How to enable music playing while preventing downloading from web or mobile app?

I need to build a web service by which user can try listening musics but can't download them maliciously.

I just don't know how to achieve this. Should my server send the music to the client, and let the client app to limit the access? But it seems that it's too easy to download it when the url is revealed. Should my server send a one-off url? But is it really safe to save the music on the client devices?

I think a media stream consuming solution will be good, but is there such a solution or something else?