Files
xtremflow/lib/features/iptv/widgets/streaming_settings_tab.dart
T
MichaelandClaude Fable 5 60d3f42901 feat: security hardening, streaming overhaul, design polish, tests
Security:
- Replace unsalted SHA-256 password hashing with bcrypt (lazy rehash on login)
- Add authenticated /api/xtream-api gateway: Xtream credentials are injected
  server-side and never sent to the frontend; /api/playlists no longer
  returns passwords
- Redact credentials from all logs (login body, proxy/FFmpeg/scheduler URLs)
- Add auth to recordings, EPG, season-passes and streaming routes
  (HttpOnly session cookie for hls.js; loopback bypass for local FFmpeg)
- Lock player postMessage to same-origin in both directions
- Vendor and pin hls.js 1.6.7 / mpegts.js 1.7.3 (drop CDN @latest)
- Fix rate limiter (client IP was never resolved), add login rate limit,
  restrict CORS, add CSP Report-Only, block private-IP SSRF targets,
  fix path traversal in recording log retrieval, chmod 777 -> 770
- Remove dead HiveService (seeded admin/admin into IndexedDB with SHA-256)
- Fix authMiddleware not populating 'user' context (getPlaylist ignored the
  logged-in user; admin purge always returned 403)

Streaming:
- New FfmpegSessionManager: process registry, idle reaper (4 min live /
  15 min VOD), orphan cleanup at startup, clean SIGTERM shutdown,
  fast-fail with stderr instead of 30 s timeout
- Quality selection (source/high/medium/low) for live and VOD; source mode
  streams with -c:v copy (zero transcoding); selector wired into the player
- Concurrent recordings (MAX_CONCURRENT_RECORDINGS, default 2); conflicts
  retry on the next tick instead of silently failing
- Lower live latency (HLS window 20 -> 10 segments, liveSync 10 -> 3)
- Fix recording log lookup (.mp4 vs .mkv mismatch)

Design:
- Replace hardcoded colors with AppColors tokens (12 files)
- web/theme.css syncs HTML players with the Flutter palette
- DPAD/keyboard navigation (arrow-key focus, player shortcuts)
- Tooltips on player icon buttons, Semantics on content cards
- Remove 7 dead widgets broken since the Stitch merge

Quality:
- bin/test/: 21 unit tests (bcrypt, redaction, traversal, SSRF, recording
  conflicts) plus a quality-selector widget test
- GitHub Actions CI (analyze + test + build web)
- Archive stale status docs into docs/archive/

