Signed URLs

import { createHmac } from "crypto";

function generateSignedAssetUrl({
assetId,
format,
expiresInSeconds = 3600, // Default 1 hour
signingSecret,
}: {
assetId: string;
format?: string;
expiresInSeconds?: number;
signingSecret: string;
}): string {
// 1. Calculate Unix timestamp
const expires = Math.floor(Date.now() / 1000) + expiresInSeconds;

// 2. Generate HMAC-SHA256 signature
const signature = createHmac("sha256", signingSecret)
.update(`${assetId}:${expires}`)
.digest("hex");

// 3. Construct URL
const ext = format ? `.${format}` : "";
return `https://cdn.dreep.cloud/api/v1/fetch/${assetId}${ext}?exp=${expires}&sig=${signature}`;
}

import hmac
import hashlib
import time

def generate_signed_asset_url(asset_id, signing_secret, expires_in_seconds=3600):
    # 1. Calculate Unix timestamp
    expires = int(time.time()) + expires_in_seconds

    # 2. Generate HMAC-SHA256 signature
    message = f"{asset_id}:{expires}".encode("utf-8")
    signature = hmac.new(
        signing_secret.encode("utf-8"),
        message,
        hashlib.sha256
    ).hexdigest()

    # 3. Construct URL
    return f"https://cdn.dreep.cloud/api/v1/fetch/{asset_id}?exp={expires}&sig={signature}"

package main

import (
	"crypto/hmac"
	"crypto/sha256"
	"encoding/hex"
	"fmt"
	"time"
)

func GenerateSignedAssetUrl(assetID string, signingSecret string, expiresInSeconds int64) string {
	// 1. Calculate Unix timestamp
	expires := time.Now().Unix() + expiresInSeconds

	// 2. Generate HMAC-SHA256 signature
	message := fmt.Sprintf("%s:%d", assetID, expires)
	mac := hmac.New(sha256.New, []byte(signingSecret))
	mac.Write([]byte(message))
	signature := hex.EncodeToString(mac.Sum(nil))

	// 3. Construct URL
	return fmt.Sprintf("https://cdn.dreep.cloud/api/v1/fetch/%s?exp=%d&sig=%s", assetID, expires, signature)
}