To authenticate HLS (and, of course, any other streaming) in CDN, you should:
1. Apply ACL to stream on Origin server from backend server.
2. When user connects to your frontend, pass user access credentials to backend server.
3. Backend server sends to frontend ACL key to play HLS stream, key1...