigEntry[]>([]);
   const [copied, setCopied] = useState(false);
+  const [removedAccounts, setRemovedAccounts] = useState<Set<number>>(new Set());
+  const [hasAdminPassword, setHasAdminPassword] = useState(false);
 
   useEffect(() => {
     setSessionState(getSession());
@@ -38,6 +40,7 @@ export function AccountSettings() {
       .then(res => res.json())
       .then(data => {
         if (data.accounts) setAccounts(data.accounts);
+        if (data.hasAdminPassword) setHasAdminPassword(data.hasAdminPassword);
       })
       .catch(() => {});
   }, []);
@@ -79,6 +82,33 @@ export function AccountSettings() {
     });
   };
 
+  // Load existing accounts into config generator (without passwords)
+  const loadExistingAccounts = () => {
+    // Filter out removed accounts and the standalone admin password account
+    const existingEntries: ConfigEntry[] = accounts
+      .filter((_, i) => !removedAccounts.has(i))
+      .filter(a => !(a.name === '管理员' && hasAdminPassword))
+      .map(a => ({
+        password: '',
+        name: a.name,
+        role: a.role,
+      }));
+    setConfigEntries(existingEntries);
+    setShowConfigGen(true);
+  };
+
+  // Remove account from visible list and track removal
+  const handleRemoveAccount = (index: number) => {
+    setRemovedAccounts(prev => {
+      const next = new Set(prev);
+      next.add(index);
+      return next;
+    });
+  };
+
+  // Get visible accounts (excluding removed ones)
+  const visibleAccounts = accounts.filter((_, i) => !removedAccounts.has(i));
+
   if (!hasAuth && !session) return null;
 
   return (
@@ -115,34 +145,69 @@ export function AccountSettings() {
         )}
 
         {/* Account List (Admin only) */}
-        {isAdmin && accounts.length > 0 && (
+        {isAdmin && visibleAccounts.length > 0 && (
           <div>
             <h3 className="text-sm font-medium text-[var(--text-color)] mb-3 flex items-center gap-2">
               <Icons.Users size={16} className="text-[var(--accent-color)]" />
               已配置的账户
             </h3>
             <div className="space-y-2">
-              {accounts.map((account, index) => (
-                <div
-                  key={index}
-                  className="flex items-center justify-between px-4 py-2.5 bg-[var(--glass-bg)] border border-[var(--glass-border)] rounded-[var(--radius-2xl)]"
-                >
-                  <div className="flex items-center gap-3">
-                    <div className="w-8 h-8 rounded-[var(--radius-full)] bg-[var(--accent-color)]/10 flex items-center justify-center text-[var(--accent-color)] font-bold text-sm border border-[var(--glass-border)]">
-                      {account.name.charAt(0)}
+              {accounts.map((account, index) => {
+                if (removedAccounts.has(index)) return null;
+                return (
+                  <div
+                    key={index}
+                    className="flex items-center justify-between px-4 py-2.5 bg-[var(--glass-bg)] border border-[var(--glass-border)] rounded-[var(--radius-2xl)]"
+                  >
+                    <div className="flex items-center gap-3">
+                      <div className="w-8 h-8 rounded-[var(--radius-full)] bg-[var(--accent-color)]/10 flex items-center justify-center text-[var(--accent-color)] font-bold text-sm border border-[var(--glass-border)]">
+                        {account.name.charAt(0)}
+                      </div>
+                      <span className="text-sm text-[var(--text-color)]">{account.name}</span>
+                    </div>
+                    <div className="flex items-center gap-2">
+                      <span className={`text-xs px-2 py-0.5 rounded-[var(--radius-full)] ${
+                        account.role === 'admin'
+                          ? 'bg-[var(--accent-color)]/10 text-[var(--accent-color)]'
+                          : 'bg-[var(--glass-bg)] text-[var(--text-color-secondary)] border border-[var(--glass-border)]'
+                      }`}>
+                        {account.role === 'admin' ? '管理员' : '观众'}
+                      </span>
+                      <button
+                        onClick={() => handleRemoveAccount(index)}
+                        className="p-1 text-[var(--text-color-secondary)] hover:text-red-500 transition-colors cursor-pointer"
+                        title="移除账户"
+                      >
+                        <Icons.Trash size={14} />
+                      </button>
                     </div>
-                    <span className="text-sm text-[var(--text-color)]">{account.name}</span>
                   </div>
-                  <span className={`text-xs px-2 py-0.5 rounded-[var(--radius-full)] ${
-                    account.role === 'admin'
-                      ? 'bg-[var(--accent-color)]/10 text-[var(--accent-color)]'
-                      : 'bg-[var(--glass-bg)] text-[var(--text-color-secondary)] border border-[var(--glass-border)]'
-                  }`}>
-                    {account.role === 'admin' ? '管理员' : '观众'}
-                  </span>
-                </div>
-              ))}
+                );
+              })}
             </div>
+
+            {/* Notice when accounts have been removed */}
+            {removedAccounts.size > 0 && (
+              <div className="mt-3 p-3 bg-amber-500/10 border border-amber-500/20 rounded-[var(--radius-2xl)]">
+                <p className="text-xs text-amber-400">
+                  已标记移除 {removedAccounts.size} 个账户。请使用下方配置生成器生成新的 <code className="px-1 py-0.5 bg-black/20 rounded text-[10px]">ACCOUNTS</code> 环境变量值并更新部署配置。
+                </p>
+                <div className="flex gap-2 mt-2">
+                  <button
+                    onClick={loadExistingAccounts}
+                    className="text-xs px-3 py-1 bg-amber-500/20 hover:bg-amber-500/30 text-amber-400 rounded-[var(--radius-2xl)] transition-colors cursor-pointer"
+                  >
+                    生成新配置
+                  </button>
+                  <button
+                    onClick={() => setRemovedAccounts(new Set())}
+                    className="text-xs px-3 py-1 bg-[var(--glass-bg)] border border-[var(--glass-border)] text-[var(--text-color-secondary)] hover:text-[var(--text-color)] rounded-[var(--radius-2xl)] transition-colors cursor-pointer"
+                  >
+                    撤销
+                  </button>
+                </div>
+              </div>
+            )}
           </div>
         )}
 
