Logo-amall
discord (1)
#customheadersforstoragefilesrequests (1)
  • I'm looking for suggestions to implement a share-link auth pattern with Nhost Storage/Auth. I need to be able to grant access to data and files to unauthenticated users but *only* if they have a share link (I think this is a pretty common access control pattern). So if I have link ID 12345, I should be able to access certain tables and files as an unauthenticated user. Previously, I was using a custom header sent with the `public` role, e.g. X-Hasura-Link-Id and limiting access using Hasura permissions since Hasura does support arbitrary custom headers as long as a JWT is not being sent at the same time.

    Last active 4 months ago

    3 replies

    14 views

    SH
    SH
    +1