Secure the control room before any feed starts.

Sign in once to manage discovery, camera inventory, RTSP validation, and shared WebRTC playback. The same Laravel session authorizes short-lived read tokens for the wall.

Discovery Sweep the subnet or probe a known endpoint.

Use ONVIF multicast when the network allows it, then fall back to direct SOAP authentication when it does not.

Stream trust Laravel controls every wall session.

Authenticated operators receive short-lived MediaMTX tokens only when a wall or player session is requested.

The first successful Google sign-in becomes admin automatically.
After bootstrap, only admin-approved Google email addresses can sign in.
Laravel issues signed stream tokens per secure wall connection.
MediaMTX validates those reads before serving camera video.

Secure operator access

Operator sign-in

Open the operator workspace

Authenticate with Google to continue into the dashboard and secure player views. After the first admin is created, Google login is checked against the admin-managed allowlist.

Continue with Google

OAuth configuration comes from Laravel service settings. When those values are missing, sign-in stays unavailable by design.