Is there a way to authenticate stream requests via external Auth Server

[swarup-e]

I have a use case where I want to authenticate each read stream request by token (not just by using username and password). I want to send the request to authentication server and on authorization rtsp server should be able send streams.

I have been using Nginx RTMP module so I am trying achieve same things with rtsp simple server.

For example nginx on play directive allows redirect request to auth server and on 201 response it sends streams.

[jakew009]

I agree this would be a really useful feature.

So for instance request comes in to

rtsp://user:pass@rtsp-simple-server:554/camera/123

And then a 'subrequest' is made to an authorisation server

POST http://auth-server/api/auth
{
  "request_auth_user": "user",
  "request_auth_password: "pass",
  "request_path": "/camera/123"
}

And then the auth server could reply with either a 401 or a 200 OK. If it's a 200, the authorisation attempt is considered successful and the user is allowed to view the camera.

The benefit of this over the current method is you can have more than one 'readUser` per path.

[swarup-e]

It would make sense if its more generic like support URL parameters in RTSP URL and just forward those parameters to another server (may be have a config to select GET or POST method) because then one can use it for varius other purposes.

[aler9]

This was added to the planned features list

[aler9]

discussion moved here #517

[aler9]

this feature has been implemented in v0.17.12