Windows Phone 8 can't play video on website that requires login (behind authentication)

Forums › Windows Phone and Windows Mobile › Windows Phone 8 can't play video on website that requires login (behind authentication)

Ragnor

8027 posts

Uber Geek
+1 received by user: 387

Trusted

Subscriber

Topic # 113415 16-Jan-2013 14:05

My co-worker has ran into a weird issue/limitation on his new Nokia Lumia 920 when trying to play a video on a website we are working on.

The website requires login and logged in users can watch video (mp4 and ogg) via html5 (with flash fall back) using the VideoJS player.

Using wireshark it seems his phone is unable to play the video because IE10 mobile hands the video to the media app but doesn't pass the cookie/session auth.

Even a url straight to the video file eg: somesite/private/video/video123.mp4 doesn't work if the path is protected by authentication when the user is logged becase the media app simply doesn't get passed the credentials.

This seems to be a major oversight and limitation to me. Tested multiple browsers on desktop, plus android, iphone and ipad which all work fine.

Anyone seen anything like this?

gzt

10187 posts

Uber Geek
+1 received by user: 1560

Reply # 745714 16-Jan-2013 14:39

No idea but might be interesting to try a non videojs based player. Maybe videojs is not negotiating correctly.

Ragnor

8027 posts

Uber Geek
+1 received by user: 387

Trusted

Subscriber

Reply # 745721 16-Jan-2013 14:58

gzt: No idea but might be interesting to try a non videojs based player. Maybe videojs is not negotiating correctly.

Yeah we tried that even opening a url straight to the file on the server in the browser doesn't work eg: if I go to somesite/private/video/video123.mp4 and the path requires authentication (cookie) it won't work.

IE10 mobile seems to offload to the media app which makes a http request without the auth cookie needed (so just gets a redirect to login).

Had to add a nasty work around...
Detect IE10 mobile reqest to the video controller/url and redirect to another special controller that uses a server side validated unique slug/key in the url that doesn't use the normal authentication.