JKVideo/dev-proxy.js

const https = require('https');
const zlib = require('zlib');
const express = require('express');
const app = express();

// CORS: allow any local origin (Expo web dev server)
app.use((req, res, next) => {
  res.setHeader('Access-Control-Allow-Origin', '*');
  res.setHeader('Access-Control-Allow-Headers', 'Content-Type, X-Buvid3, X-Sessdata');
  res.setHeader('Access-Control-Allow-Methods', 'GET, POST, OPTIONS');
  if (req.method === 'OPTIONS') return res.sendStatus(200);
  next();
});

function makeProxy(targetHost) {
  return (req, res) => {
    const buvid3   = req.headers['x-buvid3'] || '';
    const sessdata = req.headers['x-sessdata'] || '';
    const cookies  = [
      buvid3   && `buvid3=${buvid3}`,
      sessdata && `SESSDATA=${sessdata}`,
    ].filter(Boolean).join('; ');

    const options = {
      hostname: targetHost,
      path:     req.url,
      method:   req.method,
      headers: {
        'Cookie':          cookies,
        'Referer':         'https://www.bilibili.com',
        'Origin':          'https://www.bilibili.com',
        'User-Agent':      'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36',
        'Accept':            'application/json, text/plain, */*',
        'Accept-Language':   'zh-CN,zh;q=0.9',
        'Accept-Encoding':   'identity',
      },
    };

    const proxy = https.request(options, (proxyRes) => {
      // On successful QR login, extract SESSDATA from set-cookie and relay via custom header
      const setCookies = proxyRes.headers['set-cookie'] || [];
      const match = setCookies.find(c => c.includes('SESSDATA='));
      if (match) {
        const val = match.split(';')[0].replace('SESSDATA=', '');
        res.setHeader('X-Sessdata', val);
      }
      res.writeHead(proxyRes.statusCode, {
        'Content-Type': proxyRes.headers['content-type'] || 'application/json',
      });
      proxyRes.pipe(res);
    });

    proxy.on('error', (err) => res.status(502).json({ error: err.message }));
    req.pipe(proxy);
  };
}

app.use('/bilibili-api',      makeProxy('api.bilibili.com'));
app.use('/bilibili-passport', makeProxy('passport.bilibili.com'));

// Dedicated comment proxy: buffer response and decompress by magic bytes (not Content-Encoding header)
app.use('/bilibili-comment', (req, res) => {
  const options = {
    hostname: 'comment.bilibili.com',
    path:     req.url,
    method:   req.method,
    headers: {
      'Referer':         'https://www.bilibili.com',
      'User-Agent':      'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36',
      'Accept':          '*/*',
      'Accept-Language': 'zh-CN,zh;q=0.9',
    },
  };
  const proxy = https.request(options, (proxyRes) => {
    res.setHeader('Content-Type', proxyRes.headers['content-type'] || 'text/xml; charset=utf-8');
    const chunks = [];
    proxyRes.on('data', chunk => chunks.push(chunk));
    proxyRes.on('end', () => {
      const buf = Buffer.concat(chunks);
      if (buf[0] === 0x1f && buf[1] === 0x8b) {
        // actual gzip data — decompress regardless of Content-Encoding header
        zlib.gunzip(buf, (err, result) => {
          if (err) res.status(502).end('gunzip error: ' + err.message);
          else res.end(result);
        });
      } else {
        res.end(buf);
      }
    });
    proxyRes.on('error', (err) => res.status(502).json({ error: err.message }));
  });
  proxy.on('error', (err) => res.status(502).json({ error: err.message }));
  req.pipe(proxy);
});

// Image CDN proxy — strips the host segment and forwards to the real CDN with Referer
app.use('/bilibili-img', (req, res) => {
  const parts = req.url.split('/').filter(Boolean);
  const host = parts[0];
  if (!host || !host.endsWith('.hdslb.com')) return res.status(403).end();
  req.url = '/' + parts.slice(1).join('/');
  makeProxy(host)(req, res);
});

const PORT = process.env.PROXY_PORT || 3001;
app.listen(PORT, () => console.log(`[Proxy] http://localhost:${PORT}`));