I'm planning to implement token based DRM solution for media contents as described here.
I don't understand though, how I could limit the use of the tokens to certain media assets.
Let's assume my users have these files:
User A -> happy_movie.mp4
User B -> sad_movie.mp4
If I issue a token to user A, how can I prevent him from accessing files of other users? Obviously I wouldn't give him the streaming URL of those files, but is this supposed to be enough?
Newest
You can create your own JWT provider (so-called Secure Token Service, or STS) by using asymmetric key encryption. In your custom STS, you can add claims based on your business logic.
How do I show a video to only users who have a specific permission, without using Azure AD?
PRIVIOUS
I think you may be confused about the concepts of DRM and access rights.
The definition of DRM :
DRM protection is not an access control to media resource files. Azure RBAC is recommended for media resource access control.
Azure role-based access control (Azure RBAC) for Media Services accounts
