My co-worker has ran into a weird issue/limitation on his new Nokia Lumia 920 when trying to play a video on a website we are working on.

The website requires login and logged in users can watch video (mp4 and ogg) via html5 (with flash fall back) using the VideoJS player.

Using wireshark it seems his phone is unable to play the video because IE10 mobile hands the video to the media app but doesn't pass the cookie/session auth.

Even a url straight to the video file eg: somesite/private/video/video123.mp4 doesn't work if the path is protected by authentication when the user is logged becase the media app simply doesn't get passed the credentials.

This seems to be a major oversight and limitation to me. Tested multiple browsers on desktop, plus android, iphone and ipad which all work fine.

Anyone seen anything like this?