Skip to main content
View as Markdown

AppToken Object - Authentication

AppToken Object (KalturaAppToken)​

FieldTypeDescription
idstringUnique token identifier (used in startSession)
tokenstringThe secret value (used for HMAC hashing — keep server-side only)
partnerIdintAccount partner ID
statusint1=DISABLED, 2=ACTIVE, 3=DELETED
sessionTypeint0=USER, 2=ADMIN
sessionDurationintMax session duration in seconds (0 = account default)
sessionPrivilegesstringComma-separated privileges baked into the token
sessionUserIdstringFixed userId for sessions created from this token
hashTypestringHash algorithm: MD5, SHA1 (default), SHA256, SHA512
expiryintToken expiry as Unix timestamp (0 = never expires)
descriptionstringHuman-readable description
createdAtintUnix timestamp of creation
updatedAtintUnix timestamp of last update

sessionPrivileges and sessionUserId are enforced at creation time and locked into every session minted from this token. Configure them at token creation.