Content Sharing

Fastify 5 route

// POST /api/content  (multipart)
fastify.post('/content', {
  preHandler: [authenticate, checkRole(['creator'])],
  schema: { consumes: ['multipart/form-data'] },
}, async (req, reply) => {
  const data = await req.file();          // busboy
  const s3Key = await uploadToS3(data);  // stream to S3
  const thumb = await generateThumb(s3Key);
  const record = await db.insert(content).values({
    creatorId: req.user.id,
    s3Key, thumbnailKey: thumb,
    type: data.fields.type.value,
    isPremium: data.fields.isPremium.value === 'true',
    tokenPrice: Number(data.fields.price.value) || 0,
  }).returning();
  return reply.status(201).send(record[0]);
});

Video Transcoding (FFmpeg → HLS)

// services/transcoder.ts
import ffmpeg from 'fluent-ffmpeg';
export async function transcodeToHLS(s3Key: string) {
  const input = await downloadFromS3(s3Key);
  return new Promise((resolve, reject) => {
    ffmpeg(input)
      .outputOptions([
        '-codec: copy',
        '-start_number 0',
        '-hls_time 4',
        '-hls_list_size 0',
        '-f hls',
      ])
      .output(`/tmp/${s3Key}/index.m3u8`)
      .on('end', async () => {
        const hlsKey = await uploadHLSToS3(s3Key);
        resolve(hlsKey);
      })
      .on('error', reject)
      .run();
  });
}

Visueel voorbeeld

Blur-laag via CSS backdrop-filter: blur() + overlay. Signed URL alleen na unlock.

Unlock + Consent Logging

// POST /api/content/:id/unlock
async function unlockContent(req, reply) {
  const { id } = req.params;
  const user = req.user;

  // 1. Check token balance
  const item = await db.query.content
    .findFirst({ where: eq(content.id, id) });
  if (user.tokenBalance < item.tokenPrice)
    return reply.status(402).send({ error: 'Insufficient tokens' });

  // 2. Deduct tokens
  await db.update(users).set({
    tokenBalance: sql`token_balance - ${item.tokenPrice}`
  }).where(eq(users.id, user.id));

  // 3. Log unlock in consent_logs
  await db.insert(consentLogs).values({
    userId: user.id,
    contentId: id,
    creatorId: item.creatorId,
    tokensPaid: item.tokenPrice,
    action: 'freeze_reveal_unlock',
  });

  // 4. Return signed S3 URL (1h expiry)
  const url = await getPresignedUrl(item.s3Key, 3600);
  return reply.send({ url });
}

S3 Presigned URLs (1h expiry)

import { GetObjectCommand, S3Client } from '@aws-sdk/client-s3';
import { getSignedUrl } from '@aws-sdk/s3-request-presigner';

const s3 = new S3Client({ region: 'eu-west-1' });

export async function getPresignedUrl(key: string, ttl = 3600) {
  const cmd = new GetObjectCommand({
    Bucket: process.env.S3_BUCKET,
    Key: key,
  });
  return getSignedUrl(s3, cmd, { expiresIn: ttl });
}
// Publieke content → CloudFront CDN (geen signing)
// Privé / premium → presigned URL, 3600s TTL

Regels

• ✓
  Publieke content — CloudFront CDN, geen signing, lang gecached (7 dagen)
• 🔒
  Premium / privé — S3 presigned URL, 1h TTL, gegenereerd on-demand na unlock
• 🎞️
  HLS video streams — Signed CloudFront URL per segment, token in query string
• 🖼️
  Thumbnails — altijd publiek, gegenereerd via FFmpeg (video) of Sharp (foto)
• ⚠️
  AI-generated content — zelfde flow, extra metadata-veld ai_generated: true