js 防盗链

const express = require('express');
const app = express();

app.get('/image.jpg', (req, res) => {
  const referer = req.headers.referer;
  if (referer && referer.startsWith('https://yourdomain.com')) {
    res.sendFile(__dirname + '/image.jpg');
  } else {
    res.status(403).send('Forbidden');
  }
});

app.listen(3000, () => {
  console.log('Server is running on port 3000');
});

const express = require('express');
const crypto = require('crypto');
const app = express();

const secretKey = 'your_secret_key';

app.get('/video.mp4', (req, res) => {
  const timestamp = req.query.ts;
  const signature = req.query.sig;

  const calculatedSignature = crypto.createHmac('sha256', secretKey)
                                    .update(timestamp)
                                    .digest('hex');

  if (signature === calculatedSignature && Date.now() - timestamp < 60000) { // 1 minute validity
    res.sendFile(__dirname + '/video.mp4');
  } else {
    res.status(403).send('Forbidden');
  }
});

app.listen(3000, () => {
  console.log('Server is running on port 3000');
});