Introduction & Authentication

Getting started with UAFilms API, key generation, and rate limits

Base server URL: https://films.aartzz.pp.ua

Generating an API Key

To use the API and bypass guest rate limits, generate a personal API key:

1. Open the web app at films.aartzz.pp.ua.
2. Sign up or log in (supported trusted providers: Gmail, Outlook, Proton, Ukr.net, iCloud).
3. Navigate to Settings ➔ Account ➔ API (or directly films.aartzz.pp.ua/dashboard).
4. Click “Create Key”, assign a descriptive name (e.g. My Production Bot), and copy your generated key (uaf_live_...).

The full secret key is only displayed once upon generation. Store it securely.

---

Authentication Methods

Authenticate your API requests using any of the following methods:

1. HTTP Header x-api-key (Recommended)

curl -H "x-api-key: uaf_live_YOUR_KEY" \
  https://films.aartzz.pp.ua/v1/movies/1423191

2. Header Authorization: Bearer

curl -H "Authorization: Bearer uaf_live_YOUR_KEY" \
  https://films.aartzz.pp.ua/v1/movies/1423191

3. Query Parameter (convenient for media players)

curl "https://films.aartzz.pp.ua/v1/movies/1423191?api_key=uaf_live_YOUR_KEY"

---

Security & Rate Limits

The UAFilms server employs tiered security to ensure high service availability:

• Authenticated Users (with API key):

  • Completely exempt from Cloudflare Turnstile CAPTCHA checks.
  • Full analytics tracking (request volume, average latency, and recent 50 logs).
  • High concurrency and priority queue for source extraction.

• Unauthenticated / Guest Requests:

  • Standard catalog routes (/api/home, /api/search, /api/details) have soft rate limits.
  • Streaming resolution endpoints (/v1/movies/*, /v1/tv/*) are strictly rate-limited to 10 requests per minute per client IP.
  • When Cloudflare Turnstile protection is active, guest requests must include a valid token in the cf-turnstile-response header or turnstile_token query parameter.

---

Real-time OMSS Streaming (Server-Sent Events)

When resolving media sources across multiple providers, some providers respond in 300ms while others may take 2-3 seconds. The OMSS endpoints support SSE so players can start playback immediately:

// Connect to real-time provider stream via EventSource
const eventSource = new EventSource(
  'https://films.aartzz.pp.ua/v1/movies/1423191?sse=1&api_key=uaf_live_YOUR_KEY'
);

eventSource.addEventListener('provider', (event) => {
  const data = JSON.parse(event.data);
  console.log(`Received sources from ${data.name}:`, data.sources);
});

eventSource.addEventListener('complete', (event) => {
  console.log('Search completed across all providers.');
  eventSource.close();
});