API Documentation

Authentication

The API supports two authentication methods:

1. API Key — pass your key in the X-API-Key header. This works for all /api/* endpoints.

2. Session Cookie — sign in via /auth/signin and use the returned ch_session cookie for subsequent requests. This is used by the web dashboard.

curl -H "X-API-Key: YOUR_KEY" \
  https://contenthosting.org/api/videos

Sign Up

Create a new user account and start a session.

// Response 201
{ "ok": true, "userId": "uuid-here" }

Sign In

Authenticate and receive a session cookie.

// Response 200
{ "ok": true, "userId": "uuid-here" }

Sign Out

Destroy the current session. Requires a valid session cookie.

// Response 200
{ "ok": true }

Current User

Get profile data for the authenticated user. Requires session cookie.

// Response 200
{ "user": { "id": "...", "email": "...", "createdAt": 1712... } }

Upload Presign

Get a presigned URL to upload a video file directly to cloud storage. Requires API key or session.

// Response 200
{
  "objectKey": "videos/owner/...",
  "presignedUrl": "https://...",
  "expiresInSeconds": 900
}

Upload Complete

Finalize a video upload after the file has been PUT to the presigned URL.

// Response 201
{
  "ok": true,
  "videoId": "uuid",
  "status": "ready",
  "defaultPlayer": "jwplayer",
  "embedUrl": "https://.../player/jwplayer?video=uuid",
  "embeds": { "jwplayer": "<iframe ...>", ... }
}

List Videos

Retrieve all videos owned by the authenticated user or API key.

// Response 200
{ "videos": [ { "id": "...", "title": "...", "status": "ready", ... } ] }

Get Embed Code

Get embed markup and iframe URLs for all supported player types. No auth required.

// Response 200
{
  "defaultPlayer": "jwplayer",
  "embedUrl": "https://.../player/jwplayer?video=id",
  "embeds": {
    "jwplayer": "<iframe ...>",
    "plyr": "<iframe ...>",
    "videojs": "<iframe ...>",
    "fluidplayer": "<iframe ...>"
  }
}

Stream Media

Direct video stream with byte-range support. Returns the video file with proper Content-Type and Accept-Ranges headers. No auth required.

Player Types

ContentHosting supports four self-hosted, iframe-isolated video players: