Your videos stay yours.
Playback stays protected.

import { createUnpiratorServerClient } from "@unpirator/integration-nextjs";

const unpirator = createUnpiratorServerClient({
  apiUrl: process.env.UNPIRATOR_API_URL,
  apiKey: process.env.UNPIRATOR_API_KEY,
});

export default async function ClassPage({ params }) {
  // YOUR APP: load the video the same way you already do today.
  const lesson = await db.lesson.findUnique({
    where: { id: params.id },
  });

  // YOUR APP decides which fields map to Unpirator.
  // lesson.id and lesson.privateVideoUrl are examples from YOUR database.
  const { playbackRef } = await unpirator.upsertPlaybackAsset({
    siteId: process.env.UNPIRATOR_SITE_ID,
    externalContentId: String(lesson.id),
    title: lesson.title,
    provider: "hls",
    sourceUrl: lesson.privateVideoUrl,
    allowedHosts: ["media.example.com"],
    providerConfig: {},
  });

  // Only playbackRef crosses into the rendered player.
  return <LessonVideo playbackRef={playbackRef} />;
}

import { createUnpiratorPlaybackHandler } from "@unpirator/integration-nextjs";
import { auth } from "@/auth";

export const runtime = "nodejs";

export const POST = createUnpiratorPlaybackHandler({
  apiUrl: process.env.UNPIRATOR_API_URL,
  apiKey: process.env.UNPIRATOR_API_KEY,
  siteId: process.env.UNPIRATOR_SITE_ID,

  // YOUR APP: replace this with your real authentication.
  resolveViewer: async () => {
    const session = await auth();

    if (!session?.user?.id || !session?.user?.email) {
      const error = new Error("Sign in required");
      error.status = 401;
      throw error;
    }

    return {
      id: session.user.id, // stays inside YOUR authorization callback
      email: session.user.email, // trusted identity forwarded to Unpirator
    };
  },

  // YOUR APP: replace this with your real course/subscription check.
  authorizePlayback: async ({ body, viewer }) => {
    const lesson = await db.lesson.findFirst({
      where: { unpiratorPlaybackRef: body.playbackRef },
    });

    if (!lesson) return false;

    return hasCourseAccess(viewer.id, lesson.courseId);
  },
});

"use client";

import { UnpiratorPlayer } from "@unpirator/react";

export function LessonVideo({ playbackRef }) {
  return (
    <UnpiratorPlayer
      playbackRef={playbackRef}
      endpoint="/api/unpirator/playback"
      title="Lesson video"
      onError={(error) => console.error(error.code, error)}
    />
  );
}

POST /api/unpirator/playback
Content-Type: application/json

{
  "playbackRef": "pb_7dk...91q",
  "deviceId": "device_...",
  "client": {
    "browser": "Chrome",
    "os": "Windows"
  }
}

UNPIRATOR_API_URL=https://theunpirator.vercel.app/control-api
UNPIRATOR_API_KEY=up_live_replace_me
UNPIRATOR_SITE_ID=00000000-0000-0000-0000-000000000000