VdoCipherJWT (JSON Web Token)
A JWT (JSON Web Token) is a compact, signed token that encodes claims such as who a user is and what they may access. In video platforms, a backend issues a short-lived JWT to authorize playback; the video service verifies its signature and claims before serving a manifest or DRM license, keeping entitlement enforcement server-side.
What is a JWT?
A JWT (JSON Web Token) is a compact, cryptographically signed token that carries claims, small pieces of information such as who the user is, what they can access, and when the token expires. It is a standard way to pass verified identity and permissions between systems.
How JWTs Authorize Playback
Your backend creates a JWT after checking that a viewer is logged in and owns the content, signs it with a secret, and gives it to the player. When the player requests a video manifest or DRM license, the video service verifies the signature and reads the claims, expiry, entitled video, viewer, before responding. Because the token is signed, it cannot be tampered with without detection.
Why It Matters
- Stateless verification: The service validates the token without a database lookup.
- Short-lived: Expiry limits the damage if a token is captured.
- Server-side entitlement: Access rules live in your backend, not the client.
For Developers
JWTs are the common building block behind token and OTP video authentication. Keep them short-lived, sign them securely, and never expose the signing secret in client code.