]> git.gir.st - subscriptionfeed.git/blob - app/youtube/__init__.py
allow limiting proxy to authenticated users
[subscriptionfeed.git] / app / youtube / __init__.py
1 import re
2 import time
3 import sqlite3
4 import requests
5 from urllib.parse import urlparse
6 #from flask_login import current_user, login_required
7 from flask_login import LoginManager, UserMixin, current_user, login_user, logout_user, login_required
8 from flask import Blueprint, render_template, request, redirect, flash, url_for, jsonify, g, current_app
9 from werkzeug.exceptions import NotFound, BadGateway
10
11 from ..common.common import *
12 from ..common.anticaptcha import submit_captcha
13 from .lib import *
14
15 frontend = Blueprint('youtube', __name__,
16 template_folder='templates',
17 static_folder='static',
18 static_url_path='/static/yt')
19
20 @frontend.route('/')
21 def index():
22 return redirect(url_for('.feed'), code=302)
23
24 @frontend.route('/feed/subscriptions')
25 # disabled for guest user: @login_required
26 def feed():
27 if current_user.is_anonymous:
28 token = 'guest'
29 if 'welcome_message' in cf['frontend']:
30 flash(cf['frontend']['welcome_message'], "welcome")
31 else:
32 token = current_user.token
33 page = request.args.get('page', 0, type=int)
34 with sqlite3.connect(cf['global']['database']) as conn:
35 c = conn.cursor()
36 c.execute("""
37 SELECT videos.id, channel_id, name, title, length, livestream, published, playlist_videos.playlist_id, display
38 FROM videos
39 JOIN channels ON videos.channel_id = channels.id
40 LEFT JOIN playlist_videos ON (videos.id = playlist_videos.video_id)
41 LEFT JOIN flags ON (videos.id = flags.video_id) AND (flags.user = ?)
42 WHERE (channel_id IN (SELECT channel_id FROM subscriptions WHERE user=? AND type = 'channel')
43 OR playlist_videos.playlist_id IN (SELECT channel_id FROM subscriptions WHERE user=? AND type = 'playlist')
44 OR flags.display = 'pinned')
45 AND flags.display IS NOT 'hidden'
46 ORDER BY (display = 'pinned') DESC, crawled DESC
47 LIMIT 36
48 OFFSET 36*?""", (token, token, token, page))
49 rows = [{
50 'video_id': video_id,
51 'channel_id': channel_id,
52 'author': author,
53 'title': title,
54 'length': length,
55 'livestream': livestream,
56 'published': published,
57 'playlist': playlist,
58 'pinned': display == 'pinned',
59 } for (video_id, channel_id, author, title, length, livestream, published, playlist, display) in c.fetchall()]
60 return render_template('index.html.j2', rows=rows, page=page)
61
62 @frontend.route('/watch')
63 def watch():
64 if current_user.is_anonymous:
65 token = 'guest'
66 else:
67 token = current_user.token
68
69 if not 'v' in request.args:
70 return "missing video id", 400
71 if len(request.args.get('v')) != 11:
72 return "malformed video id", 400
73
74 plaintextheaders = {
75 'content-type': 'text/plain',
76 'Link': "<data:text/css,body%7Bcolor:%23eee;background:%23333%7D>; rel=stylesheet;"
77 }
78
79 video_id = request.args.get('v')
80 video_url, stream_map, metadata, error, errdetails = get_video_info(video_id)
81
82 extra = {'geolocked':'local=1', 'livestream':'raw=0'}.get(error,'')
83 invidious_url = f"https://invidious.snopyta.org/watch?v={video_id}&{extra}"
84 errdetails = {
85 'banned': "Instance is being rate limited.",
86 'malformed': "Video ID is invalid.",
87 'geolocked': "This video is geolocked.",
88 'livestream': "Livestreams not supported on this instance.",
89 'agegated': "Unable to bypass age-restriction.",
90 'no-url': "No muxed stream available.",
91 'exhausted': errdetails or "Couldn't extract video URLs.",
92 'player': errdetails,
93 }.get(error, error)
94
95 proxy_on = getattr(g, 'proxy_on', False)
96 # if the video is geolocked, and the proxy is enabled, we can still play
97 # it, if the video is available in the instance server's region:
98 if error == 'geolocked' and video_url and proxy_on:
