@oddin-gg/havik-player 1.0.6 → 1.2.0

package/README.md

@@ -19,7 +19,9 @@ native passthrough; full FairPlay EME is a tracked fast-follow. See [Limitations
 > the api-key's **AllowedOrigins** (and, for iframes, **AllowedIframeParents**) **and** the
 > DRM service's **CORS allow-list** must both include every origin you serve the player from,
 > or requests fail their preflight and DRM never starts. Onboard your origins with Oddin
-> first; allow a few minutes for propagation. Never use a `["*"]` allow-list in production.
+> first — email **[havik-support@oddin.gg](mailto:havik-support@oddin.gg)** with the origins
+> you need allowlisted — and allow a few minutes for propagation. Never use a `["*"]`
+> allow-list in production.
 
 ---
 
@@ -220,6 +222,11 @@ integrator origin is a hard dependency:
    starts (silent black video).
 3. Scope the key's entitlements to the tournaments you serve.
 
+**Where to send onboarding requests:** email
+[havik-support@oddin.gg](mailto:havik-support@oddin.gg) with the origins (and iframe
+parents, for Mode C) you need allowlisted, plus the tournaments you expect to serve.
+Steps 1 and 2 are applied on our side — you cannot self-serve them.
+
 Revocation isn't instant (≤5min validation cache + ≤24h rotation grace).
 
 **Forward-compatible credentials:** `credential` also accepts an async function