Signed playback token

How it works

Your backend mints a token (typically an HMAC signature over the video ID and an expiry) and hands it to an authorized viewer. The video host verifies the signature before serving any bytes, then the token expires, so a leaked link stops working quickly.

Why it matters

Signed tokens are how you do paid or private video without your content leaking. They keep the secret on your server, not in the browser.

Reelm gates every stream behind a short-lived signed token by default, and the open-source <reelm-player> accepts the token your backend mints. Public, signed, and private visibility are all supported.