99 videoplayback = url_for('proxy.videoplayback')
100 query = urlparse(video_url).query
101 video_url = f"{videoplayback}?{query}"
102 for t in ('adaptive_video', 'adaptive_audio', 'muxed'):
103 for s in stream_map[t]:
104 query = urlparse(s['url']).query
105 s['url'] = f"{videoplayback}?{query}"
106 error = None
107
108 # if the proxy is enabled, we can also play livestreams:
109 if error == 'livestream' and proxy_on:
110 # Note: hlsManifestUrl's hostname will be replaced client-side
111 video_url = stream_map['hlsManifestUrl']
112 error = None
113
114 # if the instance is blocked, try submitting a job to the anti captcha service:
115 if error == 'banned' and cf['captcha']['api_key']:
116 r2 = requests.get(f'https://www.youtube.com/watch?v={video_id}&hl=en&gl=US')
117 status = submit_captcha(r2)
118 if status is False:
119 raise Exception("we are banned, but captcha wasn't triggered!")
120 else:
121 message = "right now" if status is True else f"{int(status)} seconds ago"
122 raise BadGateway(f"""
123 {errdetails} An attempt at getting unblocked has been made {message}.
124 Please try again in 30 seconds.
125 """)
126
127 show = request.args.get("show")
128 if show == "raw":
129 if error:
130 msg = errdetails if error=='player' else f"{error.upper()}: {errdetails}"
131 return f"{msg}\n\nRedirecting to Invidious.", 502, {
132 'Refresh': f'2; URL={invidious_url}&raw=1',
133 **plaintextheaders}
134 return redirect(video_url, code=307)
135 elif show == "json":
136 if error and not metadata:
137 return {'error': True, error: errdetails}, 400 # TODO: better (test _CpR4o81XQc)
138 return jsonify(metadata)
139 elif show == "audio":
140 # sorting: we want to prioritize mp4a over opus, and sort by highest quality first
141 # todo: geolocking; prefer open format?
142 if error and not stream_map:
143 msg = errdetails if error=='player' else f"{error.upper()}: {errdetails}"
144 return msg, 400, plaintextheaders # TODO: nicer
145 stream = next(iter(sorted(
146 stream_map['adaptive_audio'],
147 key=lambda e: ('opus' not in e['mimeType'], e['bitrate']),
148 reverse=True
149 )),{}).get('url')
150 return redirect(stream)
151 else:
152 if error and not metadata: # e.g. malformed, private/deleted video, ...
153 return render_template('video-error.html.j2', video_id=video_id,
154 video_error=error, errdetails=errdetails, invidious_url=invidious_url)
155 meta = prepare_metadata(metadata)
156 with sqlite3.connect(cf['global']['database']) as conn:
157 c = conn.cursor()
158 c.execute("""
159 SELECT COUNT((
160 SELECT 1 FROM subscriptions WHERE channel_id = ? AND user = ?
161 )), COUNT((
162 SELECT 1 FROM flags WHERE video_id = ? AND display = 'pinned' AND user = ?
163 ))""", (meta['channel_id'], token, video_id, token))
164 (is_subscribed, is_pinned) = c.fetchone()
165 return render_template('watch.html.j2',
166 video_id=video_id, video_url=video_url, stream_map=stream_map,
167 video_error=error, errdetails=errdetails, invidious_url=invidious_url,
168 is_pinned=is_pinned, is_subscribed=is_subscribed,
169 **meta)
170
171 @frontend.route('/embed/videoseries')
172 def embed_videoseries():
173 return redirect(url_for('.playlist', list=request.args.get('list')))
174 @frontend.route('/embed/<video_id>', strict_slashes=False)
175 def embed(video_id):
176 if video_id == "videoseries":
177 return redirect(url_for('.playlist', list=request.args.get('list')))
178
179 return redirect(url_for('.watch', v=video_id, t=request.args.get('start')))
180
181 @frontend.route('/<something>', strict_slashes=False)
182 def plain_user_or_video(something):
183 # yt.com interprets this as a username, but we also want to catch youtu.be
184 # short-urls. so we check if it's a channel by querying the RSS feed (this
185 # shoudn't be rate-limited); if that fails, check if it looks like a video
186 # id; or finally give up.
