...
Note that the IP address is not sufficient to identify a session; A person watching on the STB at home may have the same IP address as somebody watching on their mobile phone upstairs on the same home router Wi-Fi network.
Authentication
Calls to the API must be authenticated by passing your access token in the HTTP headers.
We accept this as a bearer token in the Authorization header.
Managing sessions
The client should call the MediaPlaySession based on user activity, as below:
...