Skip to content

Extend token-based security doc with optiview claim#634

Open
kamil-al wants to merge 2 commits into
mainfrom
jwt-optiview-claim
Open

Extend token-based security doc with optiview claim#634
kamil-al wants to merge 2 commits into
mainfrom
jwt-optiview-claim

Conversation

@kamil-al
Copy link
Copy Markdown
Contributor

@kamil-al kamil-al commented May 8, 2026

No description provided.

@kamil-al kamil-al requested a review from a team as a code owner May 8, 2026 15:50
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 8, 2026

PR Preview Action v1.8.1

QR code for preview link

🚀 View preview at
https://THEOplayer.github.io/documentation/pr-preview/pr-634/

Built to branch gh-pages at 2026-05-11 08:09 UTC.
Preview will be ready when the GitHub Pages deployment is complete.

@kamil-al kamil-al force-pushed the jwt-optiview-claim branch from 87ad32c to f5b087e Compare May 8, 2026 15:56
@kamil-al kamil-al changed the title OLIVE-243 Extend token-based security doc with optiview claim Extend token-based security doc with optiview claim May 8, 2026
Copy link
Copy Markdown
Collaborator

@MattiasBuelens MattiasBuelens left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Run Prettier with npm run format


When a token is rejected, the CDN returns one of the following error codes:

| Code | Description |
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do not add the error codes to the docs. Please rebase and force push the commit

```

### Tracking token usage in Lens

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please remove any references to lens.

The token is signed with a shared secret (HS256/HS512) or a public/private key pair (RS256/RS512) that you provide when enabling the feature.

```http
Authorization: Bearer <JWT>
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

maybe also add the query parameter method?

?token=<jwt>

| --- | --- | --- |
| `sub` | string | Subject. If present, a SHA-256 hash of this value is used as the viewer identity in analytics. |
| `iss` | string | Issuer. Identifies the system that created the token. |
| `aud` | string | Audience. Identifies the intended recipients of the JWT per [RFC 7519 §4.1.3](https://datatracker.ietf.org/doc/html/rfc7519#section-4.1.3). See [Tracking token usage in Lens](#tracking-token-usage-in-lens). |
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

remove lens reference

@MattiasBuelens MattiasBuelens self-requested a review May 11, 2026 14:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants