Let's assume we have a content provider endpoint here myuri.org/api/auth/sources/{id}
which returns music files identified by id.
The route /api/auth/
requires authentication. In this case this is done with a JWT passed in the request header like so Authentication: Bearer <token>
.
If the authentication wouldn't be there, I could just load a html5 audio component with the source for a fictional music file with id 37
like so
<audio controls>
<source src="myuri.org/api/sources/37" type="audio/mp3">
</audio>
But since I need authentication; how would this work? And for any possible solution provided; does seeking/skipping still work?