How to stream signed Mux HLS video from Sanity CMS in a Next.js app

·1 views

A developer tutorial outlines the full read path for playing Mux videos stored in Sanity CMS within a Next.js application, an area rarely covered in existing documentation. The process involves fetching a Mux asset's playbackId from Sanity using a GROQ query, then generating a short-lived signed JWT server-side via a Next.js Route Handler to avoid exposing the signing secret to the browser. Mux requires RS256-signed tokens with specific audience values — 'v' for video and 't' for thumbnails — and using incorrect audience claims is cited as the most common cause of 401 errors. The client component initialises hls.js only when the browser lacks native HLS support, since Safari handles HLS natively while Chrome does not. The guide also addresses poster frame handling to avoid negatively impacting Largest Contentful Paint scores.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

How Penetration Testing Works: A Phase-by-Phase Defensive Cybersecurity Guide

Penetration testing is an authorized, simulated cyberattack conducted by ethical hackers to uncover security vulnerabilities in an organization's systems, networks, and applications before real attackers can exploit them. The process follows established frameworks such as NIST SP 800-115 and OSSTMM, ensuring tests are structured, reproducible, and yield actionable results. A typical engagement spans five phases, beginning with planning and reconnaissance, where testers define scope, set rules of engagement, and gather intelligence through passive and active methods. Organizations of all sizes benefit from pen testing, as it helps validate security controls, meet regulatory requirements like PCI DSS and GDPR, and prioritize remediation based on real-world attack scenarios. Unlike automated vulnerability scans, penetration tests actively exploit discovered weaknesses to demonstrate genuine risk, making them a critical component of a proactive cybersecurity strategy.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How to build a CI/CD alert triage agent with its own dedicated email inbox

Developers managing CI/CD pipelines often face alert fatigue, with dozens of near-identical failure emails burying the one notification that actually requires action. A proposed solution involves giving an AI triage agent its own dedicated email address, rather than connecting it to a human's inbox, so it can receive pipeline alerts directly. The agent clusters incoming failure emails, generates a probable root-cause summary, and replies within the same thread so on-call engineers read one consolidated message instead of dozens. The approach uses the Nylas API to provision a programmatic mailbox via a grant account, requiring no OAuth flow or external account connection. The author clarifies this system is meant to reduce email noise, not replace existing observability tools like metrics or tracing platforms.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How a Dedicated AI Agent Account Can Triage Community Abuse Report Floods

When a harmful post surfaces in an online community, abuse inboxes can be instantly overwhelmed with dozens of duplicate reports from different members. A proposed solution involves assigning the abuse queue its own dedicated mailbox — called a Nylas Agent Account — that an AI agent owns and manages independently. The agent fingerprints reported content so multiple reports about the same post are collapsed into a single entry, preventing redundant processing. Serious cases are automatically escalated to a human-monitored folder, while all reporters receive an acknowledgement. The system relies on idempotency and a separate database for deduplication state, ensuring reliability even during high-volume incidents.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Nylas Agent Accounts automate RSVP tracking so AI schedulers stay in sync

Nylas has introduced Agent Accounts, a feature that allows AI agents to act as full calendar organizers with their own mailbox and calendar, rather than merely parsing a human's inbox. When an agent sends a meeting invite, attendees' RSVP replies are automatically absorbed by Nylas and reflected in the event's participant list without any manual email parsing. The system handles ICS REPLY messages from Google Calendar, Outlook, and Apple Calendar, updating each participant's status to yes, no, maybe, or noreply in real time. Developers are notified of status changes through a single event.updated webhook, eliminating the need to reconstruct attendance from scattered reply emails. The approach sidesteps known inconsistencies in how different calendar providers format RSVP messages, keeping the event object itself as the single source of truth for attendance.

0 comments Read more at DEV Community