Contents

# frozen_string_literal: true

# Take a signed permanent reference for a blob and turn it into an expiring service URL for download.
#
# WARNING: All Active Storage controllers are publicly accessible by default. The
# generated URLs are hard to guess, but permanent by design. If your files
# require a higher level of protection consider implementing
# {Authenticated Controllers}[https://edgeguides.rubyonrails.org/active_storage_overview.html#authenticated-controllers].
class ActiveStorage::Blobs::RedirectController < ActiveStorage::BaseController
  include ActiveStorage::SetBlob

  def show
    expires_in ActiveStorage.service_urls_expire_in
    redirect_to @blob.url(disposition: params[:disposition]), allow_other_host: true
  end
end

Version data entries

5 entries across 5 versions & 1 rubygems

Version	Path
activestorage-7.0.0.rc3	app/controllers/active_storage/blobs/redirect_controller.rb
activestorage-7.0.0.rc2	app/controllers/active_storage/blobs/redirect_controller.rb
activestorage-7.0.0.rc1	app/controllers/active_storage/blobs/redirect_controller.rb
activestorage-7.0.0.alpha2	app/controllers/active_storage/blobs/redirect_controller.rb
activestorage-7.0.0.alpha1	app/controllers/active_storage/blobs/redirect_controller.rb