location /statis-img {
              alias /home/user/files/;
              access_by_lua '

                local token  = ngx.var.arg_token

                local access_token = "123456"

                if token == access_tokein then
                    return true
                else
                   ngx.exit(403)
                end
            ';

  }