Jellyfin Forum
Stream url security - Printable Version

+- Jellyfin Forum (https://forum.jellyfin.org)
+-- Forum: Support (https://forum.jellyfin.org/f-support)
+--- Forum: General Questions (https://forum.jellyfin.org/f-general-questions)
+--- Thread: Stream url security (/t-stream-url-security)



Stream url security - mrx - 2025-03-11

hello,

any solution to hide source path from url from mediaSources, I use external link for live tv
[Image: image.png]

also, I can play extracted stream url from other applications, can't disable that or just disable simultaneously stream play per user ?
[Image: image.png]

thanks


RE: Stream url security - TheDreadPirate - 2025-03-11

If you forced transcoding of live TV playback, that would change the media source to the jellyfin server.


RE: Stream url security - mrx - 2025-03-11

thanks,
what about the second issue ?


RE: Stream url security - TheDreadPirate - 2025-03-11

I don't see a way to avoid it. AFAICT, Jellyfin live TV stream URLs extracted and played in another player (like MPV or VLC) don't count toward any session limits.

HOWEVER, those live TV sessions are only valid as long as the actual Jellyfin is still streaming. I closed the live TV session in Jellyfin and MPV stopped playing the stream once it reached the end of what it had buffered.


RE: Stream url security - mrx - 2025-03-12

still working for me, even when I close the live TV session same as movies and and tvshows btw


RE: Stream url security - TheDreadPirate - 2025-03-12

My statement only applies if you've forced transcoding, or it is transcoding/remuxing out of necessity. In my case I was remuxing my live TV stream. Since clients connect to the server when live TV is remuxed/transcoded, once the Jellyfin client stopped playback MPV ran out of data to play since all the files were cleared. If your Jellyfin client is directly playing the live TV stream and that user extracted the source stream URL, there is nothing you can do about that.

Other than forcing transcoding for all live TV, which would result in what I described above.


RE: Stream url security - mrx - 2025-03-13

thanks, I'll check that

I have an other issue, when I force transcoding, I get

thanks, I'll check that

I have an other issue, when I force transcoding, I get "Playback failed due to a fatal player error."

