ApsaraVideo VOD:Reproduzir um vídeo criptografado

VidAuth for VOD

Ao reproduzir um vídeo HLS ou MP4 com criptografia privada usando o método VidAuth do ApsaraVideo VOD, se o vídeo também tiver streams não criptografados ou transcodificados no padrão, defina o tipo de criptografia como AliyunVoDEncryption para reproduzir apenas o stream com criptografia privada.

AVPVidAuthSource *authSource = [[AVPVidAuthSource alloc] init];
authSource.vid = @"Your video ID"; // Required. The video ID.
authSource.playAuth = @"<yourPlayAuth>"; // Required. The playback credential. You can obtain this credential by calling the GetVideoPlayAuth operation of ApsaraVideo VOD.
authSource.region = @"Your region"; // This parameter is deprecated in Player SDK V5.5.5.0 and later. You do not need to set the region because the player automatically parses it. For SDK versions earlier than 5.5.5.0, this parameter is required. It specifies the region where ApsaraVideo VOD is activated. Default value: cn-shanghai.
// authSource.authTimeout = 3600; // Optional. The validity period of the playback URL in seconds. This value overrides the validity period of URL authentication that is configured in the ApsaraVideo VOD console. If you do not set this parameter, the default value 3600 is used. If you set this parameter, make sure that its value is greater than the actual video duration to prevent the playback URL from expiring before the playback is complete.

// Build the config by using VidPlayerConfigGenerator.
VidPlayerConfigGenerator* config = [[VidPlayerConfigGenerator alloc]init];
[config addVidPlayerConfigByStringValue:@"EncryptType" value:@"AliyunVoDEncryption"]; // Optional. If you set the encryption type to AliyunVoDEncryption, only privately encrypted video streams are returned.
authSource.playConfig = [config generatePlayerConfig]; 
[self.player setAuthSource:authSource];

VidSts for VOD

Ao reproduzir um vídeo HLS ou MP4 com criptografia privada usando o método VidSts do ApsaraVideo VOD, se o vídeo também tiver streams não criptografados ou transcodificados no padrão, defina o tipo de criptografia como AliyunVoDEncryption para reproduzir apenas o stream com criptografia privada.

AVPVidStsSource *source = [[AVPVidStsSource alloc] init];
source.region = @"Your region"; // Required. The region where ApsaraVideo VOD is activated. Default value: cn-shanghai.
source.vid = @"Your video ID"; // Required. The video ID.
source.securityToken = @"<yourSecurityToken>"; // Required. The security token. You can obtain this token by calling the AssumeRole operation of STS.
source.accessKeySecret = @"<yourAccessKeySecret>"; // Required. The AccessKey secret of the temporary STS credential. You can obtain this credential by calling the AssumeRole operation of STS.
source.accessKeyId = @"<yourAccessKeyId>"; // Required. The AccessKey ID of the temporary STS credential. You can obtain this credential by calling the AssumeRole operation of STS.
// source.authTimeout = 3600; // Optional. The validity period of the playback URL in seconds. This value overrides the validity period of URL authentication that is configured in the ApsaraVideo VOD console. If you do not set this parameter, the default value 3600 is used. If you set this parameter, make sure that its value is greater than the actual video duration to prevent the playback URL from expiring before the playback is complete.

// Build the config by using VidPlayerConfigGenerator.
VidPlayerConfigGenerator* config = [[VidPlayerConfigGenerator alloc]init];
[config addVidPlayerConfigByStringValue:@"EncryptType" value:@"AliyunVoDEncryption"]; // Optional. If you set the encryption type to AliyunVoDEncryption, only privately encrypted video streams are returned.
source.playConfig = [config generatePlayerConfig]; 

// Set the playback source.
[self.player setStsSource:source];

LiveStsSource for live

Para reproduzir um stream ao vivo com criptografia privada em formato HLS ou FLV usando o método LiveStsSource, forneça a URL do stream e uma credencial STS, e defina o tipo de criptografia do vídeo como ENCRYPTION_TYPE_ALIVODENCRYPTION. O código a seguir apresenta um exemplo:

1. Crie uma fonte de dados.

   Passe AVPLiveStsSource como source de reprodução.

