amazon s3 - Google Drive equivalent for S3 Signed Request URLs -
how can create request url google drive resource such associated authentication information in url valid object. objects stored on s3, 1 can create signed request url expiration date (as explained here https://djangosnippets.org/snippets/1174/). looking similar google drive. have been able find to-date append access_token downloadurl of file. downloadurl expire after while access_token can used access owner's entire drive (correct me if wrong here).
complete scenario: user (lets call him bob) grants app access google drive. fetch list of videos on google drive. bob selects couple of videos , asks app share user (lets call cindy). cindy gets email link page on app should show videos. since app has access_token bob's gdrive, retrieves temporary downloadurl google drive, appends access_token , shows videos on web page using these links. cindy can grab access_token browser , break bob's gdrive. not want cindy able break bob's account.
the above can avoided if video set "anyone link" that not sit bob. images, proxy data through server videos can not afford this. if token
temporarily valid shared videos, golden.
the new dropbox "file requests" feature need!
Comments
Post a Comment