I always wanted to know the requests that had been sent to my Storage to know who could access the download API as my security purposes don't allow to access this API , And I hidded the endpoints as much as I could but by somehow a user who had access to read a storage bucket could know my the file ID and did the download API "Content download" I only do "View" in my Flutter App .
My Question is , is there a way to know which user downloads the file , by function maybe or anyway to register the Download API Requests manually as Audit logs don't give accurete resulsts about Storage Buckets . " all my buckets are protected by premissions of appwrite no public or "any" buckets , + only Anrdoid/Ios apps used with appwrite , no web which protected hardly by SSL Pinning with custom SSL so if someone find a way to get the File ID I want to know him by registering all Download API requests but I don't know how to do it correctly or from where to start simply as I can't modify or edit the open source Appwrite to do that . is there a more simple way to register all "Download API" Requests with the user ID or something with functions and events maybe , but I am not sure that events supports the requests that download the files?
Appwrite doesn't track that stuff nor does it fire an event for read.
You tightened to put something in front of Appwrite to capture all of the network traffic. Then, you can grab the cookie and figure out the user
any recommendations for 3rd party tool can do such thing ?
no sorry
Recommended threads
- Storage files aren’t showing on mobile
hi, what can be the problem? i have a storage and there are images in it, the permissions are read for All Users, everything is fine on desktop, but on mobile t...
- Delete storage files all at once
I am using Appwrite Cloud. I want to delete all storage files in my bucket similar to how I can select all documents in a collection and delete them all at once...
- Storage images are not showing on mobile
Hi, can anyone help me? I have some images on the storage, and it is not shown on mobile, on desktop everything is fine.