# Publish Tokens To [broadcast](https://docs-preview.optiview.dolby.com/pr-860/millicast/broadcast.md) a real-time stream the connection must be authenticated with a valid **publish token**. The OptiView Real-time platform uses token authentication for publishing to prevent unauthorized distribution of streaming content from your OptiView Real-time account. Without a valid token, publish requests will be rejected by the servers. This guide outlines the following: 1. [How-to Create a Publish Token in the Streaming Dashboard](#create-a-publish-token) 2. [How-to Manage Publish Tokens](#managing-and-editing-existing-publish-tokens) 3. [Deleting a Publish Token](#deleting-a-token) 4. [Using the Token REST API](#using-the-token-api) > **Subscribe Tokens** > > To restrict who may *view* a stream, you would use a separate [subscribe token](https://docs-preview.optiview.dolby.com/pr-860/millicast/subscribe-tokens.md) after enabling the **Secure Viewer** setting. ## Create a publish token Log into your [OptiView Real-time Streaming Account](https://streaming.dolby.io/signin) and select **Live Broadcast** from the left menu. This is where you can view and manage all of your *Publish tokens*. ![](/pr-860/assets/images/tokens-main-8d1bfa5fcaa7d9990558456bc81e64c6.png) Select the `Create (+)` button. This opens a pop-up window with options for configuring your new *Publish token*. Each option can be changed again later after the token has been created. ![](/pr-860/assets/images/token-create-4975c967581908f3de52838bbb82d750.jpg) ### Basic settings Let's go over each section in a bit more detail: * **Token label** gives you a naming system you can use to keep track of your tokens. You can use it to label what the tokens are used for by application, event, user or to differentiate testing from production use. * **Record broadcast** when enabled will allow you to record broadcasts using this token. After a broadcast is completed, you can find the recordings in the [Recordings](https://docs-preview.optiview.dolby.com/pr-860/millicast/distribution/stream-recordings.md) section of the dashboard. This feature can incur additional charges. * **Secure viewer** has two settings, "*No Restrictions*" (default) which allow anyone with the link to your viewer to watch a live broadcast without requiring authorization. The alternate setting, "*Token Required*", restricts your broadcast to only allow viewing the stream if provided a valid [Subscribe Token](https://docs-preview.optiview.dolby.com/pr-860/millicast/subscribe-tokens.md). * **Add stream names** allows you to indicate how many broadcasts, called "*Token Streams*", you want to be managed by this *Publishing token*. A token can manage an unlimited number of streams as long as each has a unique alphanumeric name. Stream names are case sensitive. * **Create stream name** allows you to specify a specific stream name such as *"MainCameraFeed"*. * **Create random stream names** will generate a stream name dynamically to insure uniqueness, such as *"hl7iqst"*. * **Allow any stream name** gives your token the ability to use ANY arbitrary stream name in the publishing path. The only rule to note here is that anyone using their own viewer must know what stream name the broadcaster is using in order to view the stream correctly. > **Stream names are required to broadcast** > > To publish a stream, a *stream name* is required. Unless the Publish Token is set to **Allow any stream name**, the stream name must be equal to one of the created or generated stream names. * **Temporary token** allows you to specify an expiration date for the token. Click on the arrows above and below each section respectively, to set the expiration date. Once the date and time have passed, the token will automatically become invalid. * If a token expires in the middle of a broadcast, the broadcast will continue until the publisher ends it or if the [Stop an active stream](https://docs-preview.optiview.dolby.com/pr-860/millicast/api/stream-stop-stream.md) API is called for that token. The Temporary token feature prevents expired tokens from being able to *start* new streams, but doesn't impact already running streams. ![](/pr-860/assets/images/expiredate-8da0bae9cdb0d02ac7550e2ed5e7bf8e.jpg) > **Temporary Publish tokens are recommended** > > Having an expiration date can prevent old or exposed tokens from becoming a long term vulnerability by limiting the duration they are valid. Tokens can always be deleted manually but if you know you only need the token for a set period of time it is more secure to create a token that is only valid for that duration. ### Advanced settings You will also see an **Advanced tab** at the top of the token creation interface; in this tab, you can configure more