GoodShort API

GoodShort (GoodReels) is a short drama streaming platform with a large Indonesian drama catalog. This API provides HLS streaming with inline AES-128 keys, CDN-direct TS segments (zero server bandwidth), multi-quality (540p/720p/1080p), and all episodes unlocked.

Get Started Endpoints

🎥

HLS Streaming

AES-128 inline key

🌐

11 Languages

Multi-language support

🔓

All Unlocked

Free + paid episodes

API Key

Authentication

Most GoodShort endpoints require the X-API-Key header. The /languages endpoint is public. All endpoints including /hls require the X-API-Key header.

Rate Limits

Plan	Requests / min
Free	10
Monthly	5,000
Lifetime	Unlimited

Example Request

curl -H "X-API-Key: YOUR_KEY" \
{{BASE}}/api/goodshort/trending?lang=id

Endpoints

GET /api/goodshort/languages Public

Returns supported languages with codes and names. GoodShort supports 11 languages: id, en, es, ko, th, de, fr, ja, pt, zh, vi.

Example

curl "{{BASE}}/api/goodshort/languages"

GET /api/goodshort/trending?lang={lang} API Key

Returns currently trending dramas on GoodShort.

Parameter	Type	Description
langoptional	string	Language code (default: `id`)

Example

curl -H "X-API-Key: YOUR_KEY" "{{BASE}}/api/goodshort/trending?lang=id"

lang

GET /api/goodshort/foryou?page={page}&lang={lang} API Key

Paginated drama recommendations (For You feed).

Parameter	Type	Description
pageoptional	integer	Page number (default: `1`)
langoptional	string	Language code (default: `id`)

Example

curl -H "X-API-Key: YOUR_KEY" "{{BASE}}/api/goodshort/foryou?page=1&lang=id"

page

lang

GET /api/goodshort/search?query={q}&lang={lang} API Key

Search for dramas within GoodShort catalog.

Parameter	Type	Description
queryrequired	string	Search keyword
pageoptional	integer	Page number (default: `1`)
langoptional	string	Language code (default: `id`)

Example

curl -H "X-API-Key: YOUR_KEY" "{{BASE}}/api/goodshort/search?query=cinta&lang=id"

query

page

lang

GET /api/goodshort/detail?id={id}&lang={lang} API Key

Get detailed information about a specific drama, including episode list with HLS URLs.

Parameter	Type	Description
idrequired	string	Book/drama ID from search or trending results
langoptional	string	Language code (default: `id`)

Example

curl -H "X-API-Key: YOUR_KEY" "{{BASE}}/api/goodshort/detail?id=31001397636&lang=id"

lang

GET /api/goodshort/episode?id={id}&ep={ep}&lang={lang} API Key

Returns a single episode with HLS URL and multi-quality options (540p, 720p, 1080p). All episodes are unlocked.

Parameter	Type	Description
idrequired	string	Book/drama ID
eprequired	integer	Episode number (1-based)
langoptional	string	Language code (default: `id`)

Example

curl -H "X-API-Key: YOUR_KEY" "{{BASE}}/api/goodshort/episode?id=31001397636&ep=1&lang=id"

ep (episode)

lang

GET /api/goodshort/allepisode?id={id}&lang={lang} API Key

Returns all episodes with HLS URLs, multi-quality options, and cover images. All episodes unlocked including paid ones.

Parameter	Type	Description
idrequired	string	Book/drama ID
langoptional	string	Language code (default: `id`)

Example

curl -H "X-API-Key: YOUR_KEY" "{{BASE}}/api/goodshort/allepisode?id=31001397636&lang=id"

lang

GET /api/goodshort/hls?bookId={bookId}&chapterId={chapterId}&q={q}&lang={lang} API Key

HLS m3u8 playlist with inline AES-128 key (base64 data URI) and CDN-direct TS segments. Zero server bandwidth. Requires API key authentication.

Parameter	Type	Description
bookIdrequired	string	Book/drama ID
chapterIdrequired	string	Chapter/episode ID (from episode response)
qoptional	string	Quality: `540p`, `720p`, `1080p` (default: `720p`)
langoptional	string	Language code (default: `in`)

Example

curl -H "X-API-Key: YOUR_KEY" "{{BASE}}/api/goodshort/hls?bookId=31001397636&chapterId=18842721&q=720p&lang=in"

AES-128 HLS Encryption Guide

How GoodShort Video Encryption Works

AES-128-CBC

GoodShort encrypts all HLS video streams using AES-128-CBC encryption. Unlike standard HLS encryption where the key URL is a remote endpoint, GoodShort uses a custom local://offline-key/... URI scheme that cannot be resolved by standard HLS players.

💡

Our API handles this for you! The /api/goodshort/hls endpoint automatically performs the RSA key exchange, decrypts the AES key, and rewrites the m3u8 so any HLS player can play it directly. This guide explains the underlying process for reference.

The problem: GoodShort CDN serves m3u8 playlists with URI="local://offline-key/<bookId>" — a proprietary URI scheme that only the official app understands. Without the correct AES key, you get a 9-second preview, not the full video.

