تسريبات هارفست

const CORS = {'Access-Control-Allow-Origin':'*','Access-Control-Allow-Methods':'GET,PUT,DELETE,OPTIONS','Access-Control-Allow-Headers':'*','Access-Control-Max-Age':'86400'};
export default {async fetch(req,env){
  if(req.method==='OPTIONS')return new Response(null,{status:204,headers:CORS});
  const url=new URL(req.url);
  const path=decodeURIComponent(url.pathname.slice(1));
  const isPublicGet=req.method==='GET'&&path&&!url.searchParams.has('prefix');
  if(!isPublicGet){
    const token=req.headers.get('X-Auth-Token');
    if(!env.AUTH_TOKEN||token!==env.AUTH_TOKEN)return new Response(JSON.stringify({error:'Unauthorized'}),{status:401,headers:{...CORS,'Content-Type':'application/json'}});
  }
  try{
    if(req.method==='PUT'){
      const body=await req.arrayBuffer();
      await env.BUCKET.put(path,body,{httpMetadata:{contentType:req.headers.get('Content-Type')||'video/mp4'}});
      const pubUrl=url.origin+'/'+path;
      return new Response(JSON.stringify({url:pubUrl,path}),{status:200,headers:{...CORS,'Content-Type':'application/json'}});
    }
    if(req.method==='GET'&&!path){
      const prefix=url.searchParams.get('prefix')||'';
      const listed=await env.BUCKET.list({prefix,limit:200});
      const files=listed.objects.map(o=>({key:o.key,size:o.size,url:url.origin+'/'+o.key}));
      return new Response(JSON.stringify({files}),{status:200,headers:{...CORS,'Content-Type':'application/json'}});
    }
    if(req.method==='GET'&&path){
      const obj=await env.BUCKET.get(path);
      if(!obj)return new Response('Not Found',{status:404,headers:CORS});
      return new Response(obj.body,{status:200,headers:{...CORS,'Content-Type':obj.httpMetadata?.contentType||'video/mp4','Cache-Control':'public,max-age=31536000'}});
    }
    if(req.method==='DELETE'&&path){
      await env.BUCKET.delete(path);
      return new Response(JSON.stringify({deleted:path}),{status:200,headers:{...CORS,'Content-Type':'application/json'}});
    }
    return new Response('Not Allowed',{status:405,headers:CORS});
  }catch(err){return new Response(JSON.stringify({error:err.message}),{status:500,headers:{...CORS,'Content-Type':'application/json'}});}
}};