advanced settings. * [Allowed Origins:](https://docs-preview.optiview.dolby.com/pr-860/millicast/distribution/access-control/allowed-origins.md#allowed-origins) If specified, only the domains listed will be allowed in requests to [Director API](https://docs-preview.optiview.dolby.com/pr-860/millicast/api/director/director-publish.md). Wildcard subdomains are also allowed, such as *"\*.demo.com"*. When unspecified (empty), there are no domain restrictions. * [IP Filter Type:](https://docs-preview.optiview.dolby.com/pr-860/millicast/distribution/access-control/allowed-origins.md#ip-filters) * **Allowed IP Addresses:** Allows you to specify multiple IPv4 addresses or CIDR notated network blocks. If specified, the token will only be usable by those addresses. * **Bind IPs on usage:** If specified, Bind IPs on usage will bind the token to the first *X* IP addresses used with a token in requests to [Director API](https://docs-preview.optiview.dolby.com/pr-860/millicast/api/publish-token-v-1-read-token.md), thus restricting the token to those IP addresses without them being known beforehand. Mutually exclusive with the *AllowedIpAddresses* option. Not currently supported with RTMP. * [Cluster region:](https://docs-preview.optiview.dolby.com/pr-860/millicast/distribution/multi-region-support.md) Specifies the cluster used for streaming. This setting is configured to use the default regional cluster set for the account. If `Auto` is selected, the regional cluster will be selected based on the publisher's location. * [Geo-Blocking:](https://docs-preview.optiview.dolby.com/pr-860/millicast/distribution/access-control/geo-blocking.md) Enables blocking by location at a country level for this specific Token. * [Multisource:](https://docs-preview.optiview.dolby.com/pr-860/millicast/broadcast/multi-source-broadcasting.md) Enables streaming multiple feeds at once with one Publish token and Stream name combination, allowing for [Multi-view playback](https://docs-preview.optiview.dolby.com/pr-860/millicast/playback/multiview.md). * [Thumbnail previews:](https://docs-preview.optiview.dolby.com/pr-860/millicast/webhooks/thumbnail.md) Enables previewing a thumbnail image of your video stream. Thumbnails are delivered via a webhook. After you have successfully created your token, it will be displayed in a scrollable list. ![](/pr-860/assets/images/token-first-31920ae40935346eb936caf3b77fda8f.png) Once created, your Publish token can be used to broadcast in a variety of different ways using different [hardware](https://docs-preview.optiview.dolby.com/pr-860/millicast/hardware-encoders.md) and [software](https://docs-preview.optiview.dolby.com/pr-860/millicast/software-encoders.md) solutions. To learn more about how to broadcast with your Publish token, explore [the Broadcast guide](https://docs-preview.optiview.dolby.com/pr-860/millicast/broadcast.md). ## Managing and editing existing publish tokens Once a Publish token is created, it is displayed on the **Live Broadcast** page. From this page, you can [start a broadcast using the Dashboard Broadcaster](https://docs-preview.optiview.dolby.com/pr-860/millicast/getting-started/using-the-dashboard.md#b-start-broadcast), enable or disable, delete, or edit the settings for each Publish token. ![](/pr-860/assets/images/tempsnip-4b615d6473f84c1cb82d50a62b23f475.png) Even though the *quick action menu* provides you with a certain level of token control, the real control lies within the *manage* UI for each token. To open the manage view, simply click the **Token Name** on the item’s action menu. ![](/pr-860/assets/images/dashboard-tabs-40a5546ee3bfdcc95eee6b73509bb9fb.png) Once opened, you will see multiple tabs to explore. 1. Token details - token identification, security, and overall feature capabilities 2. Token streams - configure stream names that the token can publish 3. Publishing - settings for configuring broadcast encoders such as [RTMP](https://docs-preview.optiview.dolby.com/pr-860/millicast/broadcast/rtmp-and-rtmps.md), [SRT](https://docs-preview.optiview.dolby.com/pr-860/millicast/broadcast/srt.md), and [WebRTC](https://docs-preview.optiview.dolby.com/pr-860/millicast/broadcast/webrtc-and-whip.md) settings 4. Distribution - configuration for distribution content such as [Geo-cascading](https://docs-preview.optiview.dolby.com/pr-860/millicast/distribution/multi-region-support/geo-cascading.md) and [Re-streaming](https://docs-preview.optiview.dolby.com/pr-860/millicast/distribution/re-streaming.md) 5. Playback - path and settings available with the hosted [Millicast Player](https://docs-preview.optiview.dolby.com/pr-860/millicast/playback/hosted-viewer.md) 6. Recordings - media files that are captured from stream recordings 7. API - publishing token, ids, and endpoints for use with [Client SDKs](https://docs-preview.optiview.dolby.com/pr-860/millicast/playback/players-sdks.md) 8. Multi-source - a convenient tool for setting up [multi-source](https://docs-preview.optiview.dolby.com/pr-860/millicast/broadcast/multi-source-broadcasting.md) contribution ### 1. Token details The **Token details** tab allows you to view and edit settings specified during token creation. For a full list of these settings and their definitions, see [Creating a Publishing token](https://docs-preview.optiview.dolby.com/pr-860/millicast/managing-your-tokens.md#create-a-publish-token). The Token details page also includes the **Publish token** string and the **Account ID** string, which can both be copied and used for [starting a broadcast](https://docs-preview.optiview.dolby.com/pr-860/millicast/broadcast.md). ![](/pr-860/assets/images/publish-token-details-bf3a0030dbc6ae0b7dd0917425b46b82.png) > **Renew your token** > > If your token has been compromised you can renew it by clicking the **renew button** under the *"Publishing token"* string. ### 2. Token streams As mentioned in [Creating a Publish token](https://docs-preview.optiview.dolby.com/pr-860/millicast/managing-your-tokens.md#create-a-publish-token), when a stream name is specified, it will require the user of the token to use a specific stream name in order to broadcast. Within the management view, you are able to add and delete stream names as you see fit. To add a new name, simply click on the **(+) CREATE** button on the Token Streams tab, which will initiate a popup similar to the add token interface. ![](/pr-860/assets/images/token-add-streamname-86c8abc564802982e01c3723ba594107.png) To delete a stream name, simply select it from the list and click the remove button. ### 3. Publishing The publishing tab includes all information relating to [broadcasting](https://docs-preview.optiview.dolby.com/pr-860/millicast/broadcast.md) a stream with the Publish token. This tab can be broken down into four sections: * [WHIP](https://docs-preview.optiview.dolby.com/pr-860/millicast/broadcast/webrtc-and-whip.md): The *WHIP endpoint* and *Bearer token* can be used to publish a WebRTC stream with WebRTC-compatible software and hardware. * [RTMP](https://docs-preview.optiview.dolby.com/pr-860/millicast/broadcast/rtmp-and-rtmps.md): The *RTMP/s publish paths* and *RTMP publish stream name* can be used for publishing streams with RTMP-compatible software and hardware. * RTMP multi-bitrate can be enabled from this section. When enabled, the dashboard will create three RTMP publish stream names for **low** bitrate, **medium** bitrate, and **high** bitrate. * [SRT](https://docs-preview.optiview.dolby.com/pr-860/millicast/broadcast/srt.md): The *SRT publish path*, *SRT stream ID*, and *SRT publish URL* can be used for publishing with SRT-compatible software and hardware. * Passphrase encryption can be enabled from this section. When enabled, the dashboard will generate a passphrase for encrypting the SRT stream. * Publish token: The *Publishing token* and *Stream name* can be used to authenticate and start a broadcast from the [OptiView Real-time Streaming Client SDKs](https://docs-preview.optiview.dolby.com/pr-860/millicast/playback/players-sdks.md) or compatible [software](https://docs-preview.optiview.dolby.com/pr-860/millicast/software-encoders.md) and [hardware encoders](https://docs-preview.optiview.dolby.com/pr-860/millicast/hardware-encoders.md). To learn more about publishing and broadcasting with OptiView Real-time Streaming, check out the [Broadcast](https://docs-preview.optiview.dolby.com/pr-860/millicast/broadcast.md) guide, which provides more in-depth resources and examples on how to use the Publish token once it is created. ### 4. Distribution The Distribution tab includes settings that can modify how the CDN distributes the stream to end viewers. This includes a few important configurations such as: * [Re-streaming](https://docs-preview.optiview.dolby.com/pr-860/millicast/distribution/re-streaming.md): fan-out a stream to multiple endpoints that are able to accept incoming connections for syndicated broadcasting and distribution * [Geo-cascading](https://docs-preview.optiview.dolby.com/pr-860/millicast/distribution/multi-region-support/geo-cascading.md): configuration of edge servers that handle the last-mile distribution of a stream for playback ### 5. Playback The Playback tab includes all relevant information for playing back a live stream. OptiView Real-time Streaming provides an [out-of-the-box hosted player experience](https://viewer.millicast.com/?streamId=k9Mwad/multiview\&multisource=true), which can be viewed at the **Hosted player path** URL or by embedding the **Hosted embedded player** as an `