Files
NovaSonic/public/sw.js
T
HoneyandClaude Opus 4.8 ccf704754a fix(web): proxy Apple charts (CORS) + clear message when Apple search is blocked
Confirmed via curl from a clean IP: Apple's iTunes /search returns 403 (blocked
server-side, likely datacenter-IP anti-scraping) while /lookup?id= still returns 200.
So the Erkunden Apple search fails through no fault of ours.

- Charts: the "most-played" RSS (rss.applemarketingtools.com) was fetched directly
  from the browser and hit CORS; proxy it via /api/itunes-charts/:kind.
- Error visibility: itunesSearch records the last outcome (HTTP status / network);
  the global-search view now shows "Apple-Suche gerade nicht verfügbar" with the
  reason (403 = Apple blocks the API, not you) instead of a blank "no results".
- iTunes proxy now forwards the upstream status code instead of always 200.

Deezer (free, no key, ~50 req/5s) is the planned search fallback; MusicBrainz is too
rate-limited (1/s) for interactive search.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-30 20:32:08 +02:00

78 lines
2.6 KiB
JavaScript

const CACHE = 'ns-v48';
const PRECACHE = ['/', 'index.html', 'manifest.json', 'icon.svg'];
const SKIP_PATHS = ['/rest/stream', '/rest/download', '/config.js'];
// Auth token params stripped from cache keys so artwork survives across sessions/token refreshes.
// The actual fetch still uses the full URL (with token); only the stored key is normalized.
const STRIP_PARAMS = ['t', 's', 'u', 'v', 'c', 'f'];
self.addEventListener('install', e => {
e.waitUntil(caches.open(CACHE).then(c => c.addAll(PRECACHE)));
self.skipWaiting();
});
self.addEventListener('activate', e => {
e.waitUntil(
caches.keys()
.then(keys => Promise.all(keys.filter(k => k !== CACHE).map(k => caches.delete(k))))
.then(() => self.clients.claim())
.then(() => self.clients.matchAll({ type: 'window', includeUncontrolled: true }))
.then(clients => clients.forEach(c => c.postMessage({ type: 'SW_UPDATED', version: CACHE })))
);
});
self.addEventListener('message', e => {
if (e.data?.type === 'GET_VERSION') {
e.source.postMessage({ type: 'VERSION', version: CACHE });
}
});
// Build a stable cache key by stripping Navidrome auth params
function _cacheKey(url) {
try {
const u = new URL(url);
STRIP_PARAMS.forEach(p => u.searchParams.delete(p));
return u.toString();
} catch {
return url;
}
}
self.addEventListener('fetch', e => {
if (!e.request.url.startsWith(self.location.origin)) return;
if (SKIP_PATHS.some(p => e.request.url.includes(p))) return;
const isCoverArt = e.request.url.includes('/rest/getCoverArt');
if (isCoverArt) {
// Cache-first for artwork — serves instantly from SW cache even when Doze blocks network.
// Key is token-stripped so it survives session restarts with new auth tokens.
const keyUrl = _cacheKey(e.request.url);
const keyReq = new Request(keyUrl);
e.respondWith(
caches.open(CACHE).then(cache =>
cache.match(keyReq).then(cached => {
if (cached) return cached;
return fetch(e.request).then(res => {
if (res.status === 200) cache.put(keyReq, res.clone());
return res;
}).catch(() => Response.error());
})
)
);
return;
}
// All other requests: network-first, fall back to cache
e.respondWith(
fetch(e.request)
.then(res => {
if (res.status === 200 && e.request.method === 'GET') {
const clone = res.clone();
caches.open(CACHE).then(c => c.put(e.request, clone));
}
return res;
})
.catch(() => caches.match(e.request).then(r => r || Response.error()))
);
});