{"action":"created","issue":{"url":"https://api.github.com/repos/dailymotion/hls.js/issues/354","repository_url":"https://api.github.com/repos/dailymotion/hls.js","labels_url":"https://api.github.com/repos/dailymotion/hls.js/issues/354/labels{/name}","comments_url":"https://api.github.com/repos/dailymotion/hls.js/issues/354/comments","events_url":"https://api.github.com/repos/dailymotion/hls.js/issues/354/events","html_url":"https://github.com/dailymotion/hls.js/issues/354","id":146318804,"number":354,"title":"CloudFront signed cookies fails on Firefox","user":{"login":"DrySs","id":230791,"avatar_url":"https://avatars.githubusercontent.com/u/230791?v=3","gravatar_id":"","url":"https://api.github.com/users/DrySs","html_url":"https://github.com/DrySs","followers_url":"https://api.github.com/users/DrySs/followers","following_url":"https://api.github.com/users/DrySs/following{/other_user}","gists_url":"https://api.github.com/users/DrySs/gists{/gist_id}","starred_url":"https://api.github.com/users/DrySs/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/DrySs/subscriptions","organizations_url":"https://api.github.com/users/DrySs/orgs","repos_url":"https://api.github.com/users/DrySs/repos","events_url":"https://api.github.com/users/DrySs/events{/privacy}","received_events_url":"https://api.github.com/users/DrySs/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2016-04-06T13:45:25Z","updated_at":"2016-04-07T01:33:54Z","closed_at":null,"body":"Hi there,\r\n\r\nWe are trying to implement HLS.js + FlowPlayer with CloudFront distribution using **signed cookies**.\r\n\r\nEverything is working fine, but it fails on **Firefox** with **Windows** only (it's working fine on Firefox Mac, Google Chrome, Opera, etc).\r\n\r\nYou can have a demo here:\r\nhttp://vod2.dryss.com/w/django/video-player.html\r\n\r\nIf you load the page and click on play directly, stream is working fine.\r\nIf you load the page, wait like 2min, and then click on play, stream load failed, with CORS error (403 forbidden):\r\n\r\n\"GET XHR http://cdn.dryss.com/591/hls/manifest_en.m3u8 Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at http://cdn.dryss.com/591/hls/manifest_en.m3u8. (Reason: CORS header 'Access-Control-Allow-Origin' missing).\"\r\n\r\nNote that our S3 bucket is correctly setup with rights CORS enabled and CloudFront distribution has whitelisted headers (indeed, it's working fine with all other browsers).\r\n\r\nI'd like to find where is the \"bug\" located: on HLS.js or on Firefox Windows?\r\nLooking for any help about this :)\r\n\r\nThanks,\r\nPhilippe"},"comment":{"url":"https://api.github.com/repos/dailymotion/hls.js/issues/comments/206649928","html_url":"https://github.com/dailymotion/hls.js/issues/354#issuecomment-206649928","issue_url":"https://api.github.com/repos/dailymotion/hls.js/issues/354","id":206649928,"user":{"login":"TheDecryptor","id":1516741,"avatar_url":"https://avatars.githubusercontent.com/u/1516741?v=3","gravatar_id":"","url":"https://api.github.com/users/TheDecryptor","html_url":"https://github.com/TheDecryptor","followers_url":"https://api.github.com/users/TheDecryptor/followers","following_url":"https://api.github.com/users/TheDecryptor/following{/other_user}","gists_url":"https://api.github.com/users/TheDecryptor/gists{/gist_id}","starred_url":"https://api.github.com/users/TheDecryptor/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/TheDecryptor/subscriptions","organizations_url":"https://api.github.com/users/TheDecryptor/orgs","repos_url":"https://api.github.com/users/TheDecryptor/repos","events_url":"https://api.github.com/users/TheDecryptor/events{/privacy}","received_events_url":"https://api.github.com/users/TheDecryptor/received_events","type":"User","site_admin":false},"created_at":"2016-04-07T01:33:54Z","updated_at":"2016-04-07T01:33:54Z","body":"The server is returning a 403 error when Firefox requests the manifest (http://cdn.dryss.com/591/hls/hls_600k/video_en.m3u8 for me), the error page doesn't have CORS headers, but it's not like it'd help much."}}