# Incoming Security \> RTMP Publishing \> Require password authentication

**URL:** https://community.wowza.com/t/incoming-security-rtmp-publishing-require-password-authentication/44265
**Category:** Wowza Streaming Engine
**Created:** [December 15, 2014, 9:23pm UTC](https://community.wowza.com/t/incoming-security-rtmp-publishing-require-password-authentication/44265 "2014-12-15T21:23:52Z")
**Posts on this page:** 9
**Page:** 1

<div class="post-metadata">

### Author: ![pork\_pork](https://avatars.discourse-cdn.com/v4/letter/p/a4c791/32.png) [@pork\_pork](https://community.wowza.com/u/pork_pork)
#### Post date: [December 15, 2014, 9:23pm UTC](https://community.wowza.com/t/incoming-security-rtmp-publishing-require-password-authentication/44265/1 "2014-12-15T21:23:52Z")

</div>

Hi, how to authenticate (Incoming Security \> RTMP Publishing \> Require password authentication) using AS3?

---

<div class="post-metadata">

### Author: ![sal\_jefferson](https://avatars.discourse-cdn.com/v4/letter/s/6de8d8/32.png) [@sal\_jefferson](https://community.wowza.com/u/sal_jefferson)
#### Post date: [December 16, 2014, 6:20am UTC](https://community.wowza.com/t/incoming-security-rtmp-publishing-require-password-authentication/44265/2 "2014-12-16T06:20:22Z")

</div>

Hello there and welcome to the Wowza support forum.

I’m not exactly sure what you are asking, but we have several security options. The MediaSecurity package has ModuleRTMPAuthenticate:

[Media security overview](https://www.wowza.com/docs/media-security-overview%28SecureToken-RTMP-RTSP-Authentication-and-more)

Or these similar options:

[How to do file-based authentication with RTMP client and credentials in querystring of the RTMP URL (ModuleOnConnectAuthenticate2)](https://www.wowza.com/docs/how-to-do-file-based-rtmp-authentication-with-url-query-strings-onconnectauthenticate2)

[How to configure security using Wowza Streaming Engine Manager (RTMP Publishing)](https://www.wowza.com/docs/how-to-configure-security-using-wowza-streaming-engine-manager#rtmp_publishing)

[How to do file-based authentication with RTMP client with credentials passed as parameters of NetConnection connect (ModuleOnConnectAuthenticate)](https://www.wowza.com/docs/how-to-do-file-based-rtmp-authentication-with-netconnection-connect-onconnectauthenticate)

If you are developing something or extending one of the above, you can get userAgent with client.getFlashVer() in onConnect, so you can tell if the client is an encoder that you want to allow.

Kind regards,

Salvadore

---

<div class="post-metadata">

### Author: ![sal\_jefferson](https://avatars.discourse-cdn.com/v4/letter/s/6de8d8/32.png) [@sal\_jefferson](https://community.wowza.com/u/sal_jefferson)
#### Post date: [December 16, 2014, 9:48am UTC](https://community.wowza.com/t/incoming-security-rtmp-publishing-require-password-authentication/44265/3 "2014-12-16T09:48:34Z")

</div>

Wowza provides the source code for the different players that ship with each install. Take a look at the source code in [install-dir]/examples/LiveVideoStreaming/FlashRTMPPlayer/Live.flv and|or [install-dir]/examples/VideoOnDemandStreaming/FlashRTMPPlayer/VOD.flv

I hope this answers your question.

Kind regards,

Salvadore

---

<div class="post-metadata">

### Author: ![sal\_jefferson](https://avatars.discourse-cdn.com/v4/letter/s/6de8d8/32.png) [@sal\_jefferson](https://community.wowza.com/u/sal_jefferson)
#### Post date: [December 18, 2014, 9:50am UTC](https://community.wowza.com/t/incoming-security-rtmp-publishing-require-password-authentication/44265/4 "2014-12-18T09:50:07Z")

</div>

Hello. I am sorry, I researched this a little further and from what I can tell, RTMP authentication is not supported in Flash applications.

