Icecast Streaming Media Server

[coroneln]

First of all; Hello all and thanks for this piece of software which is brilliant!


I have been playing with Auth by URL but i cannot figure out how to evaluate a condition.

I added the mount settings for url auth and header and name="listener_add" pointing to a php script listener_joined.php

In this script if i put header("header i expect") the music plays.
If i evaluate it against anything it asks for a user name and password.

What i want to do is for the listeners to be tied to my web page in order to listen to the music;

I have not found a way to pass arguments from the embeed code, if as the doc says i use a mount type /music?&Validation=1 when i look in listener_joined.php the validation=1 never arrived... (I think it is expected according to the docs.)

The referer arrives empty also to the script...
So how can pass something from my web page to listener_joined.php to evaluate and then set the header to allow music to play ?

Thanks in advance
N

[karlH]

most players don't pass the referrer header so the url code never checked for it. If you use query args then icecast will escape encode them or else those will get mixed up with the normal POST. So take the mount value and unescape it, then you can split it for the actual values.

karl.

[coroneln]

Hello Karl; thanks for replying

[karlH]

The access log will not show POST details as that is sent after the headers. You'll know that POST details are in the form of tag1=value&tag2=value and you know that one of those tags will be mount for the listener_add trigger. The value cannot be whatever was supplied from the user as that could conflict with the rest of the POST, so icecast has to escaped it, you'll have to un-escape the mount value before checking what the user actually sent.

you should find that in php, the urldecode, explode and split routines will suit your needs.

karl.

[coroneln]

So i can not URL Auth when making the call from an embeed object ?

I mean the object has the address in the form

Source="http://myserver.com:port/mount"

I was hoping to be able to verify if the embed object was coming from my page and not from another page or player...

If I understood properly any request on a mount with the auth tags will trigger listeneradd and process the listener_joined.php

i have tried putting a echo $_REQUEST / $_POST $_get even all vars on every script to see how they behave and when icecast calls listener_joined.php is sending it nothing...

I am very confused

can i call the auth from an embeed player and expect it to be authed ?

if so; should i add to the address something in the mount name ?
i have tried and adding ?whatever the stream mounts


my icecast.xsl contains for that mount:

[karlH]

doesn't matter whether the player is embedded or a standalone player, it still has to issue a request and supply details, icecast won't know it's from a web page specifically. Put another way, If you see a request for a stream, what makes to think it's from an embedded player, referrer?, query args supplied?

The embedded player does not request auth, doing so means it can be bypassed. icecast will issue the ...listener_joined.php request, but will only accept the listener if the expected header (icecast-auth-user: 1) is received back from that php.

The question you need to ask is what do you think is acceptable for a request to be from an embedded object?
eg
GET /stream HTTP/1.0
GET /stream?referrer=www.mywebsite.com HTTP1/.0
GET /stream?session=12345 ....
GET /stream?timecode=....

your php can get this information and make a decision. You may find the referrer acceptable or something mode involved requiring a web portal login to come up with a generate session id in a DB, or maybe something in-between like the timecode which could mean only available for the next minute.

karl

[coroneln]

[karlH]

surely that will depend on the language of the embedded object and how it handles URLs and strings. Maybe you should be asking those questions on a forum suitable for that embedded object? Obviously we cannot give specific advice on such a vague question.

karl.