const expected = crypto .createHmac('sha256', process.env.DOWNLOAD_SECRET) .update(`$fileId:$expires`) .digest('hex');
// 1️⃣ Verify token (if you require signed URLs) if (process.env.REQUIRE_SIGNED_URLS === 'true') tokenFileId !== fileId) return res.status(403).json( error: 'Invalid or expired token.' ); Tarzan -enlace de descarga normal-
// ---- Helper: validate token ---- function validateToken(token) try const decoded = Buffer.from(token, 'base64url').toString('utf8'); const [fileId, expires, signature] = decoded.split(':'); if (Date.now() / 1000 > Number(expires)) return null; // expired const expected = crypto
const PORT = process.env.PORT || 3000; app.listen(PORT, () => console.log(`🚀 Server listening on $PORT`)); const expected = crypto .createHmac('sha256'
// 2️⃣ Resolve file path safely const filePath = FILES[fileId]; if (!filePath) return res.status(404).json( error: 'File not found.' );
const router = express.Router();
// ---- Helper: generate signed token (valid 1 hour) ---- function generateToken(fileId) const expires = Math.floor(Date.now() / 1000) + 3600; // epoch seconds const data = `$fileId:$expires`; const signature = crypto .createHmac('sha256', process.env.DOWNLOAD_SECRET) .update(data) .digest('hex'); return Buffer.from(`$data:$signature`).toString('base64url');