Render faceless shorts from a Lovable app

import { createClient } from "npm:@supabase/supabase-js@2";

const cors = {
  "Access-Control-Allow-Origin": "*",
  "Access-Control-Allow-Headers": "authorization, x-client-info, apikey, content-type",
};

Deno.serve(async (req) => {
  if (req.method === "OPTIONS") return new Response(null, { headers: cors });

  const supabase = createClient(Deno.env.get("SUPABASE_URL")!, Deno.env.get("SUPABASE_ANON_KEY")!, {
    global: { headers: { Authorization: req.headers.get("Authorization") ?? "" } },
  });
  const { data } = await supabase.auth.getUser();
  if (!data.user) return new Response("sign in first", { status: 401, headers: cors });

  const { topic } = await req.json();
  const res = await fetch("https://api.reelsdk.com/v1/shorts?wait=0", {
    method: "POST",
    headers: {
      Authorization: `Bearer ${Deno.env.get("REELSDK_KEY")}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({
      topic,
      style: "cinematic",
      duration_s: 45,
      webhook_url: `${Deno.env.get("SUPABASE_URL")}/functions/v1/reelsdk-webhook`,
    }),
  });

  const { job, error } = await res.json();
  if (!res.ok) return Response.json({ error }, { status: res.status, headers: cors });

  await supabase.from("videos").insert({ user_id: data.user.id, topic, job_id: job.id, status: job.status });
  return Response.json({ job_id: job.id }, { headers: cors });
});

import { createClient } from "npm:@supabase/supabase-js@2";

const admin = createClient(Deno.env.get("SUPABASE_URL")!, Deno.env.get("SUPABASE_SERVICE_ROLE_KEY")!);

Deno.serve(async (req) => {
  const body = await req.text();
  const signature = req.headers.get("Reel-Signature");
  if (!(await verifyReelSignature(signature, body, Deno.env.get("REELSDK_WEBHOOK_SECRET")!))) {
    return new Response("invalid signature", { status: 401 });
  }

  const job = JSON.parse(body);
  const { error } = await admin
    .from("videos")
    .update({ status: job.status, video_url: job.outputs?.video ?? null })
    .eq("job_id", job.id);

  // A 500 makes reelsdk retry the delivery
  if (error) return new Response(error.message, { status: 500 });
  return new Response("ok");
});

async function verifyReelSignature(header: string | null, body: string, secret: string) {
  const parts = Object.fromEntries((header ?? "").split(",").map((part) => part.split("=")));
  const age = Math.abs(Date.now() / 1000 - Number(parts.t));
  if (!/^[0-9a-f]{64}$/i.test(parts.v1 ?? "") || !(age <= 300)) return false;

  const encoder = new TextEncoder();
  const key = await crypto.subtle.importKey(
    "raw",
    encoder.encode(secret),
    { name: "HMAC", hash: "SHA-256" },
    false,
    ["verify"],
  );
  const signature = Uint8Array.from(parts.v1.match(/../g), (pair: string) => parseInt(pair, 16));
  return crypto.subtle.verify("HMAC", key, signature, encoder.encode(`${parts.t}.${body}`));
}