diff options
| author | Paul Buetow <paul@buetow.org> | 2026-05-22 23:30:05 +0300 |
|---|---|---|
| committer | Paul Buetow <paul@buetow.org> | 2026-05-22 23:30:05 +0300 |
| commit | 8d450ee93f095cfd2c5374b181d34ead9b49d502 (patch) | |
| tree | 40f303e291df57e73d0ae5e87bcfac0afe0c80c4 /docs | |
| parent | 9cd7ccc5d1150bf841a3961df9cb1e8a5d25abfe (diff) | |
Pass session cookie to ExoPlayer/just_audio for authenticated streaming
The audio/video players spawn a localhost proxy (just_audio) or call
ExoPlayer directly (video_player) using their own HTTP stack, which does
not share Dio's cookie jar. Without the session cookie those requests
hit the stream endpoint anonymously and fail with 401.
Expose the Dio CookieJar via a Riverpod provider (cookieJarProvider) and
attach a Cookie header (alongside the existing Authorization: Bearer) to
both AudioSource.uri and VideoPlayerController.networkUrl.
Also enable android:usesCleartextTraffic="true" on the Application —
just_audio's headers-injection proxy listens on 127.0.0.1 and Android
28+ blocks cleartext to it without the explicit opt-in.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Diffstat (limited to 'docs')
0 files changed, 0 insertions, 0 deletions