Serving private token-protected media at 100ms with OpenResty + Lua

A common requirement: serve private media from S3, fast. "Private" here means per-user authorization. The token lives in a cookie with a 5-minute TTL, and every request has to be validated before a si