feat: 收口视频访问与摄像头密钥输出

server-go/internal/handler/video_clip.go

@@ -25,6 +25,12 @@ func RegisterVideoClipRoutes(rg *gin.RouterGroup, db *gorm.DB, cfg *config.Confi
 // listClips 录像片段列表（query: cameraId/from/to/limit，按 startAt DESC）
 func listClips(db *gorm.DB) gin.HandlerFunc {
 	return func(c *gin.Context) {
+		userID := currentUserID(c)
+		if userID == nil {
+			c.JSON(http.StatusUnauthorized, gin.H{"error": "未提供用户信息"})
+			return
+		}
+
 		limit := 50
 		if l, err := strconv.Atoi(c.Query("limit")); err == nil && l > 0 {
 			limit = l
@@ -49,7 +55,11 @@ func listClips(db *gorm.DB) gin.HandlerFunc {
 
 		// 为每个片段设置 playbackUrl
 		for i := range clips {
-			url := fmt.Sprintf("/api/v1/video/clips/%d/stream", clips[i].ID)
+			token, err := IssueVideoToken(*userID, "clip", strconv.FormatUint(uint64(clips[i].ID), 10), videoTokenTTL)
+			if err != nil {
+				continue
+			}
+			url := fmt.Sprintf("/api/v1/video/clips/%d/stream?videoToken=%s", clips[i].ID, token)
 			clips[i].PlaybackURL = &url
 		}
 
@@ -60,6 +70,12 @@ func listClips(db *gorm.DB) gin.HandlerFunc {
 // playClip 获取片段播放地址
 func playClip(db *gorm.DB) gin.HandlerFunc {
 	return func(c *gin.Context) {
+		userID := currentUserID(c)
+		if userID == nil {
+			c.JSON(http.StatusUnauthorized, gin.H{"error": "未提供用户信息"})
+			return
+		}
+
 		clipId := c.Param("clipId")
 		var clip model.VideoClip
 		if db.Where("id = ?", clipId).First(&clip).Error != nil {
@@ -72,11 +88,17 @@ func playClip(db *gorm.DB) gin.HandlerFunc {
 			format = "mp4"
 		}
 
+		token, err := IssueVideoToken(*userID, "clip", strconv.FormatUint(uint64(clip.ID), 10), videoTokenTTL)
+		if err != nil {
+			c.JSON(http.StatusInternalServerError, gin.H{"error": "生成播放令牌失败"})
+			return
+		}
+
 		c.JSON(http.StatusOK, gin.H{
 			"clipId":    clip.ID,
-			"url":       fmt.Sprintf("/api/v1/video/clips/%d/stream", clip.ID),
+			"url":       fmt.Sprintf("/api/v1/video/clips/%d/stream?videoToken=%s", clip.ID, token),
 			"format":    format,
-			"expiresAt": time.Now().Add(60 * time.Minute).UTC().Format(time.RFC3339),
+			"expiresAt": time.Now().Add(videoTokenTTL).UTC().Format(time.RFC3339),
 		})
 	}
 }