This blog is published as an Azure document here. An end-to-end reference implementation has been built: DASH streaming asset under dynamic protection of CENC with multi-DRM (PlayReady and Widevine). Both PlayReady license server and Widevine license server require JWT token authentication.
Acknowledgment: Special acknowledgment goes to Kristjan Jõgi of Axinom for his help throughout this effort.