# SecureToken for DVR

**URL:** <https://community.wowza.com/t/securetoken-for-dvr/93473>\
**Category:** Wowza Streaming Engine\
**Tags:** security, dvr\
**Created:** [June 28, 2021, 7:56am UTC](https://community.wowza.com/t/securetoken-for-dvr/93473 "2021-06-28T07:56:18Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![chi\_nk1](https://avatars.discourse-cdn.com/v4/letter/c/ebca7d/32.png) [@chi\_nk1](https://community.wowza.com/u/chi_nk1)\
**Post date:** [June 28, 2021, 7:56am UTC](https://community.wowza.com/t/securetoken-for-dvr/93473/1 "2021-06-28T07:56:18Z")

</div>

Is SecureToken support for nDVR?  
I have DVR source link format: http://${wowzaIP}:1935/${appName}/${streamName}/playlist.m3u8?DVR  
How to enable SecureToken for the above link.  
I try to generate hash for VOD: vod/sample.mp4?192.168.1.2&mySharedSecret, and it work  
But when I try with DVR, it return 403 (Forbidden): live/sample.mp4?192.168.1.2&mySharedSecret

---

<div class="post-metadata">

**Author:** ![Rose\_Power-Wowza\_Com](https://sea2.discourse-cdn.com/flex002/user_avatar/community.wowza.com/rose_power-wowza_com/32/431_2.png) [@Rose\_Power-Wowza\_Com](https://community.wowza.com/u/Rose_Power-Wowza_Com)\
**Post date:** [June 28, 2021, 5:50pm UTC](https://community.wowza.com/t/securetoken-for-dvr/93473/2 "2021-06-28T17:50:31Z")

</div>

nDVR works with SecureToken, yes.

The user name and password authentication would need to be done through a webpage portal that has a player hosted with the stream from Wowza.  
The users would login using the webpage, then the page with the player would be loaded to playback the HLS DVR stream.

I don’t believe there are any HLS players that would work with an HLS user name and password authentication like you are referencing.

Send us a [support ticket](https://www.wowza.com/support/open-ticket) @chi_nk1 and we’ll take a closer look and help you get it set up.

---

<div class="post-metadata">

**Author:** ![chi\_nk1](https://avatars.discourse-cdn.com/v4/letter/c/ebca7d/32.png) [@chi\_nk1](https://community.wowza.com/u/chi_nk1)\
**Post date:** [June 29, 2021, 2:57am UTC](https://community.wowza.com/t/securetoken-for-dvr/93473/3 "2021-06-29T02:57:44Z")

</div>

I follow this below link to setup **SecureToken**.

[https://www.wowza.com/docs/How-to-protect-streaming-using-SecureToken-in-Wowza-Streaming-Engine](https://www.wowza.com/docs/How-to-protect-streaming-using-SecureToken-in-Wowza-Streaming-Engine)

[Use Wowza SecureToken to protect streams](https://www.wowza.com/docs/How-to-protect-streaming-using-SecureToken-in-Wowza-Streaming-Engine)

Wowza Streaming Engine™ media server software provides SecureToken playback protection for all supported streaming protocols and includes hashing options for generating the security token that’s exchanged between Wowza Streaming Engine and its clients.

[www.wowza.com](https://www.wowza.com)

It has HLS instructions for VOD but no HLS for nDVR.

With VOD, String used for hashing vod/sample.mp4?192.168.1.2&mySharedSecret&myTokenPrefixCustomParameter=abcdef&myTokenPrefixendtime=15000 00000&myTokenPrefixstarttime=1395230400

With nDVR, I try to used live/sample.mp4?192.168.1.2&mySharedSecret&myTokenPrefixCustomParameter=abcdef&myTokenPrefixendtime=15000 00000&myTokenPrefixstarttime=1395230400. But it not work

I want to comfirm that, protect streaming using SecureToken in Wowza Streaming Engine is worked for nDVR, and what is the string using for hash.

And about “The users would login using the webpage, then the page with the player would be loaded to playback the HLS DVR stream.”. This way is work. But I want to use **SecureToken** in this case.