How to use "Secure Token Target"?

[Cecil_Law]

Hi All,

I want to add Secure Token to protect my video, and found the solution. (https://www.wowza.com/community/questions/3575/article-how-to-protect-streaming-using-securetoken.html)

Now I can play back the video, yeah!

After that I found a new key word “Secure Token target” in other page

(https://www.wowza.com/docs/how-to-configure-security-using-wowza-streaming-engine-manager#secure_connection)

I added this in my Application.xml

securitySecureTokenTarget</Name

play,create

String

After restart application, i can’t playback anymore…

from log i found this:

2018-03-19 11:11:04 HKT comment server INFO 200 - [live/definst]SecureTokenDef:Request from client IP address, 192.168.9.254, doesn’t match base URL, live/test1 defaultVHost live definst 256685.69 - - - - - - - - - - - - - - - - - - - - - - - - -

2018-03-19 11:11:04 HKT comment session INFO 403 1432081748 ModuleCoreSecurity#SecureTokenStreamActions.onPlay[live/definst/test1]: Secure Token Failed. rejectStreamPlay: clientId:1432081748 defaultVHost live definst 0.195 [any] 1935 rtmp://192.168.9.204/live 192.168.9.254 rtmp http://192.168.9.204:8088/enginemanager/applications/test/live/FlashRTMPPlayer/live.swf WIN 29,0,0,113 1432081748 3715 3455-- - - - - - - - - - - - rtmp://192.168.9.204/live -

when remove secureTokenTarget, everything is ok again.

I want to know what is Secure Token Target? How to use?

or is it necessary? or just set secure token is secure?

Thx

[AMAN_LOS]

Tag that outputs SecureToken for DSRF countermeasure.It generates a hidden tag for the form tag.If you set any attribute for this tag, you will be used to seed to generate a token attribute keys and values.And do check that the run-time verification of the token that was used to seed any attribute keys and values, including the seed has not changed from the request parameters.