Last active
July 17, 2023 04:44
-
-
Save ToshY/0b1b818b080bf9528dfbcc375b937a08 to your computer and use it in GitHub Desktop.
BunnyCDN VOD HLS Token Authentication V2 with directory tokens
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <?php | |
| /* | |
| VOD HLS streaming for BunnyCDN with Token authentication V2 | |
| NOTES: | |
| > Credits to Dejan from BunnyCDN Support for the function for token authentication V2 | |
| > I've created this snippet to show how to use HLS streaming with the directory tokens. | |
| This is a workaround which works by appending the token query string for every request to the TS segments (see JS below) | |
| > Please add the appropriate CORS headers if enabled in the BunnyCDN panel (for HLS add 'm3u8, ts') | |
| > Chromecast with HLS streaming and the usage of directory tokens will not. | |
| If you really want to have it work with Chromecast, I suggest using MP4 instead and use the option "Optimize for video delivery" | |
| in BunnyCDN's control panel. Especially if you have high bitrate videos or segments (>15 Mbps), the Chromecast (V3) is able to | |
| handle MP4 much better than TS (hanging). | |
| > Tested with VideoJS 7.5.5 (19-6-2020 working) | |
| */ | |
| function sign_bcdn_url($url, $securityKey, $expiration_time = 3600, $user_ip = NULL, $path_allowed = NULL, $countries_allowed = NULL, $countries_blocked = NULL) | |
| { | |
| if(!is_null($countries_allowed)) | |
| { | |
| $url .= (parse_url($url, PHP_URL_QUERY) == "") ? "?" : "&"; | |
| $url .= "token_countries={$countries_allowed}"; | |
| } | |
| if(!is_null($countries_blocked)) | |
| { | |
| $url .= (parse_url($url, PHP_URL_QUERY) == "") ? "?" : "&"; | |
| $url .= "token_countries_blocked={$countries_blocked}"; | |
| } | |
| $url_scheme = parse_url($url, PHP_URL_SCHEME); | |
| $url_host = parse_url($url, PHP_URL_HOST); | |
| $url_path = parse_url($url, PHP_URL_PATH); | |
| $url_query = parse_url($url, PHP_URL_QUERY); | |
| $parameters = array(); | |
| parse_str($url_query, $parameters); | |
| // Check if the path is specified and ovewrite the default | |
| $signature_path = $url_path; | |
| if(!is_null($path_allowed)) | |
| { | |
| $signature_path = $path_allowed; | |
| $parameters["token_path"] = $signature_path; | |
| } | |
| // Expiration time | |
| $expires = time() + $expiration_time; | |
| // Construct the parameter data | |
| ksort($parameters); // Sort alphabetically, very important | |
| $parameter_data = ""; | |
| $parameter_data_url = ""; | |
| if(sizeof($parameters) > 0) | |
| { | |
| foreach ($parameters as $key => $value) | |
| { | |
| if(strlen($parameter_data) > 0) | |
| $parameter_data .= "&"; | |
| $parameter_data_url .= "&"; | |
| $parameter_data .= "{$key}=" . $value; | |
| $parameter_data_url .= "{$key}=" . $value; | |
| } | |
| } | |
| // Generate the toke | |
| $hashableBase = $securityKey.$signature_path.$expires.$parameter_data; | |
| // If using IP validation | |
| if(!is_null($user_ip)) | |
| { | |
| $hashableBase .= $user_ip; | |
| } | |
| // Generate the token | |
| $token = hash('sha256', $hashableBase, true); | |
| $token = base64_encode($token); | |
| $token = strtr($token, '+/', '-_'); | |
| $token = str_replace('=', '', $token); | |
| //$url_path = str_replace("%2F", "/", urlencode($url_path)); // URL encode everything but slashes for the URL data | |
| $query_string = "?token={$token}{$parameter_data_url}&expires={$expires}&token_ver=2"; | |
| return [$query_string, "{$url_scheme}://{$url_host}{$url_path}{$query_string}"]; | |
| } | |
| list($query_string, $secure_url) = sign_bcdn_url("https://mydomain.b-cdn.net/test/bigbuck.m3u8", "a1b2c3d4-e5f6-g7h8-i9j1-k2l3m4n5o6p7", 3600, NULL, "/test/"); | |
| ?> | |
| <html> | |
| <head> | |
| <link href="https://vjs.zencdn.net/7.5.5/video-js.css" rel="stylesheet" type="text/css"> | |
| <link href="https://cdn.jsdelivr.net/npm/@silvermine/[email protected]/dist/css/quality-selector.css" rel="stylesheet" type="text/css"> | |
| <link href="https://cdn.jsdelivr.net/npm/@silvermine/[email protected]/dist/silvermine-videojs-chromecast.css" rel="stylesheet" type="text/css"> | |
| </head> | |
| <body> | |
| <video | |
| id="MyPlayer" | |
| class="video-js vjs-16-9 vjs-big-play-centered" | |
| controls | |
