mirror of
https://github.com/stashapp/stash.git
synced 2026-04-12 10:00:49 +02:00
HMAC-signed URLs allow authenticated streaming to devices that cannot pass cookies (AirPlay, Chromecast). Signing is scoped to scene stream using a prefix-based approach so one signature covers all derivative segment URLs. Credentialid hides username from public network. When credentials are disabled, signing is bypassed entirely. API key takes precedence over signed params when both are present. |
||
|---|---|---|
| .. | ||
| signedurl.go | ||
| signedurl_test.go | ||