Android and Android TV

Server request#

After your API authenticates the app user and approves entitlement, request a playback session with clientPlatform: android, drmSystems: ["widevine"], manifestTypes: ["dash"], and truthful device capability. The APK never contains the Site Key or Access Key.

Configure Media3#

val drm = MediaItem.DrmConfiguration.Builder(C.WIDEVINE_UUID)
    .setLicenseUri(session.drm.licenseServerUrl)
    .setLicenseRequestHeaders(mapOf(
        session.drm.authorization.headerName to
        "${session.drm.authorization.scheme} ${session.drm.authorization.value}"
    ))
    .setMultiSession(false)
    .build()

val item = MediaItem.Builder()
    .setUri(session.manifest.url)
    .setDrmConfiguration(drm)
    .build()

Use the manifest MIME type returned by the contract and apply the licensed maximum height to track selection. Do not reuse one session ID across devices.

Lifecycle and offline behavior#

• Call the returned release route when the player is stopped, replaced, or destroyed.
• Use a bounded retry policy; create a fresh playback session after authorization expires.
• Do not treat a network retry as a new viewer session unless a new playback attempt really started.
• For offline or persistent licenses, define a dedicated server policy and application lifecycle; do not convert a streaming token into a download entitlement.

Device qualification#

Test physical phones, tablets, Android TV/Google TV, and Fire TV classes you support. Verify Widevine security level, maximum decoder resolution, HDCP behavior, codec support, audio/subtitle selection, background/foreground transitions, and HDMI changes.