Images

Mint a signed (private) URL

Return a time-limited signed URL for a private image. The signature binds the image (and project), so the URL can't be replayed against another image. Generates the project's signing secret on first use. Use a long expires_in (e.g. for a PR's lifetime) and re-sign on updates to avoid link rot.

post/v1/images/{id}/sign-url

Request

  • Base URL: https://api.pixelvault.dev
  • URL: https://api.pixelvault.dev/v1/images/{id}/sign-url
  • Auth: HTTP bearer

Path parameters

idstring required
Example:img_a1b2c3d4e5f6

Request body

expires_ininteger

Signature lifetime in seconds (60–2592000). Defaults to 3600 (1 hour).

Example request

{
  "expires_in": 2592000
}

Response

Signed URL

Example response

{
  "data": {
    "url": "https://img.pixelvault.dev/proj_x/img_y.png?token=…&expires=1765400000",
    "expires": 1765400000
  }
}

Changes

No recorded changes to this operation across all 1 revision of this API.