Can I use WMSAuth while serving the Nimble video stream through AWS Cloudfront

Jon 2023-02-28 01:18:24 UTC in Paywall: WMSAuth and beyond

When running Nimble and WMSAuth with the Cloudfront CDN, I'm getting the following error message in the WMSAuth log, and the message is showing repeatedly from multiple IP addresses:
"cannot find hash match for signature=[wmsAuthSign]"

And the IP addresses all resolve to Amazon (which I'm assuming is due to the Cloudfront distribution accessing the streaming server).

Is it possible to use WMSAuth (to avoid hot linking) together with Cloudfront?


Sergei 2023-03-01 10:17:54 UTC 

Hello, Jon.

If some CDN network is used, it is considered, that access to streams will be controlled via CDN.
WMSAuth won't work in such a scenario, as the session could not be established directly with the viewer, so the Nimble can't control if a viewer has a permission to view a stream.

Jon 2023-03-02 00:25:47 UTC 

Thanks Sergei. We were hoping to use the WMSAuth system as it is perfect for what we need and the CDN doesn't really have anything like this out of the box. Is it possible to use the WMSAuth without the IP address check? I did see somebody in these forums mentioning this might be possible using a variation of the PPV auth - would this be something that you would recommend?

Post a reply

Post a new question


This website or its third-party tools use cookies, which are necessary to its functioning and required to achieve the purposes illustrated in the Privacy Policy. If you want to know more or withdraw your consent to all or some of the cookies, please refer to the Privacy Policy.
By closing this banner, scrolling this page, clicking a link or continuing to browse otherwise, you agree to the use of cookies.