spb/social-runtime-crawler

1import { cookies } from "next/headers";2import { NextResponse, type NextRequest } from "next/server";3import { COOKIE, verifyToken } from "@/lib/auth";45export const dynamic = "force-dynamic";6const API_URL = process.env.API_URL ?? "http://127.0.0.1:8350";78/** Sampled video frames, served through the gate. */9export async function GET(req: NextRequest, ctx: { params: Promise<{ path: string[] }> }) {10  const jar = await cookies();11  if (!verifyToken(jar.get(COOKIE)?.value)) return NextResponse.json({ error: "unauthorized" }, { status: 401 });12  const { path } = await ctx.params;13  const upstream = await fetch(new URL(`/media/${path.map(encodeURIComponent).join("/")}`, API_URL), { cache: "no-store" });14  return new Response(upstream.body, { status: upstream.status, headers: { "content-type": upstream.headers.get("content-type") ?? "image/jpeg", "cache-control": "private, max-age=3600" } });15}16