Basic authorization flow performed within primary application basic-authorization-flow-performed-within-primary-application
The Authorization flow within Adobe Pass Authentication entitlement allows the streaming application to determine whether an MVPD permits or denies the user’s request to stream content. If the decision is Permit, the response includes a media token. Adobe Pass server signs the media token and allows the streaming application to use the media token verifier library to check its authenticity before the stream is released.
The verification with the media token verifier library should occur on the streaming application backend service linked in the chain of permissions for releasing a stream from the CDN.
Retrieve authorization decisions using specific mvpd retrieve-authorization-decisions-using-specific-mvpd
Prerequisites prerequisites-retrieve-authorization-decisions-using-specific-mvpd
Before retrieving authorization decisions using a specific MVPD, ensure the following prerequisites are met:
-
The streaming application must have a valid regular profile that has been successfully created for the MVPD using one of the basic authentication flows:
-
The streaming application must retrieve an authorization decision before playing a user selected resource.
Workflow workflow-retrieve-authorization-decisions-using-specific-mvpd
Follow the given steps to implement the basic authorization flow using a specific MVPD performed within a primary application as shown in the following diagram.
Retrieve authorization decisions using specific mvpd
-
Retrieve authorization decision: The streaming application gathers all the necessary data to obtain an authorization decision for a specific resource by calling the Decisions Authorize endpoint.
note important IMPORTANT Refer to the Retrieve authorization decisions using specific mvpd API documentation for details on: - All the required parameters, like
serviceProvider,mvpd, andresources - All the required headers, like
AuthorizationandAP-Device-Identifier - All the optional parameters and headers
- All the required parameters, like
-
Find regular profile: The Adobe Pass server identifies a valid profile based on the received parameters and headers.
-
Retrieve MVPD decision for requested resource: The Adobe Pass server calls the MVPD authorization endpoint to obtain a
PermitorDenydecision for the specific resource received from the streaming application. -
Return
Permitdecision with media token: The Decisions Authorize endpoint response contains aPermitdecision and a media token.note important IMPORTANT Refer to the Retrieve authorization decisions using specific mvpd API documentation for details on the information provided in a decision response. The Decisions Authorize endpoint validates the request data to ensure that basic conditions are met: - The required parameters and headers must be valid.
- The integration between the provided
serviceProviderandmvpdmust be active.
If validation fails, an error response will be generated, providing additional information that adheres to the Enhanced Error Codes documentation. -
Start stream with media token: The streaming application uses the media token to play the content.
-
Return
Denydecision with details: The Decisions Authorize endpoint response contains aDenydecision and an error payload which adheres to the Enhanced Error Codes documentation.note important IMPORTANT Refer to the Retrieve authorization decisions using specific mvpd API documentation for details on the information provided in a decision response. The Decisions Authorize endpoint validates the request data to ensure that basic conditions are met: - The required parameters and headers must be valid.
- The integration between the provided
serviceProviderandmvpdmust be active.
If validation fails, an error response will be generated, providing additional information that adheres to the Enhanced Error Codes documentation. -
Handle
Denydecision details: The streaming application processes the error information from the response and can use it to optionally display a specific message on the user interface.