Open stream url with authentication

[djsakisd]

Hi @jaydrogers

Is there an option to pass stream authentication data along with song URL ?
This is to support icecast authenticated streams that require user & pass details.

Normally these options are passed through headers like : headers={"Icy-MetaData": "1", "User-Agent": user_agent, 'Authorization': 'Basic %s' % encoded_credentials.decode("ascii")} )

[jaydrogers]

@danpastori might be the best person to respond to this 😃

[danpastori]

@djsakisd ,

As of right now, there is not and that's only because I've never used a protected resource like this. I'm very interested in implementing these more advanced features. Do you have an example of how you'd approach this or a server we could experiment with?

I'm working on #514 and could take a look at adding this to the new 6.0.0 version or at least design a way where it's possible.

Thanks!

[djsakisd]

Hi @danpastori and thank you for your help.

Yes i can provide you with a test url & access details to test this.

I am not sure it can be done with js though , i tried an example from here to pass the auth and i got header issues with cross origin etc.

I can do it in python with urllib or curl easily but js i think is not an option.
For icecast auth you need to pass the authentication in header, in python you can do it like the example below , in js i don't think you can modify the header (im no expert here) :

username = 'test_user'
password= 'test_pass'
credentials = ('%s:%s' % (username, password))
encoded_credentials = base64.b64encode(credentials.encode('ascii'))
request = Request(stream_url , headers={"Icy-MetaData": "1", "User-Agent": user_agent, 'Authorization': 'Basic %s' % encoded_credentials.decode("ascii")} )
stream = urlopen(request,timeout=3)

Can i email you the test url and details to your github profile email ?

[danpastori]

Awesome, that'd be great!

If it's a CORS issue, we might run into some trouble since server side requests won't have to worry about CORS. However, I'll give it my best shot.

What I'm thinking about doing is adding a "security" option to the config and then a flag to each audio object as secure: true. This way we could authenticate before the audio gets loaded into the javascript element. I'll have to mess around with it.

Feel free to shoot me an email at:
dan at serversideup dot net

I'll respond with any code to this discussion thread to help others, but will keep the credentials secret.