@@ -154,18 +219,33 @@ export function AccountSettings() {
                 <Icons.Settings size={16} className="text-[var(--accent-color)]" />
                 配置生成器
               </h3>
-              <button
-                onClick={() => setShowConfigGen(!showConfigGen)}
-                className="text-xs text-[var(--accent-color)] hover:underline cursor-pointer"
-              >
-                {showConfigGen ? '收起' : '展开'}
-              </button>
+              <div className="flex items-center gap-2">
+                {!showConfigGen && accounts.length > 0 && (
+                  <button
+                    onClick={loadExistingAccounts}
+                    className="text-xs text-[var(--text-color-secondary)] hover:text-[var(--accent-color)] transition-colors cursor-pointer"
+                  >
+                    导入现有账户
+                  </button>
+                )}
+                <button
+                  onClick={() => setShowConfigGen(!showConfigGen)}
+                  className="text-xs text-[var(--accent-color)] hover:underline cursor-pointer"
+                >
+                  {showConfigGen ? '收起' : '展开'}
+                </button>
+              </div>
             </div>
 
             {showConfigGen && (
               <div className="space-y-4 p-4 bg-[var(--glass-bg)] border border-[var(--glass-border)] rounded-[var(--radius-2xl)]">
                 <p className="text-xs text-[var(--text-color-secondary)]">
                   添加账户条目后，将生成的 <code className="px-1 py-0.5 bg-[var(--glass-bg)] rounded text-[10px]">ACCOUNTS</code> 环境变量值复制到部署配置中。
+                  {configEntries.some(e => !e.password && e.name) && (
+                    <span className="text-amber-400 block mt-1">
+                      注意：导入的账户需要重新输入密码。
+                    </span>
+                  )}
                 </p>
 
                 {/* Entry List */}
@@ -178,7 +258,9 @@ export function AccountSettings() {
                           placeholder="密码"
                           value={entry.password}
                           onChange={(e) => updateConfigEntry(index, 'password', e.target.value)}
-                          className="flex-1 px-3 py-1.5 bg-[var(--glass-bg)] border border-[var(--glass-border)] rounded-[var(--radius-2xl)] text-sm text-[var(--text-color)] placeholder:text-[var(--text-color-secondary)]/50 focus:outline-none focus:border-[var(--accent-color)]"
+                          className={`flex-1 px-3 py-1.5 bg-[var(--glass-bg)] border rounded-[var(--radius-2xl)] text-sm text-[var(--text-color)] placeholder:text-[var(--text-color-secondary)]/50 focus:outline-none focus:border-[var(--accent-color)] ${
+                            !entry.password && entry.name ? 'border-amber-500/50' : 'border-[var(--glass-border)]'
+                          }`}
                         />
                         <input
                           type="text"