Results 1 to 3 of 3

Thread: Wowza Secure Token

  1. #1
    Join Date
    Dec 2015
    Posts
    3

    Question Wowza Secure Token

    Hi,

    I used this article to implement Wowza Secure token on my server and it works as expected. However the article said that "Each connection is protected by a random single-use key and a password (shared secret)." I do not find that to be the case. If a user does a view source on my page and copies the stream url, he can easily play it back using other players. Is it possible to make the stream url truly singly use, so that if one connection has been established using that url, all other requests using the same stream url will be denied.

    -Avneesh

  2. #2
    Join Date
    Dec 2015
    Posts
    3

    Default

    FYI I am using JWPlayer on the client side to play the stream.

    -Avneesh

  3. #3
    Join Date
    Jun 2012
    Posts
    722

    Default

    Hello,

    You are correct, the single-use word is wrongly used in the sentence you pointed out. I will contact our documentation team and have this corrected.
    However, only the playback client using the correct playback URL can play the protected streams. It is true that a more technical user can find the secure token playback URL, but you can always restrict the playback to a specific Client IP. Since you are generating the secure token dynamically, you can include the IP address of the user loading your player into the string used for hashing. In the Secure Token settings, you can set to use the Client IP in the hash generation as well on the server side.
    This way, if a user is sharing the playback URL generated for his client IP, the same playback URL won't work for a different client since it will have a different IP address.

    Also, you can specify a start and end time for how long the secure token key is valid. If a user requests the stream out of the validity period, his playback will fail.

    Zoran

Similar Threads

  1. Secure Token for Client not working on Wowza on EC2
    By briand123 in forum Wowza Media Server 3 for Amazon EC2 Discussion
    Replies: 17
    Last Post: 12-03-2012, 09:27 AM
  2. Secure Token for playback Secure URL params for publishing.
    By Pandepoulus in forum AddOn: Other AddOns
    Replies: 6
    Last Post: 06-18-2012, 04:56 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •