File_URL_FORMAT= https://cloud.appwrite.io/v1/storage/buckets/[BUCKET_ID]/files/[FILE_ID]/preview?project=[PROJECT_ID]
I'm trying to access files in my web app. The requested files are coming from the URL in the given format above which is exposing my projectId and Bucket id. Is this a good idea to expose them. If not how can I avoid them without using any proxy.
It's fine
You can use headers (X-Appwrite-Project
) if you don't like the Project ID in the URL itself.
Mind you that those headers can be easily checked via just a few clicks to Dev tools > Network tab or via a MITM Proxy.
Recommended threads
- I am looking for a US/Canada developer.
- Failed creating JWT via REST
The endpoint `v1/account/jwts` aint working as REST documentation says. It only works using Cookies recived from `v1/account/sessions/email`. My test commands s...
- Adding Phone Number During User Registra...
Hi everyone I'm working on integrating user registration in my application and need to include a phone number as a mandatory field. I understand that the accou...