Get Photo

Deliberately unauthenticated. The SPA sends its JWT through an axios interceptor and a plain <img src> cannot carry it; blob fetches or query tokens would be complexity for no gain. The id is an unguessable UUID and the photos belong to published sites, consistent with the PRD's "address privacy is a non-goal". Registered as an accepted pilot risk in the implementation plan's hardening checklist (Section 7).

get/api/v1/photos/{photo_id}

Request

  • Base URL: https://trovastorage.it (the document declares no server; this is the origin it was published from)
  • URL: https://trovastorage.it/api/v1/photos/{photo_id}
  • Auth: none declared

Path parameters

photo_idstring uuid required

Response

Successful Response

unknown required

Changes

No recorded changes to this operation across all 1 revision of this API.