Hi Francis,
thanks for the fast reply. At auth server, the value of "X-Original-URI" header is only "/validate". But should be "/validate?token=<token_value>" as all request for a static file pass a token query param to the file server (https://files.mysite.com/myvideo.mp4?token=<token_value>).


Cheers,
Rafael.