I have a problem with a live stream player, generated with the wowza player builder ( https://player.wowza.com/builder ).
If I add the withCredentials value, the player fails to load the stream and I´m getting a CORS error:
Access to XMLHttpRequest at ‘https://cdn3.wowza.com/1/xxxxxxxx/xxxxxxx/hls/live/playlist.m3u8’ from origin ‘https://player.wowza.com’ has been blocked by CORS policy: The value of the ‘Access-Control-Allow-Origin’ header in the response must not be the wildcard ‘*’ when the request’s credentials mode is ‘include’. The credentials mode of requests initiated by the XMLHttpRequest is controlled by the withCredentials attribute.
This happens in the player preview and with the player on my own domain/webspace.
I guess, this is an error because it should at least work on the player generator page.
My goal is the secure the player with a security token.