AMWA IS-10 NMOS Authorization Specification
What does it do?
- Allows an API server to accept or reject requests depending on what a client is authorized to do
Why does it matter?
- Security in the control plane is essential
- Best practice is to limit what clients can do
How does it work?
- Control client provides credentials and gets an access token
- Sends token with API requests
- Based on JSON Web Tokens and OAuth 2.0
- Encryption is a prerequisite (see BCP-003-01)
Getting started
There is more information about the NMOS Specifications and their GitHub repos at https://specs.amwa.tv/nmos.