The solution: Our server performs an RSA-2048 key exchange with GoodShort's API to obtain the AES key, then rewrites the m3u8 to embed the key inline as a data: URI, making it compatible with any standard HLS player.

Complete Flow: Key Exchange → HLS Playback

Architecture

┌─────────────────── KEY EXCHANGE (one-time, cached) ────────────────────┐
│
│  Step 1: Generate ephemeral RSA-2048 key pair
│          privateKey, publicKey = RSA.GenerateKey(2048)
│
│  Step 2: Send public key to GoodShort API
│          POST app/sec/bonus
│          Body: { "bonus": "base64(DER-encoded publicKey)" }
│
│  Step 3: Server returns encrypted AES key
│          Response: { "data": { "payload": "base64(RSA-encrypted AES key)" } }
│
│  Step 4: Decrypt with RSA-OAEP (SHA-256)
│          aesKey = RSA.DecryptOAEP(SHA256, privateKey, payload)
│          Result: 16-byte raw AES key → base64 encode → videoKey
│
└────────────────────────────────────────────────────────────────────────┘

┌─────────────────── M3U8 REWRITING (per episode) ──────────────────────┐
│
│  Step 5: Fetch CDN m3u8
│          GET https://v3.goodshort.com/mts/books/.../index.m3u8
│
│  Step 6: Rewrite key URI
│          URI="local://offline-key/31001397636"
│           ↓ replace with ↓
│          URI="data:text/plain;base64,<videoKey>"
│
│  Step 7: Make TS segments absolute
│          seg-00001.ts → https://v3.goodshort.com/mts/books/.../seg-00001.ts
│
│  Step 8: Serve to client → HLS player decrypts TS with inline key
│          Content-Type: application/vnd.apple.mpegurl
│
└────────────────────────────────────────────────────────────────────────┘

Step 1 — RSA-2048 Key Exchange

Key Derivation

1 Generate ephemeral RSA-2048 key pair

Create a fresh 2048-bit RSA key pair for each key exchange. The private key is kept in memory; the public key is sent to the server.

// Go
privKey, _ := rsa.GenerateKey(rand.Reader, 2048)
pubDER, _ := x509.MarshalPKIXPublicKey(&privKey.PublicKey)
pubB64 := base64.StdEncoding.EncodeToString(pubDER)

// Python
from cryptography.hazmat.primitives.asymmetric import rsa, padding
from cryptography.hazmat.primitives import serialization, hashes
import base64

private_key = rsa.generate_private_key(public_exponent=65537, key_size=2048)
pub_der = private_key.public_key().public_bytes(
    serialization.Encoding.DER,
    serialization.PublicFormat.SubjectPublicKeyInfo
)
pub_b64 = base64.b64encode(pub_der).decode()

// JavaScript (Node.js)
const { generateKeyPairSync } = require('crypto');
const { publicKey, privateKey } = generateKeyPairSync('rsa', {
  modulusLength: 2048,
  publicKeyEncoding: { type: 'spki', format: 'der' },
  privateKeyEncoding: { type: 'pkcs8', format: 'pem' }
});
const pubB64 = publicKey.toString('base64');

2 POST public key to app/sec/bonus

Send the base64-encoded DER public key to GoodShort's API. This requires an authenticated session (login first).

// Request
POST https://api.goodshort.tv/app/sec/bonus
Content-Type: application/json
Authorization: Bearer <session_token>

{
  "bonus": "MIIBIjANBgkqhki...base64 DER public key..."
}

// Response
{
  "code": 0,
  "data": {
    "payload": "kJ3d7f2a...base64 RSA-encrypted AES key..."
  }
}

3 Decrypt the payload with RSA-OAEP (SHA-256)

The server RSA-encrypts a 16-byte AES key using your public key with OAEP padding and SHA-256 hash. Decrypt with your private key to get the raw AES-128 key.

// Go
enc, _ := base64.StdEncoding.DecodeString(payload)
aesKey, _ := rsa.DecryptOAEP(sha256.New(), rand.Reader, privKey, enc, nil)
// aesKey is 16 bytes (AES-128)
videoKey := base64.StdEncoding.EncodeToString(aesKey)

// Python
enc = base64.b64decode(payload)
aes_key = private_key.decrypt(
    enc,
    padding.OAEP(
        mgf=padding.MGF1(algorithm=hashes.SHA256()),
        algorithm=hashes.SHA256(),
        label=None
    )
)
# aes_key is 16 bytes
video_key = base64.b64encode(aes_key).decode()

// JavaScript (Node.js)
const crypto = require('crypto');
const enc = Buffer.from(payload, 'base64');
const aesKey = crypto.privateDecrypt({
  key: privateKey,
  padding: crypto.constants.RSA_PKCS1_OAEP_PADDING,
  oaepHash: 'sha256'
}, enc);
// aesKey is 16 bytes (Buffer)
const videoKey = aesKey.toString('base64');

✓ Result: A 16-byte AES-128 key, base64-encoded. This key is universal — it works for ALL books/episodes on GoodShort, not per-book. Cache it and reuse.

