Muzibu Mobile App

// POST /api/muzibu/songs/{id}/download-token
public function downloadToken(int $songId): JsonResponse
{
    $user = auth()->user();

    // 1. Premium kontrolü
    if (!$user->isPremium()) {
        return response()->json([
            'status' => 'subscription_required'
        ], 402);
    }

    // 2. User-specific encryption key oluştur
    $userKey = hash('sha256', $user->id . config('app.key') . $songId);

    // 3. Download token (1 saat geçerli)
    $token = Crypt::encryptString(json_encode([
        'user_id' => $user->id,
        'song_id' => $songId,
        'user_key' => $userKey,
        'expires' => now()->addHour()->timestamp,
        'subscription_expires' => $user->subscription_expires_at
    ]));

    // 4. İndirme kaydı oluştur
    UserDownload::create([
        'user_id' => $user->id,
        'song_id' => $songId,
        'downloaded_at' => now(),
        'subscription_expires_at' => $user->subscription_expires_at
    ]);

    return response()->json([
        'status' => 'ready',
        'download_url' => "/api/muzibu/songs/{$songId}/download?token={$token}",
        'user_key' => $userKey, // Mobil uygulama saklar
        'expires_at' => $user->subscription_expires_at
    ]);
}