   // Create a LiveSts object and set encryptionType to ENCRYPTION_TYPE_ALIVODENCRYPTION.
   AVPLiveStsSource *liveStsSource = [[AVPLiveStsSource alloc] initWithUrl:@"Encrypted live stream URL" 
                                                               accessKeyId:@"Temporary AccessKey ID" 
                                                               accessKeySecret:@"Temporary AccessKey secret" 
                                                               securityToken:@"Security token" 
                                                               region:@"Region value" 
                                                               domain:@"Streaming domain for the URL" 
                                                               app:@"Application name for streaming" 
                                                               stream:@"Stream name for streaming" 
                                                               encryptionType:ENCRYPTION_TYPE_ALIVODENCRYPTION];// Required. Set the encryption type to ENCRYPTION_TYPE_ALIVODENCRYPTION.
    // Set the playback source.
    [self.aliPlayer setLiveStsSource:liveStsSource];
    ......
    // Prepare for playback.
    [self.aliPlayer prepare];

2. Monitore a invalidação da credencial STS.

   Durante a reprodução ao vivo com criptografia, a chave de criptografia pode ser rotacionada. Quando isso ocorre, o player usa a credencial STS para solicitar a nova chave. Monitore a validade da credencial, pois uma credencial inválida interrompe a reprodução.

    __weak typeof(self) weakSelf = self;
   [self.aliPlayer setVerifyStsCallback:^AVPStsStatus(AVPStsInfo info) {
       if (info is valid) {
           return Valid;
       }
       if (a valid STS credential can be obtained) {
           getSTS(); // This can be an asynchronous or synchronous operation.
           return Pending;
       }
       [weakSelf.aliPlayer stop];
       return Invalid;
   }];

   Nota

   Após obter uma nova credencial STS, chame o método updateLiveStsInfo para atualizá-la. Caso a tentativa de obter uma nova credencial falhe, recomendamos interromper a reprodução. Se a credencial STS não for atualizada, o player tentará usar a credencial expirada para solicitar a chave, o que pode causar artefatos visuais ou falha na reprodução.

   [self.aliPlayer updateLiveStsInfo:self.liveStsSource.accessKeyId accKey:self.liveStsSource.accessKeySecret token:self.liveStsSource.securityToken region:self.liveStsSource.region];

UrlSource for VOD

Para reproduzir um vídeo HLS ou MP4 com criptografia privada baseada em licença usando o método UrlSource, chame a operação GetPlayInfo para obter a URL de reprodução do vídeo. Após obter a URL do vídeo, acrescente o parâmetro etavirp_nuyila=1 à URL antes de passá-la ao player. Esse parâmetro pode ser inserido em qualquer posição na query string. Ele é obrigatório apenas para vídeos MP4. Para vídeos HLS, use a URL original do vídeo. A configuração do player é a mesma utilizada para reprodução de vídeos padrão. Nenhum parâmetro adicional é necessário.

Exemplo de URL de reprodução 1: https://example.aliyundoc.com/test.mp4?etavirp_nuyila=1

Exemplo de URL de reprodução 2: https://example.aliyundoc.com/test.mp4?auth_key=xxxxx&etavirp_nuyila=1

// Playback URL
NSString *playURL = @"https://example.aliyundoc.com/test.mp4?etavirp_nuyila=1";

// Player
AliPlayer *player = [[AliPlayer alloc] init];
AVPUrlSource *urlSource = [[AVPUrlSource alloc] urlWithString:playURL]; // Required. The playback URL of the video. You can call the GetPlayInfo operation to obtain the URL. For MP4 videos, you must append `etavirp_nuyila=1` to the URL. Example: https://example.aliyundoc.com/test.mp4?etavirp_nuyila=1
[player setUrlSource:urlSource];
[player prepare];

// List player
AliListPlayer *listPlayer = [[AliListPlayer alloc] init];
[listPlayer addUrlSource:playURL uid:UUIDString];
[listPlayer moveTo:@"uid"];

