Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Secure image URLs #169

Open
slugger7 opened this issue Jan 3, 2024 · 3 comments
Open

Secure image URLs #169

slugger7 opened this issue Jan 3, 2024 · 3 comments
Labels
enhancement New feature or request
Milestone

Comments

@slugger7
Copy link
Owner

slugger7 commented Jan 3, 2024

Currently you can reach any image as the URLs are not authorized.

@slugger7 slugger7 converted this from a draft issue Jan 3, 2024
@slugger7 slugger7 added the enhancement New feature or request label Jan 3, 2024
@slugger7 slugger7 added this to the Neccessary milestone Jan 3, 2024
@slugger7 slugger7 moved this from Todo to In Progress in Ghost Media Jan 3, 2024
@slugger7
Copy link
Owner Author

slugger7 commented Jan 3, 2024

A few solutions have popped up:

  • Use cookie based authentication
    this is probably the easiest fix to this issue but will have to rewrite the entire authentication of the application.
    this might also ssolve issue Secure video URLs #170
  • Use signed url
    requires quite a bit of work in order to create the signing and validating that the signature is still valid in the time. Also picking a time for the signature is valid for might be tricky.
  • Use streams to fetch the data
    seems like it could work but seems super complicated to implement but might be worth looking into for transcoding video data

@slugger7
Copy link
Owner Author

slugger7 commented Jan 3, 2024

@slugger7 slugger7 moved this from In Progress to Todo in Ghost Media May 2, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
Status: Todo
Development

When branches are created from issues, their pull requests are automatically linked.

1 participant