# More secure authentication for Wowza Rest API

**URL:** <https://community.wowza.com/t/more-secure-authentication-for-wowza-rest-api/93492>\
**Category:** Wowza Streaming Engine\
**Created:** [July 2, 2021, 9:04am UTC](https://community.wowza.com/t/more-secure-authentication-for-wowza-rest-api/93492 "2021-07-02T09:04:19Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Pankil\_Thakkar](https://avatars.discourse-cdn.com/v4/letter/p/aca169/32.png) [@Pankil\_Thakkar](https://community.wowza.com/u/Pankil_Thakkar)\
**Post date:** [July 2, 2021, 9:04am UTC](https://community.wowza.com/t/more-secure-authentication-for-wowza-rest-api/93492/1 "2021-07-02T09:04:19Z")

</div>

I am using Wowza Streaming Engine but managing it through Rest API.

I want to make my restAPI secure and invulnerable. I have gone through multiple authentication methods like basic, digest, remote HTTP, etc in the documentation. And out of them, I found remote HTTP is the most secure way of authentication.

I am able to successfully integrate my Wowza manager login through remote HTTP. But I am unable to authenticate my RestAPI through it. I am able to authenticate restAPI using only 2 methods - basic and digest.

I found your very old post of OCT’15 about it - [Securing Rest Interface wowza](http://community.wowza.com/t/securing-rest-interface-wowza/46058). Is it still the true or you have extended your support for remoteHTTP?

---

<div class="post-metadata">

**Author:** ![Rose\_Power-Wowza\_Com](https://sea2.discourse-cdn.com/flex002/user_avatar/community.wowza.com/rose_power-wowza_com/32/431_2.png) [@Rose\_Power-Wowza\_Com](https://community.wowza.com/u/Rose_Power-Wowza_Com)\
**Post date:** [July 2, 2021, 3:40pm UTC](https://community.wowza.com/t/more-secure-authentication-for-wowza-rest-api/93492/2 "2021-07-02T15:40:19Z")

</div>

Thank you for sharing what steps and docs you’ve already researched. I believe this is what you’re looking for though:

[https://www.wowza.com/docs/how-to-change-the-authentication-method-for-the-wowza-streaming-engine-rest-api#use-remote-http-authentication](https://www.wowza.com/docs/how-to-change-the-authentication-method-for-the-wowza-streaming-engine-rest-api#use-remote-http-authentication)

This is the section you want and it has sample code:

## Use remote HTTP authentication

Remote HTTP authentication goes one step further than digest HTTP authentication: It uses a remote server to generate a custom digest value from a shared secret. That digest value is then included in an authorization header of your HTTP request to the REST API.

---

<div class="post-metadata">

**Author:** ![Rose\_Power-Wowza\_Com](https://sea2.discourse-cdn.com/flex002/user_avatar/community.wowza.com/rose_power-wowza_com/32/431_2.png) [@Rose\_Power-Wowza\_Com](https://community.wowza.com/u/Rose_Power-Wowza_Com)\
**Post date:** [July 2, 2021, 3:41pm UTC](https://community.wowza.com/t/more-secure-authentication-for-wowza-rest-api/93492/3 "2021-07-02T15:41:08Z")

</div>

But let me know if you’ve already tried that and it didn’t work @Pankil_Thakkar

---

<div class="post-metadata">

**Author:** ![Pankil\_Thakkar](https://avatars.discourse-cdn.com/v4/letter/p/aca169/32.png) [@Pankil\_Thakkar](https://community.wowza.com/u/Pankil_Thakkar)\
**Post date:** [July 6, 2021, 9:55am UTC](https://community.wowza.com/t/more-secure-authentication-for-wowza-rest-api/93492/4 "2021-07-06T09:55:13Z")

</div>

Yes, I have already referred to this link. But it was not useful for implementing --remotehttp method in Wowza streaming engine REST API.

Here is demo API I am posting which I am currently using in my applicaiton with --basic authentication.

## To get All Applications

```
curl -X GET \
--basic -u 'username:password' \
-H 'Accept:application/json; charset=utf-8' \
-H 'Content-Type:application/json; charset=utf-8' \
http://localhost:8087/v2/servers/_defaultServer_/vhosts/_defaultVHost_/applications

```

Actually, I want to use --remotehttp instead of --basic or --digest in Rest API. When I hit this API using the --basic or --digest method whichever is mentioned in Server.xml, it gives me a proper response in JSON.

But when I change it to --remotehttp, it gives me error like “–remotehttp is an unknown option”

Can you please help me in this?

---

<div class="post-metadata">

**Author:** ![Connessione](https://avatars.discourse-cdn.com/v4/letter/c/43a26b/32.png) [@Connessione](https://community.wowza.com/u/Connessione)\
**Post date:** [July 29, 2021, 5:23pm UTC](https://community.wowza.com/t/more-secure-authentication-for-wowza-rest-api/93492/5 "2021-07-29T17:23:16Z")

</div>

What error do you get, make sure the remote endpoint is reachable and is returning appropriate http response.