I stumbled onto this question while looking to customize the HTTP request for media segments. Although I am able to redirect the media segment request using AVAssetResourceLoadingRequest.setRedirect, an authorization header (Authorization: ***) added to the redirect request is not sent in the request. In fact, none of the custom header are used by the player. This is very limiting to not able to use basic HTTP protocol for the media request. I would like to avoid adding authorization token to the query param for data security reasons.