feat: Remove attachments from public access

Closes #219
2025-12-21 01:11:26 +03:00 · 2022-04-26 22:20:20 +05:00
parent 7ef55ec578
commit 7d138b858d
10 changed files with 156 additions and 19 deletions
--- a/server/config/routes.js
+++ b/server/config/routes.js
@@ -75,6 +75,16 @@ module.exports.routes = {
  'GET /api/notifications/:id': 'notifications/show',
  'PATCH /api/notifications/:ids': 'notifications/update',

+  'GET /attachments/:id/download/:filename': {
+    action: 'attachments/download',
+    skipAssets: false,
+  },
+
+  'GET /attachments/:id/download/thumbnails/:filename': {
+    action: 'attachments/download-thumbnail',
+    skipAssets: false,
+  },
+
  'GET /*': {
    view: 'index',
    skipAssets: true,