// Preload
AliMedialoader *mediaLoader = [AliMediaLoader shareInstance];
[mediaLoader load:playURL duration:1000];

VidAuth for VOD

Ao reproduzir um vídeo criptografado com criptografia padrão HLS pelo método VidAuth do ApsaraVideo VOD, caso o vídeo também possua streams não criptografados ou transcodificados no padrão, defina o tipo de criptografia como HLSEncryption para reproduzir somente o stream com criptografia padrão HLS. Veja o exemplo de código a seguir:

AVPVidAuthSource *authSource = [[AVPVidAuthSource alloc] init];
authSource.vid = @"Your video ID"; // Required. The video ID.
authSource.playAuth = @"<yourPlayAuth>"; // Required. The playback credential. You can obtain this credential by calling the GetVideoPlayAuth operation of ApsaraVideo VOD.
authSource.region = @"Your region"; // This parameter is deprecated in Player SDK V5.5.5.0 and later. You do not need to set the region because the player automatically parses it. For SDK versions earlier than 5.5.5.0, this parameter is required. It specifies the region where ApsaraVideo VOD is activated. Default value: cn-shanghai.
// authSource.authTimeout = 3600; // Optional. The validity period of the playback URL in seconds. This value overrides the validity period of URL authentication that is configured in the ApsaraVideo VOD console. If you do not set this parameter, the default value 3600 is used. If you set this parameter, make sure that its value is greater than the actual video duration to prevent the playback URL from expiring before the playback is complete.

// Build the config by using VidPlayerConfigGenerator.
VidPlayerConfigGenerator* config = [[VidPlayerConfigGenerator alloc]init];
[config addVidPlayerConfigByStringValue:@"EncryptType" value:@"HLSEncryption"]; // Optional. If you set this parameter to HLSEncryption, only video streams that are encrypted by using HLS standard encryption are returned.
[config setHlsUriToken: @"token"]; // Optional. Use this parameter to pass the MtsHlsUriToken (user token) for verification.
source.playConfig = [config generatePlayerConfig];

// Set the playback source.
[self.player setAuthSource:authSource];

VidSts for VOD

Ao reproduzir um vídeo criptografado com criptografia padrão HLS pelo método VidSts do ApsaraVideo VOD, caso o vídeo também possua streams não criptografados ou transcodificados no padrão, defina o tipo de criptografia como HLSEncryption para reproduzir somente o stream com criptografia padrão HLS. Veja o exemplo de código a seguir:

AVPVidStsSource *source = [[AVPVidStsSource alloc] init];
source.vid = @"Your video ID"; // Required. The video ID.
source.region = @"Your region"; // Required. The region where ApsaraVideo VOD is activated. Default value: cn-shanghai.
source.securityToken = @"<yourSecurityToken>"; // Required. The security token. You can obtain this token by calling the AssumeRole operation of STS.
source.accessKeySecret = @"<yourAccessKeySecret>"; // Required. The AccessKey secret of the temporary STS credential. You can obtain this credential by calling the AssumeRole operation of STS.
source.accessKeyId = @"<yourAccessKeyId>"; // Required. The AccessKey ID of the temporary STS credential. You can obtain this credential by calling the AssumeRole operation of STS.
// source.authTimeout = 3600; // Optional. The validity period of the playback URL in seconds. This value overrides the validity period of URL authentication that is configured in the ApsaraVideo VOD console. If you do not set this parameter, the default value 3600 is used. If you set this parameter, make sure that its value is greater than the actual video duration to prevent the playback URL from expiring before the playback is complete.

// Build the config by using VidPlayerConfigGenerator.
VidPlayerConfigGenerator* config = [[VidPlayerConfigGenerator alloc]init];
[config addVidPlayerConfigByStringValue:@"EncryptType" value:@"HLSEncryption"]; // Optional. If you set this parameter to HLSEncryption, only video streams that are encrypted by using HLS standard encryption are returned.
[config setHlsUriToken: @"token"]; // Optional. Use this parameter to pass the MtsHlsUriToken (user token) for verification.
source.playConfig = [config generatePlayerConfig]; 

// Set the playback source.
[self.player setStsSource:source];

UrlSource

Ao usar o método UrlSource para reproduzir um stream com criptografia padrão HLS, a configuração do player é idêntica à de reprodução de um vídeo padrão. Nenhum parâmetro adicional é necessário.