Again, there are alternatives:

[How to do file-based authentication with RTMP client and credentials in querystring of the RTMP URL (ModuleOnConnectAuthenticate2)](https://www.wowza.com/docs/how-to-do-file-based-rtmp-authentication-with-url-query-strings-onconnectauthenticate2)

Example AS to make authenticated RTMP connection:

```auto
netconnection.connect("rtmp://[wowza-address]/[app-name]?user1&pass1");

```

[How to do file-based authentication with RTMP client with credentials passed as parameters of NetConnection connect (ModuleOnConnectAuthenticate)](https://www.wowza.com/docs/how-to-do-file-based-rtmp-authentication-with-netconnection-connect-onconnectauthenticate)

Example AS to create authenticated connection:

```auto
var username:String = "user1";
var password = "pass1";
netconnection.connect("rtmp://[wowza-address]/yourApp",username,password);

```

You will find more code examples in the comments of these articles.

**NOTE: These modules are compatible with the Wowza Streaming Engine Incoming Security \> RTMP Publishing \> Require Password Authentication setting. If you use this module, the RTMP Publishing setting must be set to Open.**

Kind regards,

Salvadore

---

<div class="post-metadata">

### Author: ![Paul\_Shields](https://sea2.discourse-cdn.com/flex002/user_avatar/community.wowza.com/paul_shields/32/390_2.png) [@Paul\_Shields](https://community.wowza.com/u/Paul_Shields)
#### Post date: [March 17, 2016, 3:16pm UTC](https://community.wowza.com/t/incoming-security-rtmp-publishing-require-password-authentication/44265/5 "2016-03-17T15:16:47Z")

</div>

Hi,

The file-based query parameter authentication is basically a workaround for publishers that can’t use the correct RTMP authentication process, so Incoming Security for RTMP does need to be set to open to allow this to happen. However, no publisher will be able to connect unless they pass valid credentials via the query parameters, e.g.

```auto
rtmp://[wowza-ip]:1935/live/myStream?user1&pass1

```

Paul

---

<div class="post-metadata">

### Author: ![pork\_pork](https://avatars.discourse-cdn.com/v4/letter/p/a4c791/32.png) [@pork\_pork](https://community.wowza.com/u/pork_pork)
#### Post date: [December 16, 2014, 11:09am UTC](https://community.wowza.com/t/incoming-security-rtmp-publishing-require-password-authentication/44265/6 "2014-12-16T11:09:47Z")

</div>

Hello, salvadore!

How do I use the security of RTMP Publishing with ActionScript?

---

<div class="post-metadata">

### Author: ![pork\_pork](https://avatars.discourse-cdn.com/v4/letter/p/a4c791/32.png) [@pork\_pork](https://community.wowza.com/u/pork_pork)
#### Post date: [December 16, 2014, 5:47pm UTC](https://community.wowza.com/t/incoming-security-rtmp-publishing-require-password-authentication/44265/7 "2014-12-16T17:47:10Z")

</div>

The code is in the examples has no implementation of “RTMP Publishing” with “Require password authentication”.

---

<div class="post-metadata">

### Author: ![pork\_pork](https://avatars.discourse-cdn.com/v4/letter/p/a4c791/32.png) [@pork\_pork](https://community.wowza.com/u/pork_pork)
#### Post date: [December 17, 2014, 2:37pm UTC](https://community.wowza.com/t/incoming-security-rtmp-publishing-require-password-authentication/44265/8 "2014-12-17T14:37:57Z")

</div>

> The code is in the examples has no implementation of “RTMP Publishing” with “Require password authentication”.

salvadore?

---

<div class="post-metadata">

### Author: ![Gerd\_Koetje](https://avatars.discourse-cdn.com/v4/letter/g/7bcc69/32.png) [@Gerd\_Koetje](https://community.wowza.com/u/Gerd_Koetje)
#### Post date: [March 12, 2016, 4:07pm UTC](https://community.wowza.com/t/incoming-security-rtmp-publishing-require-password-authentication/44265/9 "2016-03-12T16:07:36Z")

</div>

this will fail hard when combining it with source security

no solutions for this?

when u put this to open all other source protection will allow all.
