I think most apps that migrate from Azure Media Service already has a login in their App.

I think it would be better if API Keys is used instead of User Tokens.

Unless there is a way to delegate the creation of the user token or at at least allow client application to use the email of the currently logged in user to generate a media kind token via REST API.