Recomendamos o uso do ApsaraVideo VOD. Chame a operação GetPlayInfo para obter a URL de reprodução do vídeo e passe-a ao player.

AVPUrlSource *urlSource = [[AVPUrlSource alloc] urlWithString:url]; // The playback URL of the live or on-demand stream with HLS standard encryption.
[self.player setUrlSource:urlSource];

VidSts for VOD

Primeiro, consulte Configure DRM Encryption for VOD para configurar a criptografia DRM. Ao reproduzir um vídeo com criptografia DRM pelo método VidSts do ApsaraVideo VOD, a configuração é idêntica à de reprodução de um vídeo padrão. Nenhum parâmetro adicional é necessário.

AVPVidStsSource *source = [[AVPVidStsSource alloc] init];
source.region = @"Your region"; // Required. The region where ApsaraVideo VOD is activated. Default value: cn-shanghai.
source.vid = @"Your video ID"; // Required. The video ID.
source.securityToken = @"<yourSecurityToken>"; // Required. The security token. You can obtain this token by calling the AssumeRole operation of STS.
source.accessKeySecret = @"<yourAccessKeySecret>"; // Required. The AccessKey secret of the temporary STS credential. You can obtain this credential by calling the AssumeRole operation of STS.
source.accessKeyId = @"<yourAccessKeyId>"; // Required. The AccessKey ID of the temporary STS credential. You can obtain this credential by calling the AssumeRole operation of STS.
// source.authTimeout = 3600; // Optional. The validity period of the playback URL in seconds. This value overrides the validity period of URL authentication that is configured in the ApsaraVideo VOD console. If you do not set this parameter, the default value 3600 is used. If you set this parameter, make sure that its value is greater than the actual video duration to prevent the playback URL from expiring before the playback is complete.
 // Set the playback source.
 [self.player setStsSource:source]

LiveStsSource for live

Primeiro, consulte Configure DRM Encryption for Live Streaming para configurar a criptografia DRM. Para reproduzir um stream ao vivo com criptografia DRM pelo método LiveStsSource, forneça a URL do stream e uma credencial STS, e defina o tipo de criptografia do vídeo como ENCRYPTION_TYPE_FAIRPLAY. Veja o exemplo de código a seguir:

1. Crie uma fonte de dados.

   Passe AVPLiveStsSource como source de reprodução.

   // Create a LiveSts object and set encryptionType to ENCRYPTION_TYPE_FAIRPLAY.
   AVPLiveStsSource *liveStsSource = [[AVPLiveStsSource alloc] initWithUrl:@"Encrypted live stream URL" 
                                                               accessKeyId:@"Temporary AccessKey ID" 
                                                               accessKeySecret:@"Temporary AccessKey secret" 
                                                               securityToken:@"Security token" 
                                                               region:@"Region value" 
                                                               domain:@"Streaming domain for the URL" 
                                                               app:@"Application name for streaming" 
                                                               stream:@"Stream name for streaming" 
                                                               encryptionType:ENCRYPTION_TYPE_FAIRPLAY];// Required. Set the encryption type to ENCRYPTION_TYPE_FAIRPLAY.
    // Set the playback source.
    [self.aliPlayer setLiveStsSource:liveStsSource];
    ......
    // Prepare for playback.
    [self.aliPlayer prepare];

2. Monitore a invalidação da credencial STS.

   Durante a reprodução ao vivo com criptografia, a chave de criptografia pode ser rotacionada. Quando isso ocorre, o player usa a credencial STS para solicitar a nova chave. É necessário monitorar a validade da credencial, pois uma credencial inválida interrompe a reprodução.

