Only use support request and response header to avoid acl issues

mediaflow_proxy/const.py

@@ -0,0 +1,23 @@
+SUPPORTED_RESPONSE_HEADERS = [
+    "accept-ranges",
+    "content-type",
+    "content-length",
+    "content-range",
+    "connection",
+    "transfer-encoding",
+    "last-modified",
+    "etag",
+    "server",
+    "date",
+]
+
+SUPPORTED_REQUEST_HEADERS = [
+    "accept",
+    "accept-encoding",
+    "accept-language",
+    "connection",
+    "transfer-encoding",
+    "range",
+    "if-range",
+    "user-agent",
+]

mediaflow_proxy/handlers.py

@@ -9,6 +9,7 @@ from pydantic import HttpUrl
 from starlette.background import BackgroundTask
 
 from .configs import settings
+from .const import SUPPORTED_RESPONSE_HEADERS
 from .mpd_processor import process_manifest, process_playlist, process_segment
 from .utils.cache_utils import get_cached_mpd, get_cached_init_segment
 from .utils.http_utils import Streamer, DownloadError, download_file_with_retry, request_with_retry
@@ -47,13 +48,12 @@ async def handle_hls_stream_proxy(request: Request, destination: str, headers: d
             return await fetch_and_process_m3u8(streamer, destination, headers, request, key_url)
 
         headers.update({"accept-ranges": headers.get("range", "bytes=0-")})
-        # handle the encoding response header, since decompression is handled by the httpx
-        if "content-encoding" in response.headers:
-            del response.headers["content-encoding"]
+        # clean up the headers to only include the necessary headers and remove acl headers
+        response_headers = {k: v for k, v in response.headers.items() if k.lower() in SUPPORTED_RESPONSE_HEADERS}
 
         return StreamingResponse(
             streamer.stream_content(destination, headers),
-            headers=response.headers,
+            headers=response_headers,
             background=BackgroundTask(streamer.close),
         )
     except httpx.HTTPStatusError as e:
@@ -106,13 +106,16 @@ async def handle_stream_request(method: str, video_url: str, headers: dict):
     streamer = Streamer(client)
     try:
         response = await streamer.head(video_url, headers)
+        # clean up the headers to only include the necessary headers and remove acl headers
+        response_headers = {k: v for k, v in response.headers.items() if k.lower() in SUPPORTED_RESPONSE_HEADERS}
+
         if method == "HEAD":
             await streamer.close()
-            return Response(headers=response.headers, status_code=response.status_code)
+            return Response(headers=response_headers, status_code=response.status_code)
         else:
             return StreamingResponse(
                 streamer.stream_content(video_url, headers),
-                headers=response.headers,
+                headers=response_headers,
                 background=BackgroundTask(streamer.close),
             )
     except httpx.HTTPStatusError as e:

mediaflow_proxy/utils/http_utils.py

@@ -7,20 +7,10 @@ from starlette.requests import Request
 from tenacity import retry, stop_after_attempt, wait_exponential, retry_if_exception_type
 
 from mediaflow_proxy.configs import settings
+from mediaflow_proxy.const import SUPPORTED_REQUEST_HEADERS
 
 logger = logging.getLogger(__name__)
 
-supported_request_headers = [
-    "accept",
-    "accept-encoding",
-    "accept-language",
-    "connection",
-    "transfer-encoding",
-    "range",
-    "if-range",
-    "user-agent",
-]
-
 
 class DownloadError(Exception):
     def __init__(self, status_code, message):
@@ -273,6 +263,6 @@ def get_proxy_headers(request: Request) -> dict:
     Returns:
         dict: A dictionary of proxy headers.
     """
-    request_headers = {k: v for k, v in request.headers.items() if k in supported_request_headers}
+    request_headers = {k: v for k, v in request.headers.items() if k in SUPPORTED_REQUEST_HEADERS}
     request_headers.update({k[2:].lower(): v for k, v in request.query_params.items() if k.startswith("h_")})
     return request_headers