Security & Privacy

import videodb

# Secure connection
conn = videodb.connect()  # Uses VIDEODB_API_KEY env var

# Desktop capture with client tokens (never expose API key)
cap = conn.create_capture_session(
    end_user_id="user_abc",
    callback_url="https://your-backend.com/webhooks"
)
token = conn.generate_client_token(expires_in=600)  # Short-lived

video = coll.upload(url="https://...")  # Stored
index = video.index_scenes(...)          # Stored
results = video.search("query")          # Searchable

# Real-time processing only
rtstream.index_visuals(
    prompt="Monitor for activity",
    ephemeral=True  # Process but don't store
)

# Delete video and all associated data
video.delete()

# Delete specific index
index.delete()

# Delete collection
coll.delete()

# Environment variable (recommended)
conn = videodb.connect()  # Uses VIDEODB_API_KEY

# Explicit key (server-side only)
conn = videodb.connect(api_key="your-key")

# Create new key
new_key = conn.create_api_key(name="production")

# List keys
keys = conn.list_api_keys()

# Delete key
conn.delete_api_key(key_id)

# Backend (holds API key)
token = conn.generate_client_token(expires_in=600)  # 10 minutes

# Client (uses token, never sees API key)
client = CaptureClient(client_token=token)

# Request explicit permission
await client.request_permission("microphone")
await client.request_permission("screen_capture")

# User must grant permission in OS dialog
channels = await client.list_channels()

# Get all data for a user
def get_user_data(end_user_id):
    sessions = conn.list_capture_sessions(end_user_id=end_user_id)
    videos = coll.list_videos(metadata={"user_id": end_user_id})
    return {"sessions": sessions, "videos": videos}

# Delete all user data
def delete_user_data(end_user_id):
    sessions = conn.list_capture_sessions(end_user_id=end_user_id)
    for session in sessions:
        session.delete()
    # Delete associated RTStreams and indexes

@app.post("/webhooks/videodb")
async def handle_webhook(request):
    # Verify signature (implementation depends on your setup)
    signature = request.headers.get("X-VideoDB-Signature")
    if not verify_signature(request.body, signature):
        return {"error": "Invalid signature"}, 401

    event = await request.json()
    process_event(event)
    return {"status": "ok"}