Per-playback-ID access restrictions for domains and user agents

FastPix now supports per-playback-ID access restrictions, letting you allow or deny specific domains and user agents for any playback ID. You can attach restrictions to a playback ID at create time and update the policy later without invalidating existing tokens.

What’s new:

• Access restrictions on create-playback — pass a domain allowlist or denylist and a user-agent allowlist or denylist; the policy is enforced at the playback edge.

• Access restrictions in get-playback response — read back the exact policy applied to a playback ID without re-deriving it from your own records.

• GCS V4 signed URLs — playback URLs that resolve to GCS objects are signed using GCS V4 signatures, as required by Google’s signed-URL scheme.

If you were previously enforcing access controls in your own CDN or origin server, you can now move the policy into FastPix and rely on consistent enforcement across all playback paths.