NeoWatch API v2

Rust REST API for NeoWatch with Neo ID SSO authentication, deployable on Vercel and Netlify

Features

• Serverless Rust functions on Vercel and Netlify-ready docs hosting
• Authentication via Neo ID SSO only (no email/password)
• Media data from Kinopoisk API
• Favorites management (idempotent add/remove)
• Watch later management (idempotent add/remove)
• Watch progress sync (cross-device, last-write-wins conflict resolution)
• Genre categories with film/tv filtering
• Video player iframe endpoints (Alloha, Lumex, Vibix, HDVB, Collaps)
• Full-text search via Kinopoisk (v1)
• Filtered search via Kinopoisk v2.2 API (v2) — genre, year, rating, keyword, type, country
• Clean media details response (v2)
• JWT (HS256) with refresh token rotation
• MongoDB for users, favorites, watch later, and refresh tokens
• CORS allowed for all origins

Stack

• Backend: Rust + Axum 0.8 (serverless via vercel_runtime)
• Database: MongoDB
• Auth: Neo ID SSO (JWT HS256)
• Deployment: Vercel Serverless Functions or Netlify static hosting with API proxying
• Docs: Docusaurus + Scalar API Reference

Environment

Copy .env.example and fill in the values:

MONGODB_URI=mongodb+srv://...
JWT_SECRET=your-secret
NEO_ID_URL=https://id.neome.uk
NEO_ID_API_KEY=...
NEO_ID_SITE_ID=...
PUBLIC_API_URL=https://api.neome.uk
KPAPI_KEY=...

# Video players (optional, enable as needed)
ALLOHA_TOKEN=...
LUMEX_TOKEN=...
VIBIX_TOKEN=...
HDVB_TOKEN=...
COLLAPS_TOKEN=...

Development

cargo run --bin server

Deployment

Deploy to Vercel:

vercel deploy

Deploy to Netlify:

netlify deploy --build --prod

Each file in api/ becomes a serverless function on Vercel. On Netlify, the repository builds and publishes docs/build, while /api/v1/* is proxied to https://api.neome.uk/api/v1/* via netlify.toml. The Netlify deploy button is docs-only plus API proxying, so it does not require the backend secrets used by Vercel.

Hosting routes

• / -> API documentation site (Docusaurus build from docs/build)
• /api/v1/* -> NeoWatch API v1 endpoints
• /api/v2/* -> NeoWatch API v2 endpoints
• /openapi.yaml -> OpenAPI schema used by docs

API Overview

v1 Endpoints

Group	Prefix	Description
Auth	/api/v1/auth/*	Login, callback, refresh, revoke, profile, delete
Search	/api/v1/search	Search by keyword (Kinopoisk v1)
Media	/api/v1/movie/{id}	Film details by Kinopoisk ID
	/api/v1/movies/popular	Popular films
	/api/v1/movies/top-rated	Top 250 films
	/api/v1/tv/top-rated	Top 250 TV series
	/api/v1/genres	List of all genres
	/api/v1/category/{id}	Films/TV by genre
Images	/api/v1/images/*	Poster, screens, backdrops, page backdrops, logos
Players	/api/v1/players/*	Video player iframes
Torrents	/api/v1/torrents/search	Torrent search
Favorites	/api/v1/favorites/*	Add, remove, list, check
Watch Later	/api/v1/watch-later/*	Add, remove, list, check
Sync Progress	/api/v1/sync/progress	Upsert, batch sync, get, delete watch progress
Support	/api/v1/support/list	List supporters
Health	/api/v1/health	Health check

v2 Endpoints

Endpoint	Description
GET /api/v2/search	Filtered search (genre, year, rating, keyword, type, country, order)
GET /api/v2/movie/{id}	Clean media details (no duplicate fields)

Full spec: openapi.yaml

Mobile Neo ID callback

For mobile clients, backend supports redirect trampoline:

• POST /api/v1/auth/neo-id/login with mobile_redirect_url (e.g. neowatch://auth/neo-id/callback)
• Neo ID redirects to /api/v1/auth/neo-id/mobile-callback
• API redirects (302) to mobile deep link with access_token in query

Important: set PUBLIC_API_URL in Vercel env (example: https://api.neome.uk).

License

MIT