Vidu

Separate Vidu-native APIs from this site's route

Vidu provides asynchronous text-to-video, image-to-video, subject reference, first/last-frame, audio, lip-sync, and extension workflows. Direct access uses Authorization: Token <API_KEY>. This site's /v1/videos is an adapted unified job route using this site's token. Do not mix native /ent/v2/* paths or fields into the gateway contract.

task_id and the state machine

Creation returns task_id and an initial state. Query creations with that ID: created means accepted, queueing is waiting, processing is generating, and success or failed is terminal. Read creations[] only after success; on failure preserve err_code, model, credits, and a redacted request. Poll with bounded backoff, a total deadline, and cancellation.

Verify callback HMAC

A reachable callback_url is not enough to trust a callback. The documented signature is Base64(HMAC-SHA256(TokenSecret, signingString)) and is carried in headers including X-HMAC-SIGNATURE. Rebuild the string from the exact method, URI, query, Date, and signed headers in documented order, compare in constant time, and validate Date plus x-request-nonce against replay. Callbacks can retry, so state writes must be idempotent.

Result URLs last only 24 hours

Generated url and cover_url values returned by task retrieval are valid for 24 hours, not permanent asset addresses. After success, stream the media server-side into object storage, validate type and size, then store your own URL. Retry download failures with bounds while the source URL is still valid.

Cost, queues, and safety

Model, duration, resolution, audio, and off-peak mode consume different credits. Excess work can enter queueing and is not necessarily failed. Validate asset format, size, aspect ratio, and rights before submission, and use a business idempotency key to prevent duplicate charges. Obtain consent for people, faces, voices, brands, and copyrighted material, with moderation and commercial-use records.