A professional Next.js web application for managing live streams and controlling multiple OBS Source Switchers with real-time WebSocket integration and modern glass morphism UI.
Find a file
Decobus afc6f5f3a8
Some checks failed
Lint and Build / build (22) (pull_request) Failing after 37s
Lint and Build / build (20) (pull_request) Failing after 48s
Implement comprehensive security fixes for API protection
- Add API key authentication middleware for all API endpoints
- Fix path traversal vulnerability with screen parameter validation
- Implement comprehensive input validation and sanitization
- Create centralized security utilities in lib/security.ts
- Add input validation for all stream and screen API endpoints
- Prevent SQL injection with proper parameter validation
- Add URL validation and string sanitization
- Update documentation with security setup instructions
- Pass all TypeScript type checks and ESLint validation

Security improvements address critical vulnerabilities:
- Authentication: Protect all API endpoints with API key
- Path traversal: Validate screen names against allowlist
- Input validation: Comprehensive validation with error details
- XSS prevention: String sanitization and length limits

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-07-19 04:57:54 -04:00
.forgejo/workflows Add Forgejo CI/CD workflows with self-hosted runners 2025-07-19 04:42:30 -04:00
.github/workflows Initial commit - OBS Source Switcher Plugin UI 2025-07-15 22:15:57 -04:00
app Implement comprehensive security fixes for API protection 2025-07-19 04:57:54 -04:00
components Update UI to match consistent layout patterns between pages 2025-07-19 04:39:40 -04:00
lib Implement comprehensive security fixes for API protection 2025-07-19 04:57:54 -04:00
public Initial commit - OBS Source Switcher Plugin UI 2025-07-15 22:15:57 -04:00
scripts Update UI to match consistent layout patterns between pages 2025-07-19 04:39:40 -04:00
styles Initial commit - OBS Source Switcher Plugin UI 2025-07-15 22:15:57 -04:00
types Initial commit - OBS Source Switcher Plugin UI 2025-07-15 22:15:57 -04:00
.eslintrc.json Initial commit - OBS Source Switcher Plugin UI 2025-07-15 22:15:57 -04:00
.gitignore Initial commit - OBS Source Switcher Plugin UI 2025-07-15 22:15:57 -04:00
CLAUDE.md Implement comprehensive security fixes for API protection 2025-07-19 04:57:54 -04:00
config.js Initial commit - OBS Source Switcher Plugin UI 2025-07-15 22:15:57 -04:00
middleware.ts Implement comprehensive security fixes for API protection 2025-07-19 04:57:54 -04:00
next.config.ts Initial commit - OBS Source Switcher Plugin UI 2025-07-15 22:15:57 -04:00
package-lock.json Update UI to match consistent layout patterns between pages 2025-07-19 04:39:40 -04:00
package.json Update UI to match consistent layout patterns between pages 2025-07-19 04:39:40 -04:00
postcss.config.js Initial commit - OBS Source Switcher Plugin UI 2025-07-15 22:15:57 -04:00
postcss.config.mjs Initial commit - OBS Source Switcher Plugin UI 2025-07-15 22:15:57 -04:00
README.md Implement comprehensive security fixes for API protection 2025-07-19 04:57:54 -04:00
tailwind.config.js Initial commit - OBS Source Switcher Plugin UI 2025-07-15 22:15:57 -04:00
tailwind.config.ts Initial commit - OBS Source Switcher Plugin UI 2025-07-15 22:15:57 -04:00
testObs.js Initial commit - OBS Source Switcher Plugin UI 2025-07-15 22:15:57 -04:00
tsconfig.json Initial commit - OBS Source Switcher Plugin UI 2025-07-15 22:15:57 -04:00

OBS Source Switcher Plugin UI

A professional Next.js web application for controlling multiple OBS Source Switchers with real-time WebSocket integration and modern glass morphism UI.

Features

  • Multi-Screen Source Control: Manage 7 different screen positions (large, left, right, and 4 corners)
  • Real-time OBS Integration: WebSocket connection with live status monitoring
  • Team & Stream Management: Organize streams by teams with full CRUD operations
  • Modern UI: Glass morphism design with responsive layout
  • Professional Broadcasting: Audio routing, scene management, and live status indicators
  • Dual Integration: WebSocket API + text file monitoring for maximum compatibility

Quick Start

npm install
npm run dev

Open http://localhost:3000 to access the control interface.

Configuration

Environment Variables

Create .env.local in the project root:

# File storage directory (optional, defaults to ./files)
FILE_DIRECTORY=C:\\OBS\\source-switching

# OBS WebSocket settings (optional, these are defaults)
OBS_WEBSOCKET_HOST=127.0.0.1
OBS_WEBSOCKET_PORT=4455
OBS_WEBSOCKET_PASSWORD=your_password_here

# Security (IMPORTANT: Set in production)
API_KEY=your_secure_api_key_here

Security Setup

⚠️ IMPORTANT: Set API_KEY in production to protect your OBS setup from unauthorized access.

Generate a secure API key:

# Generate a random 32-character key
openssl rand -hex 32

Without an API key, anyone on your network can control your OBS streams.

OBS Source Switcher Setup

  1. In OBS, configure Source Switcher properties
  2. Enable "Current Source File" at the bottom
  3. Point to one of the generated text files (e.g., large.txt, left.txt)
  4. Set read interval to 1000ms
  5. Sources will switch automatically when files change

Database Setup

# Create seasonal database tables
npm run create-sat-summer-2025-tables

Development Commands

npm run dev          # Start development server
npm run build        # Build for production
npm run start        # Start production server
npm run lint         # Run ESLint
npm run type-check   # TypeScript validation

Architecture

  • Frontend: Next.js 15 with React 19 and TypeScript
  • Backend: Next.js API routes with SQLite database
  • OBS Integration: WebSocket connection + text file monitoring
  • Styling: Custom CSS with glass morphism and Tailwind utilities
  • CI/CD: Forgejo workflows with self-hosted runners

API Endpoints

  • GET /api/streams - List all streams
  • POST /api/addStream - Create new stream and OBS source
  • POST /api/setActive - Set active stream for screen position
  • GET /api/obsStatus - Real-time OBS connection status
  • GET /api/teams - Team management

See CLAUDE.md for detailed architecture documentation.