We have made a silverlight application where users can preview audio files from their browser from the telerik radmediaplayer control.
The files are on a webserver and anyone who sniffs the trafic can download the file. We would like to prevent non-logged-in users from accessing/downloading these files.
Besides providing the application with some sort of temporary valid url and implementing a custom httphandler... what are our options?
It's not too big of a problem if our customers can download the files, we just don't want the rest of the world to also have access.
Any ideas would be more than welcome!
[Update] The only thing I can come up with is:
- host the files in a non-public folder
- if a user requests to prelisten a file, copy it to a public folder under a new name ([guid].mp3) and return it's url
- every x minutes clean the public folder.