Fix VTV proxy SSL: verify=False for vtvdigital self-signed cert + rewrite nested m3u8

vtv_api.py

@@ -5,6 +5,8 @@ EPG data scraped from https://vtv.vn/lich-phat-song.htm
 """
 import re, time, threading
 import requests
+import urllib3
+urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)
 from fastapi import APIRouter, Query
 from fastapi.responses import JSONResponse, Response
 from bs4 import BeautifulSoup
@@ -219,7 +221,9 @@ def proxy_vtv_m3u8(url: str = Query(...)):
             headers["Origin"] = "https://fptplay.vn"
         elif "xemtv" in url:
             headers["Referer"] = "https://hd.xemtv.net/"
-        r = requests.get(url, headers=headers, timeout=15, allow_redirects=True)
+        # vtvdigital uses self-signed cert — skip SSL verification
+        verify_ssl = "vtvdigital" not in url
+        r = requests.get(url, headers=headers, timeout=15, allow_redirects=True, verify=verify_ssl)
         if r.status_code != 200:
             return Response(status_code=502, content="upstream error")
         content = r.text
@@ -246,10 +250,29 @@ def proxy_vtv_segment(url: str = Query(...)):
         if "fptplay" in url:
             headers["Referer"] = "https://fptplay.vn/"
             headers["Origin"] = "https://fptplay.vn"
-        r = requests.get(url, headers=headers, timeout=30, allow_redirects=True)
+        # vtvdigital uses self-signed cert — skip SSL verification
+        verify_ssl = "vtvdigital" not in url
+        r = requests.get(url, headers=headers, timeout=30, allow_redirects=True, verify=verify_ssl)
         if r.status_code != 200:
             return Response(status_code=502, content="upstream error")
         data = r.content
+        # If response is an m3u8 sub-playlist, rewrite segment URLs to proxy
+        content_type = r.headers.get("Content-Type", "")
+        if b"#EXTM3U" in data[:500] or ".m3u8" in url:
+            lines = data.decode("utf-8", errors="replace").split('\n')
+            rewritten = []
+            base_url = url.rsplit('/', 1)[0] + '/'
+            for line in lines:
+                line = line.strip()
+                if not line or line.startswith('#'):
+                    rewritten.append(line)
+                else:
+                    seg_url = line
+                    if not seg_url.startswith('http'):
+                        seg_url = base_url + seg_url
+                    rewritten.append("/api/proxy/seg/vtv?url=" + requests.utils.quote(seg_url, safe=""))
+            return Response(content='\n'.join(rewritten).encode("utf-8"), media_type="application/vnd.apple.mpegurl", headers={"Access-Control-Allow-Origin": "*", "Cache-Control": "no-cache"})
+        # PNG fix
         if len(data) > 188 and data[0:4] == b'\x89PNG' and data[188] == 0x47:
             data = data[188:]
         return Response(content=data, media_type="video/mp2t", headers={"Access-Control-Allow-Origin": "*", "Cache-Control": "public, max-age=3600"})