Authentication manner on HLS-AES128 key server (when client is HTML5 video tag)

Hi, I am trying to configure AES128 encryption for mobile safari and WowzaStreamingEngine(WSE).


I verified that the encryption setting of WSE is OK over MAC chrome.


I hope someone help me about the manner/way of user authentication on web server which check validity of client and provide key for the valid client (I call this server as "key server" for short).


For PC browser where hls.js can be used as player, we can add custom header/cookie to http request from video tag to the key server via API of hls.js.

Thus we can differentiate valid user and other on key server.


But for mobile safari, I need to use HTML5 video tag as video player (because hls.js do not work on it).


It seems there is no way to add any custom header/cookie to http request from video tag to the key server.


So I am stumped how to differentiate valid user and other on key server when client is HTML5 video tag.


I wonder if there is standard way/manner to differentiate valid user on key server when client is HTML5 video tag.


Please help for this point.


Thank you in advance.