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-06-10 10:07:18 +02:00

307 lines
10 KiB
Dart

import 'package:flutter/material.dart';
import 'package:flutter_riverpod/flutter_riverpod.dart';
import 'package:google_fonts/google_fonts.dart';
import '../../../core/theme/app_colors.dart';
import '../providers/settings_provider.dart';
/// Streaming settings tab for Live TV configuration
class StreamingSettingsTab extends ConsumerWidget {
const StreamingSettingsTab({super.key});
@override
Widget build(BuildContext context, WidgetRef ref) {
final settings = ref.watch(iptvSettingsProvider);
final notifier = ref.read(iptvSettingsProvider.notifier);
return ListView(
padding: const EdgeInsets.all(16),
children: [
// Header
Text(
'Paramètres Streaming Live TV',
style: GoogleFonts.inter(
fontSize: 18,
fontWeight: FontWeight.bold,
color: AppColors.onSurface,
),
),
const SizedBox(height: 8),
Text(
'Ces paramètres s\'appliquent uniquement aux flux TV en direct.',
style: GoogleFonts.inter(
fontSize: 12,
color: AppColors.onSurfaceVariant,
),
),
const SizedBox(height: 24),
// Note: Player type is now automatically determined:
// - Live TV uses Player Lite (MPEG-TS)
// - Movies/Series use Player Standard
// Quality Section
_buildSectionCard(
context: context,
title: 'Qualité Vidéo',
icon: Icons.high_quality,
children: [
_buildDropdownTile<StreamQuality>(
title: 'Qualité du flux',
subtitle: 'Bitrate: ${settings.bitrateKbps} kbps',
value: settings.streamQuality,
items: StreamQuality.values,
onChanged: (v) => notifier.setStreamQuality(v!),
labelBuilder: (v) => switch (v) {
StreamQuality.low => 'Faible (1.5 Mbps)',
StreamQuality.medium => 'Moyen (3 Mbps)',
StreamQuality.high => 'Élevé (5 Mbps)',
},
),
],
),
const SizedBox(height: 16),
// Buffer Section
_buildSectionCard(
context: context,
title: 'Buffer & Latence',
icon: Icons.speed,
children: [
_buildDropdownTile<BufferSize>(
title: 'Taille du buffer',
subtitle: 'Segments HLS: ${settings.hlsSegmentDuration}s',
value: settings.bufferSize,
items: BufferSize.values,
onChanged: (v) => notifier.setBufferSize(v!),
labelBuilder: (v) => switch (v) {
BufferSize.low => 'Faible (latence min)',
BufferSize.medium => 'Moyen (équilibré)',
BufferSize.high => 'Élevé (stabilité max)',
},
),
],
),
const SizedBox(height: 16),
// Connection Section
_buildSectionCard(
context: context,
title: 'Connexion',
icon: Icons.wifi,
children: [
_buildDropdownTile<ConnectionTimeout>(
title: 'Timeout de connexion',
subtitle: '${settings.timeoutSeconds} secondes',
value: settings.connectionTimeout,
items: ConnectionTimeout.values,
onChanged: (v) => notifier.setConnectionTimeout(v!),
labelBuilder: (v) => switch (v) {
ConnectionTimeout.short => 'Court (15s)',
ConnectionTimeout.medium => 'Moyen (30s)',
ConnectionTimeout.long => 'Long (60s)',
},
),
Divider(height: 1, color: Colors.white.withOpacity(0.1)),
SwitchListTile(
title: Text(
'Reconnexion automatique',
style: GoogleFonts.inter(fontSize: 14, color: AppColors.onSurface),
),
subtitle: Text(
'Se reconnecter en cas de coupure',
style: GoogleFonts.inter(fontSize: 12, color: AppColors.onSurfaceVariant),
),
value: settings.autoReconnect,
activeThumbColor: Colors.blueAccent,
onChanged: (v) => notifier.setAutoReconnect(v),
),
],
),
const SizedBox(height: 16),
// Transcoding Section
_buildSectionCard(
context: context,
title: 'Transcodage',
icon: Icons.transform,
children: [
_buildDropdownTile<TranscodingMode>(
title: 'Mode de transcodage',
subtitle: 'Comment le flux est traité',
value: settings.transcodingMode,
items: TranscodingMode.values,
onChanged: (v) => notifier.setTranscodingMode(v!),
labelBuilder: (v) => switch (v) {
TranscodingMode.auto => 'Auto (recommandé)',
TranscodingMode.forced => 'Forcé (toujours transcoder)',
TranscodingMode.disabled => 'Désactivé (direct)',
