authenticationapi/base.py at main · SasukeXDev/authenticationapi · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
from flask import Flask, jsonify, render_template, request, redirect, url_for, Response, stream_with_context
import requests
import secrets
import json
from fake_useragent import UserAgent
import os
from urllib.parse import urlparse, urljoin

app = Flask(__name__)

# ✅ Set your API key here or through environment variable
MY_SECRET_KEY = os.environ.get("API_KEY", " ")

# ✅ Add your allowed domains here
ALLOWED_DOMAINS = [
    "affiliatetelegrambot-y6tu.onrender.com",
    " ",
    " "
]

# 🧠 Headers for hanime.tv
HEADERS = {
    "User-Agent": "Mozilla/5.0",
    "X-Signature-Version": "web2",
    "X-Signature": os.urandom(16).hex()
}


def proxy_hanime_api(url, is_json=True):
    try:
        res = requests.get(url, headers=HEADERS)
        return res.json() if is_json else res.text
    except Exception as e:
        return {"error": str(e)}, 500


# ✅ API KEY + DOMAIN PROTECTION
@app.before_request
def check_api_key_and_domain():
    client_key = request.headers.get("X-API-Key")
    if client_key != MY_SECRET_KEY:
        return jsonify({"error": "Unauthorized - Invalid API Key"}), 401

    # If request is from browser, it has Origin or Referer
    origin = request.headers.get("Origin") or request.headers.get("Referer")
    user_agent = request.headers.get("User-Agent", "")

    if origin:
        parsed = urlparse(origin)
        hostname = parsed.hostname
        if hostname not in ALLOWED_DOMAINS:
            return jsonify({"error": f"Unauthorized - Domain '{hostname}' not allowed"}), 403
    else:
        # If no Origin, allow only if User-Agent is Python Requests or Curl (means it's server-side)
        if "python-requests" in user_agent or "curl" in user_agent:
            pass  # trusted server request, key is enough
        else:
            return jsonify({"error": "Unauthorized - Missing Origin or Referer"}), 403


# 🔥 Home
@app.route("/hm")
def home():
    time = request.args.get("time", "month")
    page = request.args.get("page", 0)
    url = f"https://hanime.tv/api/v8/browse-trending?time={time}&page={page}&order_by=views&ordering=desc"
    return proxy_hanime_api(url)


# 🔥 Trending
@app.route("/trending")
def trending():
    time = request.args.get("time", "month")
    page = request.args.get("page", 0)
    url = f"https://hanime.tv/api/v8/browse-trending?time={time}&page={page}&order_by=views&ordering=desc"
    return proxy_hanime_api(url)


# 🔥 Video Details
@app.route("/video")
def video():
    slug = request.args.get("slug")
    url = f"https://hanime.tv/api/v8/video?id={slug}"
    return proxy_hanime_api(url)


# 🔥 Browse Tags & Brands
@app.route("/browse")
def browse():
    url = "https://hanime.tv/api/v8/browse"
    return proxy_hanime_api(url)


# 🔥 Browse category
@app.route("/getbrowsevideos")
def getbrowsevideos():
    page = request.args.get("page", 0)
    type_ = request.args.get("type")
    category = request.args.get("category")
    url = f"https://hanime.tv/api/v8/browse/{type_}/{category}?page={page}&order_by=views&ordering=desc"
    return proxy_hanime_api(url)


# 🔍 Search (POST to Search API)
@app.route("/search")
def search():
    query = request.args.get("query", "")
    page = int(request.args.get("page", 0))
    body = {
        "search_text": query,
        "tags": [],
        "brands": [],
        "blacklist": [],
        "order_by": [],
        "ordering": [],
        "page": page
    }
    try:
        res = requests.post("https://search.htv-services.com", json=body)
        return res.json()
    except Exception as e:
        return {"error": str(e)}, 500


if __name__ == "__main__":
    app.run(host="0.0.0.0", port=8000)