187 if '.' not in something and channel_exists(something):
188 # periods are not valid in usernames, vanity urls or ucids, but common
189 # in urls that get crawled by bots (e.g. index.php). failing early
190 # reduces the amount of invalid channel names getting looked up.
191 return redirect(url_for('.channel', channel_id=something))
192 elif re.match(r"^[-_0-9A-Za-z]{11}$", something): # looks like a video id
193 return redirect(url_for('.watch', v=something, t=request.args.get('t')))
194 else: # ¯\_(ツ)_/¯
195 # XXX: something == 'thethoughtemporium' -> 404s
196 raise NotFound("Note: some usernames not recognized; try searching it")
197
198 @frontend.route('/channel/<channel_id>/<subpage>')
199 @frontend.route('/user/<channel_id>/<subpage>')
200 @frontend.route('/c/<channel_id>/<subpage>')
201 @frontend.route('/channel/<channel_id>/')
202 @frontend.route('/user/<channel_id>/')
203 @frontend.route('/c/<channel_id>/')
204 def channel(channel_id, _=None):
205 token = getattr(current_user, 'token', 'guest')
206
207 if re.match(r"(UC[A-Za-z0-9_-]{22})", channel_id):
208 xmlfeed = fetch_xml("channel_id", channel_id)
209 else:
210 xmlfeed = fetch_xml("user", channel_id)
211
212 if not xmlfeed:
213 return "not found or something", 404 # XXX
214 title, author, videos, channel_id, _ = parse_xml(xmlfeed)
215
216 with sqlite3.connect(cf['global']['database']) as conn:
217 c = conn.cursor()
218 c.execute("""
219 SELECT COUNT(*)
220 FROM subscriptions
221 WHERE channel_id = ? AND user = ?
222 """, (channel_id, token))
223 (is_subscribed,) = c.fetchone()
224
225 return render_template('xmlfeed.html.j2', title=author, rows=videos,
226 is_subscribed=is_subscribed, channel_id=channel_id)
227
228 @frontend.route('/playlist')
229 def playlist():
230 playlist_id = request.args.get('list')
231 if not playlist_id:
232 return "bad list id", 400 # todo
233
234 xmlfeed = fetch_xml("playlist_id", playlist_id)
235 if not xmlfeed:
236 return "not found or something", 404 # XXX
237 title, author, videos, _, _ = parse_xml(xmlfeed)
238 return render_template('xmlfeed.html.j2', title=f"{title} by {author}", rows=videos)
239
240 @frontend.route('/api/timedtext')
241 def timedtext():
242 r = requests.get("https://www.youtube.com/api/timedtext", request.args.to_dict())
243 # Note: in srv1 format, xmlentities are double-encoded m( a smart quote is
244 # even worse: it's '&amp;39;<smartquote>' wtf!? (at least vvt seems ok)
245 if not r.ok:
246 return "error: {r.text}", 400 # TODO: better
247 retval = r.text
248 if request.args.get('fmt') == 'vtt' and request.args.get('kind') == 'asr':
249 # autocaptions are extremely confusing, and stuck in the lower-left corner. fix it up a bit
250 retval = re.sub(r"<.+?>", "", retval) # remove inline html-like markup that times each word/adds styles
251 retval = retval.replace("align:start position:0%", "") # let browser position the text itself
252 # each subtitle-line is repeated twice (first on the lower line, then
253 # on the next "frame" on the upper line). we want to remove the
254 # repetition, as that's confusing without word and line animations:
255 lines = retval.split('\n')
256 retval = '\n'.join([line for line, prev in zip(lines, ['']+lines) if not " --> " in prev])
257 return retval, {'Content-Type': r.headers.get("Content-Type")}
258
259 @frontend.route('/manage/subscriptions')
260 # disabled for guest user: @login_required
261 def subscription_manager():
262 if current_user.is_anonymous:
263 token = 'guest'
264 else:
265 token = current_user.token
266 with sqlite3.connect(cf['global']['database']) as conn:
267 #with conn.cursor() as c:
268 c = conn.cursor()
269 c.execute("""