},
),
Divider(height: 1, color: Colors.white.withOpacity(0.1)),
SwitchListTile(
title: Text(
'Préférer lecture directe',
style: GoogleFonts.inter(fontSize: 14, color: AppColors.onSurface),
),
subtitle: Text(
'Utiliser le flux original si compatible',
style: GoogleFonts.inter(fontSize: 12, color: AppColors.onSurfaceVariant),
),
value: settings.preferDirectPlay,
activeThumbColor: Colors.blueAccent,
onChanged: (v) => notifier.setPreferDirectPlay(v),
),
],
),
const SizedBox(height: 16),
// Cache Section
_buildSectionCard(
context: context,
title: 'Cache EPG',
icon: Icons.schedule,
children: [
_buildDropdownTile<EpgCacheDuration>(
title: 'Durée du cache EPG',
subtitle: '${settings.epgCacheMinutes} minutes',
value: settings.epgCacheDuration,
items: EpgCacheDuration.values,
onChanged: (v) => notifier.setEpgCacheDuration(v!),
labelBuilder: (v) => switch (v) {
EpgCacheDuration.short => 'Court (5 min)',
EpgCacheDuration.medium => 'Moyen (15 min)',
EpgCacheDuration.long => 'Long (1 heure)',
},
),
],
),
const SizedBox(height: 16),
// Server/GPU Section
_buildSectionCard(
context: context,
title: 'Serveur / GPU',
icon: Icons.memory,
children: [
SwitchListTile(
title: Text(
'Accélération NVIDIA GPU',
style: GoogleFonts.inter(fontSize: 14, color: AppColors.onSurface),
),
subtitle: Text(
'Utiliser NVENC/NVDEC pour le transcodage (requiert GPU NVIDIA)',
style: GoogleFonts.inter(fontSize: 12, color: AppColors.onSurfaceVariant),
),
value: settings.enableNvidiaGpu,
activeThumbColor: Colors.green,
onChanged: (v) => notifier.setEnableNvidiaGpu(v),
),
],
),
const SizedBox(height: 32),
// Info card
Container(
padding: const EdgeInsets.all(16),
decoration: BoxDecoration(
color: Colors.blue.withOpacity(0.1),
borderRadius: BorderRadius.circular(12),
border: Border.all(color: Colors.blue.withOpacity(0.3)),
),
child: Row(
children: [
const Icon(Icons.info_outline, color: Colors.blue),
const SizedBox(width: 12),
Expanded(
child: Text(
'Les changements prennent effet immédiatement pour les nouveaux flux.',
style: GoogleFonts.inter(
fontSize: 12,
color: Colors.blue.shade700,
),
),
),
],
),
),
],
);
}
Widget _buildSectionCard({
required BuildContext context,
required String title,
required IconData icon,
required List<Widget> children,
}) {
return Container(
decoration: BoxDecoration(
color: Colors.white.withOpacity(0.05),
borderRadius: BorderRadius.circular(16),
border: Border.all(color: Colors.white.withOpacity(0.1)),
),
child: Column(
crossAxisAlignment: CrossAxisAlignment.start,
children: [
Padding(
padding: const EdgeInsets.all(16),
child: Row(
children: [
Icon(icon, size: 20, color: Colors.blueAccent),
const SizedBox(width: 8),
Text(
title,
style: GoogleFonts.inter(
fontSize: 16,
fontWeight: FontWeight.w600,
color: AppColors.onSurface,
),
),
],
),
),
Divider(height: 1, color: Colors.white.withOpacity(0.1)),
...children,
],
),
);
}
Widget _buildDropdownTile<T>({
required String title,
required String subtitle,
required T value,
required List<T> items,
required ValueChanged<T?> onChanged,
required String Function(T) labelBuilder,
}) {
return ListTile(
title: Text(
title,
style: GoogleFonts.inter(fontSize: 14, color: AppColors.onSurface),
),
subtitle: Text(
subtitle,
style: GoogleFonts.inter(fontSize: 12, color: AppColors.onSurfaceVariant),
),
trailing: DropdownButton<T>(
value: value,
underline: const SizedBox(),
dropdownColor: AppColors.surfaceContainer, // Dark background for dropdown
items: items.map((item) {
return DropdownMenuItem<T>(
value: item,
child: Text(
labelBuilder(item),
style: GoogleFonts.inter(fontSize: 13, color: AppColors.onSurface),
),
);
}).toList(),
onChanged: onChanged,
style: GoogleFonts.inter(color: AppColors.onSurface),
iconEnabledColor: AppColors.onSurfaceVariant,
),
);
}
}