Files
xtremflow/lib/core/widgets/tv_focusable_card.dart
MichaelandClaude Fable 5 60d3f42901 feat: security hardening, streaming overhaul, design polish, tests
Security:
- Replace unsalted SHA-256 password hashing with bcrypt (lazy rehash on login)
- Add authenticated /api/xtream-api gateway: Xtream credentials are injected
  server-side and never sent to the frontend; /api/playlists no longer
  returns passwords
- Redact credentials from all logs (login body, proxy/FFmpeg/scheduler URLs)
- Add auth to recordings, EPG, season-passes and streaming routes
  (HttpOnly session cookie for hls.js; loopback bypass for local FFmpeg)
- Lock player postMessage to same-origin in both directions
- Vendor and pin hls.js 1.6.7 / mpegts.js 1.7.3 (drop CDN @latest)
- Fix rate limiter (client IP was never resolved), add login rate limit,
  restrict CORS, add CSP Report-Only, block private-IP SSRF targets,
  fix path traversal in recording log retrieval, chmod 777 -> 770
- Remove dead HiveService (seeded admin/admin into IndexedDB with SHA-256)
- Fix authMiddleware not populating 'user' context (getPlaylist ignored the
  logged-in user; admin purge always returned 403)

Streaming:
- New FfmpegSessionManager: process registry, idle reaper (4 min live /
  15 min VOD), orphan cleanup at startup, clean SIGTERM shutdown,
  fast-fail with stderr instead of 30 s timeout
- Quality selection (source/high/medium/low) for live and VOD; source mode
  streams with -c:v copy (zero transcoding); selector wired into the player
- Concurrent recordings (MAX_CONCURRENT_RECORDINGS, default 2); conflicts
  retry on the next tick instead of silently failing
- Lower live latency (HLS window 20 -> 10 segments, liveSync 10 -> 3)
- Fix recording log lookup (.mp4 vs .mkv mismatch)

Design:
- Replace hardcoded colors with AppColors tokens (12 files)
- web/theme.css syncs HTML players with the Flutter palette
- DPAD/keyboard navigation (arrow-key focus, player shortcuts)
- Tooltips on player icon buttons, Semantics on content cards
- Remove 7 dead widgets broken since the Stitch merge

Quality:
- bin/test/: 21 unit tests (bcrypt, redaction, traversal, SSRF, recording
  conflicts) plus a quality-selector widget test
- GitHub Actions CI (analyze + test + build web)
- Archive stale status docs into docs/archive/

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-06-10 10:07:18 +02:00

162 lines
4.6 KiB
Dart

import 'package:flutter/material.dart';
import '../theme/app_colors.dart';
/// TV focusable card with Stitch glow effect.
///
/// On focus/hover: blue glow border, subtle scale, diffused shadow.
class TvFocusableCard extends StatefulWidget {
final Widget child;
final VoidCallback? onTap;
final VoidCallback? onFocus;
final double scaleFactor;
final Duration animationDuration;
final Color? focusColor;
final bool autofocus;
final double borderRadius;
/// Accessibility label announced by screen readers (e.g. channel title).
final String? semanticLabel;
const TvFocusableCard({
super.key,
required this.child,
this.onTap,
this.onFocus,
this.scaleFactor = 1.03,
this.animationDuration = const Duration(milliseconds: 200),
this.focusColor,
this.autofocus = false,
this.borderRadius = 12.0,
this.semanticLabel,
});
@override
State<TvFocusableCard> createState() => _TvFocusableCardState();
}
class _TvFocusableCardState extends State<TvFocusableCard>
with SingleTickerProviderStateMixin {
late AnimationController _controller;
late Animation<double> _scaleAnimation;
bool _isFocused = false;
bool _isHovered = false;
@override
void initState() {
super.initState();
_controller = AnimationController(
vsync: this,
duration: widget.animationDuration,
);
_scaleAnimation = Tween<double>(begin: 1.0, end: widget.scaleFactor)
.animate(CurvedAnimation(parent: _controller, curve: Curves.easeInOut));
}
@override
void dispose() {
_controller.dispose();
super.dispose();
}
void _handleFocusChange(bool hasFocus) {
if (widget.onFocus != null && hasFocus) {
widget.onFocus!();
}
setState(() {
_isFocused = hasFocus;
});
if (hasFocus) {
_controller.forward();
} else {
_controller.reverse();
}
}
void _handleHover(bool isHovered) {
setState(() {
_isHovered = isHovered;
});
if (isHovered || _isFocused) {
_controller.forward();
} else {
_controller.reverse();
}
}
@override
Widget build(BuildContext context) {
final isActive = _isFocused || _isHovered;
final focusColor = widget.focusColor ?? AppColors.primaryContainer;
return Semantics(
button: widget.onTap != null,
label: widget.semanticLabel,
child: MouseRegion(
onEnter: (_) => _handleHover(true),
onExit: (_) => _handleHover(false),
cursor: SystemMouseCursors.click,
child: AnimatedBuilder(
animation: _scaleAnimation,
builder: (context, child) {
return Transform.scale(
scale: _scaleAnimation.value,
child: child,
);
},
child: Material(
color: Colors.transparent,
child: InkWell(
onTap: widget.onTap,
onFocusChange: _handleFocusChange,
autofocus: widget.autofocus,
borderRadius: BorderRadius.circular(widget.borderRadius),
focusColor: Colors.transparent,
hoverColor: Colors.transparent,
highlightColor: Colors.transparent,
splashColor: Colors.transparent,
child: Container(
decoration: BoxDecoration(
borderRadius: BorderRadius.circular(widget.borderRadius),
border: isActive
? Border.all(
color: focusColor.withOpacity(0.5),
width: 2,
)
: Border.all(
color: AppColors.glassLevel1Border,
width: 1,
),
boxShadow: isActive
? [
BoxShadow(
color: Colors.black.withOpacity(0.5),
blurRadius: 25,
offset: const Offset(0, 10),
spreadRadius: 2,
),
BoxShadow(
color: focusColor.withOpacity(0.3),
blurRadius: 20,
spreadRadius: 1,
),
BoxShadow(
color: focusColor.withOpacity(0.1),
blurRadius: 40,
spreadRadius: 4,
),
]
: [],
),
child: ClipRRect(
borderRadius: BorderRadius.circular(widget.borderRadius),
child: widget.child,
),
),
),
),
),
),
);
}
}