Wowza Live Stream - Security Token & JW Player 4.4
May. 01, 2009John
Hi,
We use the Wowza Server - and have added the secure token and secureURLParams
We are able to connect with the Flash Media Encoder
But we are not sure how to connect to the stream -
Any help would be great
John
<body>
<div id="container"></div>
<script type='text/javascript'>
var s1 = new SWFObject('player.swf','ply','640','500','9','#ffffff');
s1.addParam('allowfullscreen','true');
s1.addParam('allowscriptaccess','always');
s1.addParam('wmode','opaque');
s1.addVariable('file', 'streamname');
s1.addVariable('streamer', 'rtmp://wowza-server/live_secure/');
s1.addVariable('type', 'video');
s1.write('container');
</script>
</body>
May. 04, 2009John
Hi,
We are still working on this - if anyone has some ideas or has the secure token working - could you help us out.
Thanks
May. 04, 2009Jimb
@John,
Looking at your code snippet I don't see the "token" flashvar. It needs to be the same as you have in your Wowza application config.xml
I don't like to reveal either the rtmp streamer or token in my html or xml code so I have set those defaults in the player.as file and recompiled the player
Jimb
May. 06, 2009John
Thanks Jimb
Here is the issue -
We have locked down the Wowza sever - the only way to connect with the Flash Media Encoder is through a doConnect=[password] & doPlay=[password]
With our JW Player we us use doConnect=[password] to connect to the live stream.
The secure token is not installed - So when should we use the secure token?
John
May. 06, 2009Jimb
Hi John
It's yet another layer of security and certainly can't hurt you. If you read the comments from Wowza I think they'll explain it better than I would. It takes less than about 3 minutes to install the feature.
In addition I also encrypt my player.swf and lock it to play only on my domain. I'm sure you understand that nothing is foolproof but combining securetoken, allowdomains, password controled access, and locking the player to 1 domain do keep the risks to a minimum.
Regards - Jimb
May. 06, 2009John
Hi Jim
Thanks for the quick reply. And thanks for helping to clear this - this all makes sense now.
I have added the token following the instruction on Wowza Forum
http://www.wowzamedia.com/forums/showthread.php?t=1665
I'll assume this is still relevant to the 4.4 player?
Using the code in my first post, would you mind giving an example of where the token should go in the code?
Thanks Again
John
May. 06, 2009Jimb
Sure. If you open the player.fla and player.as files in Adobe's Flash CS3 you can hardcode your rtmp stream and securetoken into the player so you don't have to reveal them in your html or xml code. They are in the distribution file you downloaded when you got the player.
Here's a link that will show you what needs to be done. the 2 items are STREAMER and TOKEN and are located at approximately line 29 and 70 depending on the version of the player you have.http://mymail.playourvideo.net/smovl.htm?id=myflashvarstweak.mp4Regards - Jimb
May. 06, 2009John
Great Video Jim!
Do I need to change the RTMP.as file as well?
I am also getting a 2032 error?
Any ideas?
Thanks
John
May. 06, 2009Jimb
John,
I did not need to make any changes other than what was contained in the video. Did you remove the STREAMER line form your player creation code?
Are you using a playlist?
Does you streamer in the player.as look something like this?'rtmp://???.???.???.???/securetoken/'or'rtmp://yourdomainname/securetoken/'Jimb
May. 06, 2009John
Jim,
Thanks -
Just to be clear securetoken will be changed to the name of my secure token defined in the XML?
John
May. 06, 2009Jimb
Yes it will. securetoken is the application instance name and in it's config folder you have a file named application.xml. In application.xml you should have enterd a value exactly equal to what you place in the player.as file.
Jimb
May. 06, 2009John
We just realized that we had no added the
‘wms-plugin-security.jar’
May. 08, 2009John
Jim
Hi -
I can not get the sure token to work at all -
Do you have any suggestions?
When I update the Player.as file - I just need to Publish it?
Again I appreciate all the help
John
May. 08, 2009Jimb
You need to publish it AND upload it (the new player.swf file) to your website 
Regards - Jimb
May. 08, 2009Jimb
@john
If you are still having trouble and are willing to Email me your RTMP SERVER'S STREAM ADDRESS & your SECURE TOKEN I will compile you a working player.swf This suggestion assumes you are making no other changes to the source code. Just click the link on my web site to send me a text message and provide me with your Email address. When I get it compiled for you I'll send you a download link.
Regards - Jimb
May. 17, 2009Emmanuel
@jimb
Writing your TOKEN & STREAMER inside the player.as is not even enough to hide and secure them.
There are free add-on in Mozilla that shows them in order to download your video. Anyone can access those add-on so don't need to be an hacker to leech easy.
The only protection would be to change your token often enough with a small script to prevent leeching.
Oct. 31, 2009sivaprasad
hi
how to connect jw player to my web page and give different
formates of videos and audio songs.
and how to do the live video striming to my web page.
and wat are the requirement to do this work.
give me some responce to my mail suryalayaprasad@gmail.com
Search the Forums
Forum Categories
Support
Here are some helpful links to learn more about the JW Player™:
- Setup Wizard writes player code for you.
- Embedding Flash Tutorial shows how to embed the JW Player™ in your site.
- Forum provides access to over two million JW Player™ users.
- Developers Center (Wiki) explains everything from flashvars to skinning.
- Do you need custom Flash work? Email us.
Monetize Your Video
Earn money with ads from LongTail's AdSolution. Watch our demos and sign up now!
Why Buy a License?
If you don’t buy a commercial license, you cannot use a JW Player™ on (i) a site that has ads; (ii) a corporate site; or a (iii) CMS. Our licenses are very inexpensive, so what are you waiting for? Buy a license today.
