[Work In Progress] AMWA IS-10 NMOS Authorization Specification

What does it do?

• Allows an API server to accept or reject requests depending on what a client is authorized to do

Why does it matter?

• Security in the control plane is essential
  • Best practice is to limit what clients can do

How does it work?

• Control client provides credentials and gets an access token
  • Sends token with API requests
• Based on JSON Web Tokens and OAuth 2.0
• Encryption is a prerequisite (see BCP-003-01)

Getting started

There is more information about the NMOS Specifications and their GitHub repos at https://specs.amwa.tv/nmos.