재생 토큰(playback_token) 연동 가이드

// token.php — 브라우저가 POST /token.php { content_id, user_id } 로 호출
<?php
header('Content-Type: application/json; charset=utf-8');

const DRM_SERVER = 'https://drm.starplayer.net';
$SPK_API_KEY = getenv('SPK_API_KEY');          // 서버에만 둔다

$in = json_decode(file_get_contents('php://input'), true) ?: $_POST;
if (empty($in['content_id'])) { http_response_code(400); echo '{"error":"missing_content_id"}'; exit; }

$ch = curl_init(DRM_SERVER . '/api/spk/playback-token');
curl_setopt_array($ch, [
  CURLOPT_POST => true,
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_TIMEOUT => 15,
  CURLOPT_HTTPHEADER => ['Content-Type: application/json', 'X-SPK-API-Key: ' . $SPK_API_KEY],
  CURLOPT_POSTFIELDS => json_encode([
    'content_id' => $in['content_id'],
    'user_id'    => $in['user_id'] ?? 'demo',
    'expires_in' => 3600,
  ]),
]);
$raw  = curl_exec($ch);
$code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

http_response_code($code ?: 502);
echo $raw !== false ? $raw : '{"error":"upstream_failed"}';   // 응답 그대로 전달

' token.asp — ServerXMLHTTP 로 DRM 서버 호출. API 키는 서버에만.
<%
Response.ContentType = "application/json"

Dim DRM_SERVER, SPK_API_KEY
DRM_SERVER  = "https://drm.starplayer.net"
SPK_API_KEY = "ovp_xxxxxxxx"          ' 실제로는 설정 파일 등 소스 밖에 두기를 권장

Dim contentId, userId
contentId = Request.Form("content_id")
userId    = Request.Form("user_id")
If contentId = "" Then
  Response.Status = "400 Bad Request"
  Response.Write "{""error"":""missing_content_id""}"
  Response.End
End If
If userId = "" Then userId = "demo"

Dim http, payload
payload = "{""content_id"":""" & contentId & """,""user_id"":""" & userId & """,""expires_in"":3600}"

Set http = Server.CreateObject("MSXML2.ServerXMLHTTP.6.0")
http.Open "POST", DRM_SERVER & "/api/spk/playback-token", False
http.setRequestHeader "Content-Type", "application/json"
http.setRequestHeader "X-SPK-API-Key", SPK_API_KEY
http.send payload

Response.Status = http.status & " OK"
Response.Write http.responseText     ' 응답 그대로 전달
Set http = Nothing
%>

// TokenController.cs (ASP.NET Core) — POST /api/token
[ApiController]
public class TokenController : ControllerBase
{
    private const string DrmServer = "https://drm.starplayer.net";
    private static readonly HttpClient Http = new HttpClient();

    [HttpPost("/api/token")]
    public async Task<IActionResult> Issue([FromBody] TokenReq req)
    {
        if (string.IsNullOrEmpty(req.content_id))
            return BadRequest(new { error = "missing_content_id" });

        var body = new {
            content_id = req.content_id,
            user_id    = string.IsNullOrEmpty(req.user_id) ? "demo" : req.user_id,
            expires_in = 3600,
        };
        var msg = new HttpRequestMessage(HttpMethod.Post, $"{DrmServer}/api/spk/playback-token")
        {
            Content = JsonContent.Create(body),
        };
        msg.Headers.Add("X-SPK-API-Key", Environment.GetEnvironmentVariable("SPK_API_KEY"));

        var r = await Http.SendAsync(msg);
        var json = await r.Content.ReadAsStringAsync();
        return Content(json, "application/json");   // 응답 그대로 전달
    }

    public class TokenReq { public string content_id { get; set; } public string user_id { get; set; } }
}

# SPK_API_KEY 는 환경변수 등 서버에만 둔다
import os, requests
from flask import Flask, request, jsonify

app = Flask(__name__)
DRM_SERVER  = "https://drm.starplayer.net"
SPK_API_KEY = os.environ["SPK_API_KEY"]

@app.post("/api/token")
def issue_token():
    body = request.get_json(silent=True) or {}
    content_id = body.get("content_id")
    if not content_id:
        return jsonify(error="missing_content_id"), 400

    r = requests.post(
        f"{DRM_SERVER}/api/spk/playback-token",
        headers={"Content-Type": "application/json", "X-SPK-API-Key": SPK_API_KEY},
        json={"content_id": content_id, "user_id": body.get("user_id", "demo"), "expires_in": 3600},
        timeout=15,
    )
    return jsonify(r.json()), r.status_code   # 응답 그대로 전달

// TokenController.java — POST /api/token
@RestController
public class TokenController {
    private static final String DRM_SERVER = "https://drm.starplayer.net";
    private final HttpClient http = HttpClient.newHttpClient();

    @PostMapping("/api/token")
    public ResponseEntity<String> issue(@RequestBody Map<String, String> req) throws Exception {
        String contentId = req.get("content_id");
        if (contentId == null || contentId.isEmpty())
            return ResponseEntity.badRequest().body("{\"error\":\"missing_content_id\"}");

        String userId = req.getOrDefault("user_id", "demo");
        // 실제로는 Jackson 등 JSON 라이브러리로 직렬화할 것 (값에 " 가 들어가면 깨진다)
        String payload = String.format(
            "{\"content_id\":\"%s\",\"user_id\":\"%s\",\"expires_in\":3600}", contentId, userId);

        HttpRequest r = HttpRequest.newBuilder()
            .uri(URI.create(DRM_SERVER + "/api/spk/playback-token"))
            .header("Content-Type", "application/json")
            .header("X-SPK-API-Key", System.getenv("SPK_API_KEY"))
            .POST(HttpRequest.BodyPublishers.ofString(payload))
            .build();

        HttpResponse<String> resp = http.send(r, HttpResponse.BodyHandlers.ofString());
        return ResponseEntity.status(resp.statusCode())
            .header("Content-Type", "application/json")
            .body(resp.body());   // 응답 그대로 전달
    }
}