fix(02moviedownloader): handle AES-256-CBC encrypted API response

src/providers/02moviedownloader/02moviedownloader.ts

@@ -1,3 +1,4 @@
+import { createDecipheriv, createHash } from 'crypto';
 import type {
     Diagnostic,
     ProviderCapabilities,
@@ -7,7 +8,11 @@ import type {
     SubtitleFormat
 } from '@omss/framework';
 import { BaseProvider, type SourceType, type Subtitle } from '@omss/framework';
-import { MovieDownloaderResponse, Token } from './02moviedownloader.types.js';
+import {
+    EncryptedResponse,
+    MovieDownloaderResponse,
+    Token
+} from './02moviedownloader.types.js';
 import { generateRandomUserAgent } from '../../utils/ua.js';
 
 export class MovieDownloader extends BaseProvider {
@@ -250,6 +255,26 @@ export class MovieDownloader extends BaseProvider {
         };
     }
 
+    private decryptPayload(
+        cipherBundle: string,
+        token: string
+    ): MovieDownloaderResponse {
+        const parts = cipherBundle.split(':');
+        if (parts.length !== 2)
+            throw new Error('Invalid encrypted payload format');
+        const iv = Buffer.from(parts[0], 'base64');
+        const cipherBytes = Buffer.from(parts[1], 'base64');
+        const key = createHash('sha256').update(token).digest();
+        const decipher = createDecipheriv('aes-256-cbc', key, iv);
+        const decrypted = Buffer.concat([
+            decipher.update(cipherBytes),
+            decipher.final()
+        ]);
+        return JSON.parse(
+            decrypted.toString('utf8')
+        ) as MovieDownloaderResponse;
+    }
+
     private buildPageUrl(media: ProviderMediaObject): string {
         const tmdbId = media.tmdbId;
         if (media.type === 'movie') {
@@ -283,7 +308,13 @@ export class MovieDownloader extends BaseProvider {
             if (!response.ok) {
                 throw new Error(`HTTP error! status: ${response.status}`);
             }
-            return await response.json();
+            const raw = (await response.json()) as
+                | MovieDownloaderResponse
+                | EncryptedResponse;
+            if ('encrypted' in raw && raw.encrypted === true) {
+                return this.decryptPayload(raw.data, token);
+            }
+            return raw as MovieDownloaderResponse;
         } catch (error) {
             throw new Error(
                 `Failed to fetch page for ${media.title}: ${error}`

src/providers/02moviedownloader/02moviedownloader.types.ts

@@ -62,3 +62,8 @@ export interface Token {
     token: string;
     expiresIn: number;
 }
+
+export interface EncryptedResponse {
+    encrypted: true;
+    data: string;
+}