| preload="auto" | |
| poster="" | |
| data-title="" | |
| data-poster="" | |
| > | |
| <source src="<?php echo $secure_url; ?>" type="application/x-mpegURL" label="" /> | |
| <p class="vjs-no-js"> | |
| To view this video please enable JavaScript, and consider upgrading to a | |
| web browser that | |
| <a href="https://videojs.com/html5-video-support/" target="_blank" | |
| >supports HTML5 video</a | |
| > | |
| </p> | |
| </video> | |
| </body> | |
| <script src="https://code.jquery.com/jquery-3.5.1.js"></script> | |
| <script src="https://www.gstatic.com/cv/js/sender/v1/cast_sender.js?loadCastFramework=1"></script> | |
| <script src="https://vjs.zencdn.net/7.5.5/video.js"></script> | |
| <script src="https://cdn.jsdelivr.net/npm/@silvermine/[email protected]/dist/js/silvermine-videojs-quality-selector.js"></script> | |
| <script src="https://cdn.jsdelivr.net/npm/@silvermine/[email protected]/dist/silvermine-videojs-chromecast.js"></script> | |
| <script> | |
| // current source | |
| csource = $('#MyPlayer source').attr('src') | |
| titles = { | |
| csource: $('#MyPlayer').attr('data-title') | |
| } | |
| // options for chromecast | |
| options = { | |
| controls: true, | |
| techOrder: [ 'chromecast', 'html5' ], | |
| chromecast: { | |
| requestTitleFn: function(source) { | |
| return titles[csource.url]; | |
| } | |
| }, | |
| plugins: { | |
| chromecast: {} | |
| } | |
| }; | |
| // append the token query string to the TS segments | |
| videojs.Hls.xhr.beforeRequest = function(options) { | |
| if(options.uri.includes('.ts')) options.uri += '<?php echo $query_string; ?>'; | |
| return options; | |
| }; | |
| var vjplayer = videojs("MyPlayer", options); | |
| </script> | |
| </html> |
Finally I got support from bunny.
I forked your code and edit it.
Thanks for your support.
https://gist.github.com/saturngod/01ca507ee0134c38f85874cc4061b320
Is this the code to play the video stream in bunny cdn?
I tested this code. worked perfectly.
Could you provide the php code to upload the live streaming from camera input?
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Ah okay, well good to know. Initially I uploaded this snippet to show that BunnyCDN already has the option to use directory tokens for a while now, but till this day the new token authentication is still not documented. I've received the PHP snippet from the owner through their support, and decided to add this code to show that it's possible to do some basic HLS streaming with token authentication.
Anyway, I had another idea a while back regarding the appending of the
query_stringas well, which doesnt require the javascript trick.It goes something like this:
initial .m3u8file throughsign_bcdn_urlinitial .m3u8and create a copy, e.g.copied.m3u8(you could also append the expiration unix timestamp to the filename ofcopied.m3u8so you can create a cronjob to delete them later automatically if they are expired, e.g.copied_1602005952.m3u8)copied.m3u8file, append thequery_stringto every.tssegment3.1 If you want to keep the
copied.m3u8on the server you just downloaded it to, you have to make the URLs absolute:https://mydomain.b-cdn.net/test/bigbuck0.ts?token=1a2b3c&expires=1602005952&token_ver=23.2 If you decide to save the new file to bunny servers (in the same folder as the
initial.m3u8and.tssegments), just appending thequery_stringis enough:bigbuck0.ts?token=1a2b3c&expires=1602005952&token_ver=2copied.m3u8(either on your own or bunny servers)copied.m3u8and append the samequery_stringto it:https://mydomain.b-cdn.net/test/copied.m3u8?token=1a2b3c&expires=1602005952&token_ver=2copied.m3u8files after they expireWhile this method of creating these temporary
m3u8files work (yes I've tried it myself a while back), it's more of a workaround than an actual solution. It was a while after this that I found out you could simply append something to the URL usingvideojs.Hls.xhr.beforeRequest, which made the whole thing a whole lot simpler.FYI at some point I also dropped the idea of using HLS streaming myself due to the fact that high bitrate
tssegments (>30 Mbps) could not be played using the silvermine's chromecast plugin and the video would just keep endlessly trying to load the segment (both on the Chromecast V3 and Ultra).