Token auth
Publish and play use short-lived JWT keys. When the appointment ends, the key ends with it. Rotate a key from your app when a person should lose access before the clock runs out. See REST and webhooks.Signed URLs
Signed links expire. Pin a link to an address when the playback should only work from that client. IP rules sit alongside those links for networks you already know.SSO and roles
Operators sign in with SAML or OIDC. Roles match the job of the person running the server. Viewers stay on stream keys.Encryption
Call it from your product
Create the stream, hand out the key, and hear when the recording is finished.