Step 2 — M3U8 Playlist Rewriting

HLS Transform

The CDN m3u8 playlist uses a proprietary local:// key URI. You need to rewrite it to embed the AES key inline and make TS segment URLs absolute.

✗ Original CDN M3U8 (won't play)

#EXTM3U
#EXT-X-VERSION:3
#EXT-X-TARGETDURATION:10
#EXT-X-MEDIA-SEQUENCE:0
#EXT-X-KEY:METHOD=AES-128,URI="local://offline-key/31001397636"
#EXTINF:9.76,
seg-00001.ts
#EXTINF:9.80,
seg-00002.ts
#EXTINF:8.44,
seg-00003.ts
#EXT-X-ENDLIST

✓ Rewritten M3U8 (any HLS player)

#EXTM3U
#EXT-X-VERSION:3
#EXT-X-TARGETDURATION:10
#EXT-X-MEDIA-SEQUENCE:0
#EXT-X-KEY:METHOD=AES-128,URI="data:text/plain;base64,<videoKey>"
#EXTINF:9.76,
https://v3.goodshort.com/mts/books/.../seg-00001.ts
#EXTINF:9.80,
https://v3.goodshort.com/mts/books/.../seg-00002.ts
#EXTINF:8.44,
https://v3.goodshort.com/mts/books/.../seg-00003.ts
#EXT-X-ENDLIST

A Replace the key URI

Find all URI="local://offline-key/..." patterns and replace with URI="data:text/plain;base64,<videoKey>". The HLS player will decode the base64 value and use it as the AES-128 decryption key for all TS segments.

// Regex pattern
URI="local://offline-key/[^"]*"
↓ replace with ↓
URI="data:text/plain;base64,{videoKey}"

B Make TS segment URLs absolute

Relative segment paths (e.g., seg-00001.ts) must be resolved to absolute CDN URLs. GoodShort uses two CDN path patterns: /mts/books/ and /ets/books/. Always rewrite to https://v3.goodshort.com.

// For each non-comment, non-empty line in the m3u8:
if (!line.startsWith("#") && !line.startsWith("http")) {
  line = baseURL + "/" + line;  // make absolute
}
// Rewrite CDN domain:
if (line.includes("/mts/books/") || line.includes("/ets/books/")) {
  line = "https://v3.goodshort.com" + line.substring(line.indexOf("/mts/"));
}

Complete Client Implementation

Full Example

Full working example: fetch an episode via our API, get the HLS URL, and play it in any HLS player.

# 1. Get episode data (includes hlsUrl)
curl -H "X-API-Key: YOUR_KEY" \
  "{{BASE}}/api/goodshort/episode?id=31001397636&ep=1&lang=id"

# Response includes:
# {
#   "videoUrl": "https://v3.goodshort.com/mts/books/.../index.m3u8",
#   "hlsUrl": "{{BASE}}/api/goodshort/hls?bookId=...&chapterId=..."
# }

# 2. Use hlsUrl directly — our server handles key exchange + rewriting
#    The returned m3u8 has inline AES key + absolute CDN TS URLs
#    → Feed to any HLS player (hls.js, ExoPlayer, AVPlayer, ffplay)

# 3. Or download with ffmpeg (requires headers or api_key query param):
ffmpeg -headers "X-API-Key: YOUR_KEY" -i "{{BASE}}/api/goodshort/hls?bookId=31001397636&chapterId=18842721&q=1080p&lang=in" \
  -c copy output.mp4

⚠

Note about videoUrl vs hlsUrl:

videoUrl — raw CDN m3u8 with local://offline-key URI. Cannot be played directly.
hlsUrl — our HLS URL that serves the rewritten m3u8 with inline AES key. Play directly.

Technical Reference

Specifications

Property	Value	Description
Algorithm	AES-128-CBC	Standard HLS AES-128 encryption (RFC 8216 §5.2)
Key Size	16 bytes (128 bits)	Single key for all segments
IV	Segment sequence number	Default HLS IV derivation (big-endian segment index)
Key Exchange	RSA-2048 OAEP SHA-256	Ephemeral key pair per exchange
Key Scope	Universal (all books)	One key works for all episodes across all dramas
Key Endpoint	`app/sec/bonus`	Requires authenticated session
CDN Domain	`v3.goodshort.com`	TS segments and m3u8 playlists
CDN Paths	`/mts/books/`, `/ets/books/`	Two path patterns for video segments
Quality Options	540p, 720p, 1080p	Selectable via `q` parameter in HLS URL

Why Default Playback Shows Only ~9 Seconds

Common Issue

If you try to play a GoodShort m3u8 directly (without key rewriting), most HLS players will:

1. Fail to resolve local://offline-key/... — the URI scheme is proprietary and not HTTP-accessible

2. Skip the #EXT-X-KEY line and play unencrypted — resulting in garbled video (green/purple artifacts)

3. Only play the first TS segment (~9 seconds) before the player gives up or crashes

✓ Solution: Use our /api/goodshort/hls endpoint which returns a properly rewritten m3u8 with the AES key embedded as a data: URI. This produces full-length video playback compatible with any HLS player, not just the 9-second preview.

GoodShort — Api-Dracin Multi-Source Drama Streaming API