2025-03-13 22:13:45.672 +01:00] [INF] User policy for "Jellyfin". EnablePlaybackRemuxing: True EnableVideoPlaybackTranscoding: True EnableAudioPlaybackTranscoding: True
[2025-03-13 22:13:47.296 +01:00] [INF] Playback stopped reported by app "Jellyfin" "10.10.6" playing "MBC| MBC DRAMA FHD". Stopped at "0" ms
[2025-03-13 22:13:47.298 +01:00] [INF] Live stream "2ea91ac9c65cb3a06742110164cfad7f" consumer count is now 0
[2025-03-13 22:13:47.298 +01:00] [INF] Closing live stream "e2329f4997b378e64ccf8fa396deb76e_af999c25a00715699361240d4c6c7a53_2ea91ac9c65cb3a06742110164cfad7f"
[2025-03-13 22:13:47.299 +01:00] [INF] Closing "LiveStream"
[2025-03-13 22:13:47.299 +01:00] [INF] Live stream "e2329f4997b378e64ccf8fa396deb76e_af999c25a00715699361240d4c6c7a53_2ea91ac9c65cb3a06742110164cfad7f" closed successfully
[2025-03-13 22:13:47.779 +01:00] [INF] Authentication request for "radmin" has been denied (IP: "....72.141").
[2025-03-13 22:13:47.780 +01:00] [ERR] Error processing request: "Invalid username or password entered". URL "POST" "/Users/authenticatebyname".
[2025-03-13 22:13:57.782 +01:00] [INF] Authentication request for "radmin" has been denied (IP: "....72.141").
[2025-03-13 22:13:57.782 +01:00] [ERR] Error processing request: "Invalid username or password entered". URL "POST" "/Users/authenticatebyname".
[2025-03-13 22:14:07.784 +01:00] [INF] Authentication request for "radmin" has been denied (IP: "....72.141").
[2025-03-13 22:14:07.785 +01:00] [ERR] Error processing request: "Invalid username or password entered". URL "POST" "/Users/authenticatebyname".
[2025-03-13 22:14:18.085 +01:00] [INF] Authentication request for "radmin" has been denied (IP: "....72.141").
[2025-03-13 22:14:18.085 +01:00] [ERR] Error processing request: "Invalid username or password entered". URL "POST" "/Users/authenticatebyname".
[2025-03-13 22:14:28.087 +01:00] [INF] Authentication request for "radmin" has been denied (IP: "....72.141").
[2025-03-13 22:14:28.087 +01:00] [ERR] Error processing request: "Invalid username or password entered". URL "POST" "/Users/authenticatebyname".
[2025-03-13 22:14:38.089 +01:00] [INF] Authentication request for "radmin" has been denied (IP: "....72.141").
[2025-03-13 22:14:38.089 +01:00] [ERR] Error processing request: "Invalid username or password entered". URL "POST" "/Users/authenticatebyname".
[2025-03-13 22:14:48.091 +01:00] [INF] Authentication request for "radmin" has been denied (IP: "....72.141").
[2025-03-13 22:14:48.092 +01:00] [ERR] Error processing request: "Invalid username or password entered". URL "POST" "/Users/authenticatebyname".
[2025-03-13 22:14:58.093 +01:00] [INF] Authentication request for "radmin" has been denied (IP: "....72.141").
[2025-03-13 22:14:58.094 +01:00] [ERR] Error processing request: "Invalid username or password entered". URL "POST" "/Users/authenticatebyname".
[2025-03-13 22:15:08.095 +01:00] [INF] Authentication request for "radmin" has been denied (IP: "....72.141").
[2025-03-13 22:15:08.096 +01:00] [ERR] Error processing request: "Invalid username or password entered". URL "POST" "/Users/authenticatebyname".
[2025-03-13 22:15:18.339 +01:00] [INF] Authentication request for "radmin" has been denied (IP: "....72.141").
[2025-03-13 22:15:18.339 +01:00] [ERR] Error processing request: "Invalid username or password entered". URL "POST" "/Users/authenticatebyname".
[2025-03-13 22:15:28.341 +01:00] [INF] Authentication request for "radmin" has been denied (IP: "....72.141").
[2025-03-13 22:15:28.341 +01:00] [ERR] Error processing request: "Invalid username or password entered". URL "POST" "/Users/authenticatebyname".
[2025-03-13 22:15:38.343 +01:00] [INF] Authentication request for "radmin" has been denied (IP: "....72.141").
[2025-03-13 22:15:38.344 +01:00] [ERR] Error processing request: "Invalid username or password entered". URL "POST" "/Users/authenticatebyname".
[2025-03-13 22:15:48.345 +01:00] [INF] Authentication request for "radmin" has been denied (IP: "....72.141").
[2025-03-13 22:15:48.346 +01:00] [ERR] Error processing request: "Invalid username or password entered". URL "POST" "/Users/authenticatebyname".
[2025-03-13 22:15:58.348 +01:00] [INF] Authentication request for "radmin" has been denied (IP: "....72.141").
[2025-03-13 22:15:58.348 +01:00] [ERR] Error processing request: "Invalid username or password entered". URL "POST" "/Users/authenticatebyname".
[2025-03-13 22:16:08.349 +01:00] [INF] Authentication request for "radmin" has been denied (IP: "....72.141").
[2025-03-13 22:16:08.349 +01:00] [ERR] Error processing request: "Invalid username or password entered". URL "POST" "/Users/authenticatebyname".
[2025-03-13 22:16:18.579 +01:00] [INF] Authentication request for "radmin" has been denied (IP: "....72.141").
[2025-03-13 22:16:18.580 +01:00] [ERR] Error processing request: "Invalid username or password entered". URL "POST" "/Users/authenticatebyname".
[2025-03-13 22:16:28.581 +01:00] [INF] Authentication request for "radmin" has been denied (IP: "....72.141").
[2025-03-13 22:16:28.582 +01:00] [ERR] Error processing request: "Invalid username or password entered". URL "POST" "/Users/authenticatebyname".
[2025-03-13 22:16:38.583 +01:00] [INF] Authentication request for "radmin" has been denied (IP: "....72.141").
[2025-03-13 22:16:38.584 +01:00] [ERR] Error processing request: "Invalid username or password entered". URL "POST" "/Users/authenticatebyname".
[2025-03-13 22:16:48.585 +01:00] [INF] Authentication request for "radmin" has been denied (IP: "....72.141").
[2025-03-13 22:16:48.585 +01:00] [ERR] Error processing request: "Invalid username or password entered". URL "POST" "/Users/authenticatebyname"


RE: Stream url security - TheDreadPirate - 2025-03-13

Fix whatever authentication issue is going on, which may or may not be related. Then replicate the issue again and share your full jellyfin log via privatebin.net.