Uncertainty About Using One-Time Token for Publishing Streams and Play Room

[hongda1y]

Description
Currently, it's unclear whether a one-time token can be used to:

1. Publish stream with publish token.
2. Play a room that may contain multiple streams.
3. Generate a play token : should it be tied to the room ID or individual stream IDs?

Since the token is labeled as "one-time," it's uncertain whether it should be refreshed for each new stream or if it remains valid throughout the session.

Expected Behavior

• Clarification on whether a one-time token should be reissued for every new stream or room playback.
• Guidance on whether the play token should be generated using the room ID or stream ID.
• If reuse is possible, an explanation of its lifespan and limitations.

Actual Behavior

• Lack of clarity on how the token is handled for multiple streams or a play room.
• Uncertainty about whether play tokens are associated with rooms or individual streams.

Steps to Reproduce

• Generate a one-time token.
• Attempt to play a room with play token that contains multiple streams.
• Try generating a play token with both a room ID and a stream ID to see what works.

Questions

• Does the one-time token support stream publishing?
• Can the same token be used for room playback that includes multiple streams?
• Should the play token be generated using the room ID or stream ID?
• Should the token be refreshed after each stream or room access?

[burak-58]

Hi @hongda1y,
Let me convert this to a discussion so that you get answers your questions faster. Then if we need to create an issue, we will get this back.

[Mohit-3196]

Hi @hongda1y,
I hope you are well.
We recommend using the JWT token for conference security.
Please check this space for the same: https://antmedia.io/docs/guides/conference/conference-room-security/

Thank you.