Token Signing Key Secret

Overview

The Token Signing Key Secret is a crucial component for security within the Fastevo Media Protection Platform (Fastevo MP2). This single key is used for:

• Signing playback tokens: To authenticate and authorize access to media content (see Playback Tokens)
• Signing Engage Kit URLs: To protect preview assets when using the signed access policy (see Engage Kit Restrictions)

This unified approach ensures consistent security across all signed resources in your project.

Generating a Token Signing Key Secret

To generate a new Token Signing Key Secret, you need to perform a POST request to the following endpoint:

POST https://api.fastevo.net/api/v1/projects/mediaProtection/configurations/general/rotateTokenSigningKeySecret

This endpoint will generate a new key that will be used to sign playback tokens.

Example Request

POST https://api.fastevo.net/api/v1/projects/mediaProtection/configurations/general/rotateTokenSigningKeySecret

API Response

After successfully generating a new Token Signing Key Secret, the API will return a response with a status code of 200 and a JSON body containing the new key.

Example Success Response

{
  "tokenSigningKeySecret": "newlyGeneratedKeySecret"
}

Retrieving the Current Token Signing Key Secret

To retrieve the current Token Signing Key Secret, you need to perform a GET request to the following endpoint:

GET https://api.fastevo.net/api/v1/projects/mediaProtection/configurations/general/tokenSigningKeySecret

This endpoint will return the current key that is being used to sign playback tokens.

Example Request

GET https://api.fastevo.net/api/v1/projects/mediaProtection/configurations/general/tokenSigningKeySecret

API Response

After successfully retrieving the current Token Signing Key Secret, the API will return a response with a status code of 200 and a JSON body containing the current key.

Example Success Response

{
  "tokenSigningKeySecret": "currentKeySecret"
}