Generate Token Using Java

Prerequisites:

  • Java 6 or 7
  • Maven 2 or 3

On this page:


Build

To build a generator:

  1. Go to /cdn-wowza-token-tool/java/ location.
  2. Run the following:
    mvn clean install

Upon success of the build, you will find the jar (token-auth-generator.jar) file at the 'target' folder.

Usage

java -jar token-auth-generator-1.2.jar (encrypt | decrypt) (<primary_key> | <backup_key>) "<security_parameters>"

Security Parameters

expire

  • Number of seconds since Unix time (Epoch time)
  • UTC based
  • Must not be earlier than current time

ref_allow

  • Referrer domain(e.g. google.com) or path(e.g. google.com/video/)
  • Allowed multiple referrers separated by comma (,) without space(s)
  • Wildcard (*) allowed only at the beginning of a referrer, e.g. *.DOMAIN
  • Do not append space at the start & end of a referrer
  • Domain must fulfill RFC 3490
  • Path must fulfill RFC 2396
  • Should not include port (e.g. google.com:3000/video)
  • Should not include protocol (e.g. http)

 ref_deny

  • Same rules as in ref_allow
 If both ref_allow & ref_deny are specified, ref_allow will be taking precedence over ref_deny

Allow Blank/Missing Referrer

Both "ref_allow" & "ref_deny" could be configured to allow/deny blank or missing referrer during TokenAuth validation. The following configuration allow blank or missing referrer: ref_allow=allow.com,

ref_allow=allow.com,MISSING

ref_deny=deny.com

The following configuration deny blank or missing referrer:

ref_allow=allow.com

ref_deny=deny.com,

ref_deny=deny.com,MISSING

Normally ref_allow & ref_deny are not to be used together, but if this happened ref_allow will take precedence over ref_deny.


Generate Token

To generate token, run the following:

java -jar token-auth-generator-1.2.jar encrypt samplekey "expire=1598832000&ref_allow=*.TrustedDomain.com&ref_deny=Denied.com"

Sample Output:

token=110ea31ac69c09a2db0bdd74238843631cdab498ff7e6e75cbd99cc4d05426ab679a57015d4e48438c97b921652daec62de3829f8ff437e27449cfdfc2f1e5d9fc47f14e91a51ea7codecode
After generating a token, append the result to the playback URL.

Decrypt Token

To decrypt token, run the following:

 java -jar token-auth-generator-1.2.jar decrypt samplekey 110ea31ac69c09a2db0bdd74238843631cdab498ff7e6e75cbd99cc4d05426ab679a57015d4e48438c97b921652daec62de3829f8ff437e27449cfdfc2f1e5d9fc47f14e91a51ea7

Sample Output:

security parameters=expire=1598832000&ref_allow=*.TrustedDomain.com&ref_deny=Denied.com