Implementing Authenticated API Calls

(c) AMWA 2021, CC Attribution-NoDerivatives 4.0 International (CC BY-ND 4.0)

Overview

This section details how to add API security to your NMOS Node and Controller implementations.

Node to Authorization Server Interactions

This section covers: - Registering your Node as a Client of the Authorization Server - Obtaining Access Tokens for authenticated API calls

Node to Registry Interactions (IS-04)

This section covers: - Authenticated registration of a Node with the NMOS Registry

Controller to Authorization Server Interactions

This section covers: - Registering your Controller as a Client of the Authorization Server - Obtaining Access Tokens for authenticated API calls

Controller to Registry (IS-04) and Node Interactions (IS-05, IS-08)

This section covers: - Authenticated querying of the Registry - Authenticated connection management - Authenticated audio channel mapping

Event and Tally Interactions (IS-07)

This section covers: - Authenticated WebSocket connections

Validating Access Tokens

This section covers: - Validation of a received Access Token