Panoramika Secure Embed System (Production)
-------------------------------------------
This package provides complete secure handlers for Wowza live stream embedding.

Structure:
  /scripts/handlers/Embed.ashx
  /scripts/handlers/Config.ashx
  /scripts/handlers/Playlist.ashx

Features:
- Uses allowlist.origins.js (already existing) to check allowed referrers.
- Issues short-lived signed cookie from Embed.ashx (valid 5 min).
- Config.ashx and Playlist.ashx require that cookie (404 otherwise).
- Integrates with your existing Apache + IIS reverse-proxy setup.
- No exposure of raw JSON or playlist from direct access.

Before deploying:
1. Add this line in your web.config <appSettings> section:
   <add key="PANO_SERVER_SECRET" value="ReplaceWithStrongRandomSecret"/>

2. Upload entire /scripts/handlers/ directory to your live.panoramika.eu site.
3. Confirm allowlist.origins.js path is /scripts/allowlist.origins.js.
4. Test using ?id=YourStreamName after Embed.ashx.

© Panoramika 2025