How to enable token based authentication in AVChat

Posted on Monday, August 9th, 2010 by Octavian Naicu in Documentation

Starting with build 900, AVChat 3 introduces a new security feature called “token based authentication”. When enabled this prevents 3′rd party swf files (hosted on other web sites than your own or by malicious users) to connect to your media server. There are other security measures in place to prevent this however token based authentication is the most secure!

This feature is turned off by default because with it enabled:

  • it takes slightly more time for users to connect to the media server,
  • it might cause some connection attempts to the media server over slow Internet connections to fail
  • we’ve only had a few clients that really needed this feature!

How o turn it on:

  • install AVChat
  • edit the settings file on the media server  (avchat3.properties on Red5 and Wowza, settings.asc on FMIS)
  • set the value of the tokenUrlLocation variable to the absolute url to token_verify.php  (token_verify.php is in the folder where you installed AVChat on your website, good example: http://avchat.net/demos/av30/token_verify.php)
  • restart the media server

Tags: ,

This entry was posted on Monday, August 9th, 2010 at 0:01 and is filed under Documentation. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

2 Responses to “How to enable token based authentication in AVChat”

  1. The AVChat 3 build for September (900) | AVChat Software Product Blog Says:
    August 10th, 2010 at 17:35

    [...] token authentication for Red5, FMIS and Wowza (php only, turned off by default, article on how to turn it on will be available soon) [...]

  2. AVChat 3 build 910 is up | AVChat Software Product Blog Says:
    August 11th, 2010 at 16:34

    [...] error when trying to use AVChat with .aspx or .asp (full aspx support is still being worked on, token based authentication is still available only with php for now [...]

Leave a Reply