API Integration

Video access

Embed Osteocom videos with a secure, short-lived token — no custom player, captions or DRM to build yourself.

Why the iframe player

Less to buildNo extra API calls or player code on your side.

Built-in controlsPlayback, quality and fullscreen handled for you.

Automatic captionsSubtitles are delivered with the stream.

Adaptive qualityResolution adapts to the viewer's connection (HLS).

The token: tokenAuthVideo

• Source — the Video access endpoint response.
• Lifetime — 15 minutes from generation.
• Scope — a single authorized channel.

Token expiry behavior

• During playback: the video keeps playing even after the token expires.
• On refresh: a new token is required.
• Security: expired tokens can't be reused from outside.

Implementation

Pass the token as the signature query parameter of the player URL.

<iframe
  src="https://test.osteocom.me/en/videoaccess?signature=YOUR_TOKEN&sublang=en"
  width="100%"
  height="500"
  frameborder="0"
  allowfullscreen
  allow="encrypted-media"
></iframe>

• allowfullscreen enables the player's fullscreen control.
• allow="encrypted-media" is required for DRM-protected content (the EME API).
• sublang sets the default subtitle language (see below).

Responsive 16:9 embed

<div style="position: relative; width: 100%; padding-bottom: 56.25%;">
  <iframe
    src="https://osteocom.me/en/videoaccess?signature=YOUR_TOKEN&sublang=en"
    style="position: absolute; inset: 0; width: 100%; height: 100%;"
    frameborder="0"
    allowfullscreen
    allow="encrypted-media"
  ></iframe>
</div>

Subtitle languages

it

Italian

en

English

fr

French

es

Spanish

That's it

With the iframe configured, Osteocom handles delivery, controls, captions and security.