# Secure Token for playback Secure URL params for publishing.

**URL:** <https://community.wowza.com/t/secure-token-for-playback-secure-url-params-for-publishing/38760>\
**Category:** Wowza Streaming Engine\
**Tags:** server-administration\
**Created:** [May 31, 2012, 4:08am UTC](https://community.wowza.com/t/secure-token-for-playback-secure-url-params-for-publishing/38760 "2012-05-31T04:08:51Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Jose\_Mestre](https://avatars.discourse-cdn.com/v4/letter/j/ecccb3/32.png) [@Jose\_Mestre](https://community.wowza.com/u/Jose_Mestre)\
**Post date:** [May 31, 2012, 4:08am UTC](https://community.wowza.com/t/secure-token-for-playback-secure-url-params-for-publishing/38760/1 "2012-05-31T04:08:51Z")

</div>

Hello.

I would like to use a wowza solution for playback videos using secure token.

I’m using xsplit broadcaster to encode live streamings, so i’m unable to add secure token to xsplit broadcaster.

Also with xsplit broadcaster i can’t add rtmpauthenticate module because it’s unable to login.

Is there any way i can use secure token for playback and DISABLE it for publishing with SecureTokenModule?

Regards.

---

<div class="post-metadata">

**Author:** ![Richard\_Lanham](https://avatars.discourse-cdn.com/v4/letter/r/c68b51/32.png) [@Richard\_Lanham](https://community.wowza.com/u/Richard_Lanham)\
**Post date:** [May 31, 2012, 6:25pm UTC](https://community.wowza.com/t/secure-token-for-playback-secure-url-params-for-publishing/38760/2 "2012-05-31T18:25:23Z")

</div>

The MediaSecurity package includes ModuleRTMPAuthenticate for encoders, which will not work in your case. However SecureToken is to secure the Flash RTMP client, and you can use that if you are using a Flash RTMP client. Here is a guide to adding SecureToken to JW Player:

[https://www.wowza.com/docs/how-to-add-securetoken-protection-to-jw-player](https://www.wowza.com/docs/how-to-add-securetoken-protection-to-jw-player)

If other player, the above is still a good reference.

For an alternative to ModuleRTMPAuthenticate for securing your publishing point, you can use SecureURLParams:

[https://www.wowza.com/docs/how-to-secure-publishing-from-an-rtmp-encoder-that-does-not-support-authentication-modulesecureurlparams](https://www.wowza.com/docs/how-to-secure-publishing-from-an-rtmp-encoder-that-does-not-support-authentication-modulesecureurlparams)

Here is another approach that can work for an encoder and Flash RTMP client:

[https://www.wowza.com/docs/how-to-do-file-based-rtmp-authentication-with-url-query-strings-onconnectauthenticate2](https://www.wowza.com/docs/how-to-do-file-based-rtmp-authentication-with-url-query-strings-onconnectauthenticate2)

Richard

---

<div class="post-metadata">

**Author:** ![Richard\_Lanham](https://avatars.discourse-cdn.com/v4/letter/r/c68b51/32.png) [@Richard\_Lanham](https://community.wowza.com/u/Richard_Lanham)\
**Post date:** [June 1, 2012, 12:22pm UTC](https://community.wowza.com/t/secure-token-for-playback-secure-url-params-for-publishing/38760/3 "2012-06-01T12:22:35Z")

</div>

ModuleSecureToken has no affect on the encoder. Copy your Application.xml here between code tags.

Richard

---

<div class="post-metadata">

**Author:** ![Lisa\_Wong](https://avatars.discourse-cdn.com/v4/letter/l/34f0e0/32.png) [@Lisa\_Wong](https://community.wowza.com/u/Lisa_Wong)\
**Post date:** [June 18, 2012, 3:56pm UTC](https://community.wowza.com/t/secure-token-for-playback-secure-url-params-for-publishing/38760/4 "2012-06-18T15:56:57Z")

</div>

Take a look at the [Media Security AddOn package](https://www.wowza.com/docs/media-security-overview%28SecureToken-RTMP-RTSP-Authentication-and-more%29). A user guide is included in the package. The secure token section starts on page 4.

-Lisa

---

<div class="post-metadata">

**Author:** ![Lauro\_Dorneles](https://avatars.discourse-cdn.com/v4/letter/l/b5ac83/32.png) [@Lauro\_Dorneles](https://community.wowza.com/u/Lauro_Dorneles)\
**Post date:** [June 8, 2012, 6:18pm UTC](https://community.wowza.com/t/secure-token-for-playback-secure-url-params-for-publishing/38760/5 "2012-06-08T18:18:58Z")

</div>

Hello Pandepoulus, could you please help me? I’d like to do exactly the same, authenticate from encoder and use secure token for playback. Thanks.

---

<div class="post-metadata">

**Author:** ![Jose\_Mestre](https://avatars.discourse-cdn.com/v4/letter/j/ecccb3/32.png) [@Jose\_Mestre](https://community.wowza.com/u/Jose_Mestre)\
**Post date:** [May 31, 2012, 10:11pm UTC](https://community.wowza.com/t/secure-token-for-playback-secure-url-params-for-publishing/38760/6 "2012-05-31T22:11:56Z")

</div>

Thank You for your answer, but i think i still have the same problem.

I successfully added secure token to flowplayer, but if i use the module “ModuleSecureToken” i’m also protecting publishing methods with secure token, and i cannot add the secure token to my encoder.

If i use ModuleRTMPAuthenticate, i’m also protecting the play method with secure token with flowplayer, but i need to authenticate, and my encoder can’t do that.

So i need a way to protect only the play method with secureToken, which i think none of your modules provide.

Please tell me if i’m wrong.

Regards.

---

<div class="post-metadata">

**Author:** ![Jose\_Mestre](https://avatars.discourse-cdn.com/v4/letter/j/ecccb3/32.png) [@Jose\_Mestre](https://community.wowza.com/u/Jose_Mestre)\
**Post date:** [June 1, 2012, 9:03am UTC](https://community.wowza.com/t/secure-token-for-playback-secure-url-params-for-publishing/38760/7 "2012-06-01T09:03:19Z")

</div>

I’m copying this from security addon documentation:

"The “ModuleSecureToken” module adds SecureToken protection to publishing and playback of content through Wowza Media Server. "

Actually i solved my problem using the module “SecureURLParams”, which also uses secureToken for playback.

Regards.