270 SELECT subscriptions.channel_id, name, type,
271 (subscribed_until < datetime('now')) AS obsolete
272 FROM subscriptions
273 LEFT JOIN (SELECT name, id FROM channels
274 UNION
275 SELECT name, id FROM playlists
276 ) AS channels ON channels.id = subscriptions.channel_id
277 left JOIN websub ON channels.id = websub.channel_id
278 WHERE user = ?
279 AND subscriptions.type IN ('channel', 'playlist')
280 ORDER BY obsolete=0, name COLLATE NOCASE ASC""", (token,))
281 rows = [{
282 'channel_id': channel_id,
283 'author': author or channel_id,
284 'type': type,
285 'subscribed_until': subscribed_until
286 } for (channel_id, author, type, subscribed_until) in c.fetchall()]
287 return render_template('subscription_manager.html.j2', rows=rows)
288
289 @frontend.route('/feed/subscriptions', methods=['POST'])
290 @login_required
291 def feed_post():
292 token = current_user.token
293 action = next(request.form.keys(), None)
294 if action in ['pin', 'unpin', 'hide', 'unhide']:
295 video_id = request.form.get(action)
296 display = {
297 'pin': 'pinned',
298 'unpin': None,
299 'hide': 'hidden',
300 'unhide': None,
301 }[action]
302 with sqlite3.connect(cf['global']['database']) as conn:
303 c = conn.cursor()
304 store_video_metadata(video_id) # only needed for pinning
305 c.execute("""
306 INSERT OR REPLACE INTO flags (user, video_id, display)
307 VALUES (?, ?, ?)
308 """, (token, video_id, display))
309 undo_flash(video_id, action)
310 else:
311 flash("unsupported action", "error")
312 return redirect(request.url, code=303)
313
314 @frontend.route('/manage/subscriptions', methods=['POST'])
315 @login_required
316 def manage_subscriptions():
317 token = current_user.token
318 if 'subscribe' in request.form:
319 some_id = request.form.get("subscribe")
320 match = re.search(r"(UC[A-Za-z0-9_-]{22})", some_id)
321 if match:
322 some_id = match.group(1)
323 id_type = "channel"
324 else:
325 match = re.search(r"((?:PL|LL|EC|UU|FL|UL|OL)[A-Za-z0-9_-]{10,})", some_id)
326 if match: # NOTE: PL-playlists are 32chars, others differ in length.
327 some_id = match.group(1)
328 id_type = "playlist"
329 else:
330 flash("not a valid/subscribable URI", "error")
331 return redirect(request.url, code=303)
332 with sqlite3.connect(cf['global']['database']) as conn:
333 #with conn.cursor() as c:
334 c = conn.cursor()
335 c.execute("""
336 INSERT OR IGNORE INTO subscriptions (user, channel_id, type)
337 VALUES (?, ?, ?)
338 """, (token, some_id, id_type))
339 # TODO: sql-error-handling, asynchronically calling update-subs.pl
340 undo_flash(some_id, 'subscribe')
341
342 elif 'unsubscribe' in request.form:
343 some_id = request.form.get("unsubscribe")
344 with sqlite3.connect(cf['global']['database']) as conn:
345 #with conn.cursor() as c:
346 c = conn.cursor()
347 c.execute("""
