REST API Security Documentation - mekya/antmedia-doc GitHub Wiki

This guide explains how to Control REST API Security on Ant Media Server. You can able to secure your REST Services with IP Filter feature.

If you want some IP addresses to be able to access REST APIs, you should add IP’s or IP Ranges in Dashboard > {Application} > Settings > IP Filtering Settings in panel.

If 127.0.0.1 is deleted, requests in the server(localhost) is disabled. People in the same network but in different machines still cannot access the REST API when 127.0.0.1 is on the list.

If you want to remove REST Filter in AMS, you should delete below codes in SERVER_FOLDER/webapp/Application(LiveApp or etc.)/WEB-INF/web.xml

<filter>
<filter-name>AuthenticationFilter</filter-name>
<filter-class>io.antmedia.console.rest.AuthenticationFilter</filter-class>
</filter>

<filter-mapping>
<filter-name>AuthenticationFilter</filter-name>`
<url-pattern>/rest/*</url-pattern>
</filter-mapping>

If you delete AuthenticationFilter code block in Application, every one access your REST API.