Wowza Live Stream - Security Token & JW Player 4.4

26 replies [Last post]

Posted: Fri, 2009-05-01 13:05 John

Hi,

We use the Wowza Server - and have added the secure token and secureURLParams

We are able to connect with the Flash Media Encoder

But we are not sure how to connect to the stream -

Any help would be great

John

<body>
<div id="container"></div>
<script type='text/javascript'>
var s1 = new SWFObject('player.swf','ply','640','500','9','#ffffff');
s1.addParam('allowfullscreen','true');
s1.addParam('allowscriptaccess','always');
s1.addParam('wmode','opaque');
s1.addVariable('file', 'streamname');
s1.addVariable('streamer', 'rtmp://wowza-server/live_secure/');
s1.addVariable('type', 'video');
s1.write('container');
</script>
</body>

Posted: Mon, 2009-05-04 10:43 John

Hi,

We are still working on this - if anyone has some ideas or has the secure token working - could you help us out.

Thanks

Posted: Mon, 2009-05-04 10:56 Jimb

@John,

Looking at your code snippet I don't see the "token" flashvar. It needs to be the same as you have in your Wowza application config.xml

I don't like to reveal either the rtmp streamer or token in my html or xml code so I have set those defaults in the player.as file and recompiled the player

Jimb

Posted: Wed, 2009-05-06 08:45 John

Thanks Jimb

Here is the issue -

We have locked down the Wowza sever - the only way to connect with the Flash Media Encoder is through a doConnect=[password] & doPlay=[password]

With our JW Player we us use doConnect=[password] to connect to the live stream.

The secure token is not installed - So when should we use the secure token?

John

Posted: Wed, 2009-05-06 08:53 Jimb

Hi John

It's yet another layer of security and certainly can't hurt you. If you read the comments from Wowza I think they'll explain it better than I would. It takes less than about 3 minutes to install the feature.

In addition I also encrypt my player.swf and lock it to play only on my domain. I'm sure you understand that nothing is foolproof but combining securetoken, allowdomains, password controled access, and locking the player to 1 domain do keep the risks to a minimum.

Regards - Jimb

Posted: Wed, 2009-05-06 09:39 John

Hi Jim

Thanks for the quick reply. And thanks for helping to clear this - this all makes sense now.

I have added the token following the instruction on Wowza Forum

http://www.wowzamedia.com/forums/showthread.php?t=1665

I'll assume this is still relevant to the 4.4 player?

Using the code in my first post, would you mind giving an example of where the token should go in the code?

Thanks Again

John

Posted: Wed, 2009-05-06 09:50 Jimb

Sure. If you open the player.fla and player.as files in Adobe's Flash CS3 you can hardcode your rtmp stream and securetoken into the player so you don't have to reveal them in your html or xml code. They are in the distribution file you downloaded when you got the player.

Here's a link that will show you what needs to be done. the 2 items are STREAMER and TOKEN and are located at approximately line 29 and 70 depending on the version of the player you have.http://mymail.playourvideo.net/smovl.htm?id=myflashvarstweak.mp4Regards - Jimb

Posted: Wed, 2009-05-06 11:03 John

Great Video Jim!

Do I need to change the RTMP.as file as well?

I am also getting a 2032 error?

Any ideas?

Thanks

John

Posted: Wed, 2009-05-06 11:17 Jimb

John,

I did not need to make any changes other than what was contained in the video. Did you remove the STREAMER line form your player creation code?

Are you using a playlist?

Does you streamer in the player.as look something like this?'rtmp://???.???.???.???/securetoken/'or'rtmp://yourdomainname/securetoken/'Jimb

Posted: Wed, 2009-05-06 11:20 John

Jim,

Thanks -

Just to be clear securetoken will be changed to the name of my secure token defined in the XML?

John

Posted: Wed, 2009-05-06 11:36 Jimb

Yes it will. securetoken is the application instance name and in it's config folder you have a file named application.xml. In application.xml you should have enterd a value exactly equal to what you place in the player.as file.

Jimb

Posted: Wed, 2009-05-06 15:04 John

We just realized that we had no added the

‘wms-plugin-security.jar’

Posted: Fri, 2009-05-08 11:25 John

Jim

Hi -

I can not get the sure token to work at all -

Do you have any suggestions?

When I update the Player.as file - I just need to Publish it?

Again I appreciate all the help

John

Posted: Fri, 2009-05-08 12:03 Jimb

You need to publish it AND upload it (the new player.swf file) to your website :)

Regards - Jimb

Posted: Fri, 2009-05-08 13:54 Jimb

@john

If you are still having trouble and are willing to Email me your RTMP SERVER'S STREAM ADDRESS & your SECURE TOKEN I will compile you a working player.swf This suggestion assumes you are making no other changes to the source code. Just click the link on my web site to send me a text message and provide me with your Email address. When I get it compiled for you I'll send you a download link.

Regards - Jimb

Posted: Sun, 2009-05-17 14:45 Emmanuel

@jimb

Writing your TOKEN & STREAMER inside the player.as is not even enough to hide and secure them.
There are free add-on in Mozilla that shows them in order to download your video. Anyone can access those add-on so don't need to be an hacker to leech easy.

The only protection would be to change your token often enough with a small script to prevent leeching.

Posted: Sat, 2009-10-31 03:05 sivaprasad

hi
how to connect jw player to my web page and give different
formates of videos and audio songs.
and how to do the live video striming to my web page.
and wat are the requirement to do this work.
give me some responce to my mail suryalayaprasad@gmail.com

Posted: Tue, 2010-04-06 04:19 Viper

hello,

anyone can help me please, I don´t find the lines where I can set the streamer and securetoken vars inside the player (hardcoded)

I can compile the player 5.2.919 without errors, I just need the location, lines of code to set these vars.

thx

Posted: Tue, 2010-04-06 05:37 Viper

found it here:
http://www.wowzamedia.com/forums/showthread.php?t=7614

Posted: Mon, 2011-01-24 16:56 TZ

Hi, Can the free version of JW Player allow you to insert the Wowza Secure Token code?

Posted: Mon, 2011-01-24 17:47 Ethan LongTail

Yep, you can download the free source and do it yourself!

Posted: Mon, 2011-01-24 18:24 TZ

Thanks for your reply but Jimb in this article mentioned, "open the player.fla and player.as files in Adobe's Flash CS3 you can hardcode your rtmp stream and securetoken into the player." I downloade the free version and I don't see any file with FLA extension. Are you indicating that all i need is the 'player.swf' to insert the secure token key?? Thanks!

Posted: Tue, 2011-01-25 15:06 Ethan LongTail

@TZ - His note is outdated, and for the old version of the player. The new version of the player was compiled with the Flex SDK, and does not use a FLA.

Posted: Wed, 2011-05-11 20:22 Enrique Pizarro

Hi, can anyone tell me why would you secure a live stream broadcasting?

Posted: Thu, 2011-05-12 14:47 Ethan LongTail

http://www.longtailvideo.com/support/blog/13088/securing-your-content

Posted: Tue, 2011-11-01 05:46 Manuel

someone speak Spanish? I need support I pay.
my email is manuel @ decaos . com

Posted: Tue, 2011-11-01 13:18 Ethan LongTail

Sorry, we don't speak Spanish :X

Wowza Live Stream - Security Token & JW Player 4.4

Post new comment

JW Player

AddOns

AdSolution

Bits on the Run

Open Video Ads

Company