348 DELETE FROM subscriptions
349 WHERE user = ? AND channel_id = ?
350 """, (token, some_id))
351 # TODO: sql-error-handling, report success
352 undo_flash(some_id, 'unsubscribe')
353
354 else:
355 flash("unsupported action", "error")
356
357 return redirect(request.url, code=303)
358
359 @frontend.route('/vi/<vid>/<res>.jpg')
360 def redirect_thumbnails(vid, res):
361 return redirect(f"https://i.ytimg.com{request.path}", code=301)
362
363 @frontend.record
364 def redirect_youtube_dot_com(state):
365 """
366 This is executed when the blueprint is loaded dynamically builds a number
367 of routes so that URLs like
368 https://subscriptions.gir.st/https://www.youtube.com/watch?v=dQw4w9WgXcQ
369 redirect to the /watch page. Works with /watch, /embed/ and youtu.be short
370 links, with or without protocl and/or 'www'.
371 """
372 def real_redirect_youtube_dot_com(video_id=None):
373 if not re.match(r"^[-_0-9A-Za-z]{11}$", video_id or ''): video_id = None
374 if not video_id: video_id = request.args.get('v')
375 return redirect(url_for('.watch', v=video_id))
376
377 for protocol in ("", "http://", "https://"):
378 for prefix in ("", "www.", "m."):
379 for domain in ("youtube.com", "youtu.be", "youtube-nocookie.com"):
380 for urlpath in ("/watch", "/embed/<video_id>", "/<video_id>"):
381 if domain != "youtu.be" and urlpath == "/<video_id>":
382 continue # that's a channel, not a video
383 frontend.add_url_rule(
384 f"/{protocol}{prefix}{domain}{urlpath}",
385 view_func=real_redirect_youtube_dot_com,
386 strict_slashes=False
387 )
388
389 def undo_flash(thing_id, action):
390 undo_action, past_action = {
391 'pin': ('unpin', 'pinned'),
392 'unpin': ('pin', 'unpinned'),
393 'hide': ('unhide', 'hidden'),
394 'unhide': ('hide', 'unhidden'),
395 'subscribe': ('unsubscribe', 'subscribed'),
396 'unsubscribe': ('subscribe', 'unsubscribed'),
397 }.get(action)
398 if 'subscribe' in action and thing_id.startswith('UC'):
399 thing = "channel"
400 thing_url = url_for('.channel', channel_id=thing_id)
401 elif 'subscribe' in action:
402 thing = "playlist"
403 thing_url = url_for('.playlist', playlist_id=thing_id)
404 else:
405 thing = "video"
406 thing_url = url_for('.watch', v=thing_id)
407 flash(f'''
408 <form method=post><input type=hidden name="{undo_action}" value="{thing_id}">
409 <a href="{thing_url}">{thing}</a> {past_action}.
410 <label><input type="submit" hidden>
411 <span style="text-decoration:underline;cursor:pointer">undo</span>.
412 </label></form>''', "info")
413
414 @frontend.app_template_filter('format_date')
415 def format_date(s):
416 import datetime # can't import at top level, because it is inherited from common
417 (y,m,d) = (int(n) for n in s.split('T')[0].split(' ')[0].split('-')) # iso-dates can seperate date from time with space or 'T'
418 M = '_ Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec'.split()
419 if y == datetime.datetime.now().year:
420 return f"{d} {M[m]}"
421 else:
422 return f"{M[m]} '{y%100}"
423
424 @frontend.app_template_filter('format_time')
425 def format_time(i):
426 if i is None:
427 return None
428 h = i // (60*60)
429 m = i // 60 % 60
430 s = i % 60
431 return '%d:%02d:%02d' % (h,m,s) if h else '%02d:%02d' % (m,s)
432
433 @frontend.app_template_filter('timeoffset')
434 def timeoffset(s):
435 if s is None:
436 return None
437 match = re.match(r"^(\d+)s?$", s) # e.g. 2040s
438 if match:
439 return match.group(1)
440 match = re.match(r"^(?:(\d+)h)?(?:(\d+)m)?(?:(\d+)s)?$", s) # e.g. 34m, 1h23s
441 if match:
442 return ":".join([n.zfill(2) for n in match.groups('0')])
443 return None
Imprint / Impressum