URL Signing

(QW.QwiltUrlsigning)

Overview

This is a private feature developed by Qwilt, and supported for Self Service Media Delivery.

You can use Qwilt URL signing for authorization, to safeguard against unauthorized access to your content that is delivered through the Qwilt CDN.

The URL signing feature lets you set the insertion method and shared secret key. This feature is one component of the overall implementation of Qwilt URL Signing. See How to Implement Qwilt URL Signing.

Use the Keys Manager API to upload shared secret keys to the Qwilt secure secret store.

Example

In this example, the first-path-segment insertion method is defined.

{
  "generic-metadata-type": "MI.PrivateFeature.Qwilt.QW.QwiltUrlsigning",
  "generic-metadata-value": {
    "enforce": true,
    "insertion-method": "first-path-segment",
    "keySet": 30
  }
}

Supported Properties

Field	Valid Values	Description
enforce	true, false	A boolean to enable or disable URL signing enforcement.
insertion-method	first-path-segment, uri-param	A string specifying how the token is inserted into the URL.
keyset	The keyset ID.	An integer representing the ID of the keyset used for signing. You can retrieve the Keyset ID with the Get Keys function of the Keys Manager API.