    __weak typeof(self) weakSelf = self;
   [self.aliPlayer setVerifyStsCallback:^AVPStsStatus(AVPStsInfo info) {
       if (info is valid){
           return Valid;
       }
       if(a valid STS credential can be obtained){
           getSTS(); // This can be an asynchronous or synchronous operation.
           return Pending;
       }
       [weakSelf.aliPlayer stop];
       return Invalid;
   }];

   Nota

   Após obter uma nova credencial STS, chame o método updateLiveStsInfo para atualizá-la. Se a tentativa de obter uma nova credencial falhar, recomendamos interromper a reprodução. Caso a credencial STS não seja atualizada, o player tentará usar a credencial expirada para solicitar a chave, o que pode causar artefatos visuais ou falha na reprodução.

   [self.aliPlayer updateLiveStsInfo:self.liveStsSource.accessKeyId accKey:self.liveStsSource.accessKeySecret token:self.liveStsSource.securityToken region:self.liveStsSource.region];

UrlSource for FairPlay

Primeiro, consulte Live Packaging para configure a criptografia DRM. Ao reproduzir um vídeo com criptografia DRM pelo método UrlSource, além de utilizar a mesma configuração de um vídeo comum, implemente também a interface AVPDrmDelegate para obter o certificado FairPlay e a chave do vídeo.

@interface SimplePlayerViewController()<AVPDrmDelegate>
@end
- (void)viewDidLoad {
    self.player = [[AliPlayer alloc] init];
    self.player.playerView = self.avpPlayerView.playerView;
    self.player.drmDelegate = self;
    if(the current URL is for a third-party DRM video){
        [self.player setPreferPlayerName:@"AppleAVPlayer"];
    }
    //...
}

// Implement the AVPDrmDelegate.requestCert and requestKey interfaces. Obtain the certificate and key by following the documentation from your third-party DRM provider.
// The following example shows how to obtain a certificate and key from PallyCon. For more information, see https://pallycon.com/docs/en/multidrm.
#pragma mark AVPDrmDelegate
- (NSData *)requestCert:(AliPlayer *)player {
    // You can also pre-fetch and cache the certificate to reduce startup latency. If you do, return the cached certificate here.
    // If the certificate data is invalid, the player reports an error. You can also check the console for more error information.
    // Replace SITE_ID with your own site ID.
    const char* url = "https://license.pallycon.com/ri/fpsKeyManager.do?siteId=SITE_ID";

    // Request the FairPlay certificate by using an HTTP GET request as required by the DRM provider.
    // Avoid blocking this thread for an extended period.
    NSData* responseData = [self performAsyncHttpGet:url];
    if (!responseData) {
        // Handle the exception. The player will report an error.
        return nil;
    }
    
    // The response data must be Base64-decoded before being returned to the player.
    NSString *base64String = [[NSString alloc] initWithData:responseData encoding:NSUTF8StringEncoding];
    return [self decodeBase64String:base64String];
}

- (NSData *)requestKey:(AliPlayer *)player data:(NSData *)data {
    // Request the key information by using an HTTP POST request as required by the DRM provider.
    NSString *urlString = [NSString stringWithFormat:@"https://license-global.pallycon.com/ri/licenseManager.do"];
    const char *url = [urlString UTF8String];

    // Replace TOKEN_ID with your own token ID.
    NSString *headerString = [NSString stringWithFormat:@"pallycon-customdata-v2: TOKEN_ID"];
    const char* headers[] = {
        [headerString UTF8String]
    };
    int headerCount = sizeof(headers) / sizeof(headers[0]);

    // Avoid blocking this thread for an extended period.
    NSData* responseData = [self performAsyncHttpPost:url
                                             headers:headers
                                         headerCount:headerCount
                                                data:data];
    if (!responseData) {
        // Handle the exception. The player will report an error.
        return nil;
    }

    // If your token's response_format is set to `original`, return the response directly. Otherwise, you must parse the response before returning it.
    // For more information, see https://pallycon.com/docs/en/multidrm/license/license-token/#token-json.
    // The format and structure of the response can vary significantly among providers. Check the response carefully. If the response cannot be used for decryption, the player reports an error.
    return [[NSString alloc] initWithData:responseData encoding:NSUTF8StringEncoding];
}