Public Assets

Public files served from S3 without a session token: user avatars, asset photos, incident evidence, templates, tutorials and extras.

Concepts

File names containing / are rejected (HTTP 403), except for business logos.

Missing asset photos fall back to a default photo.

GET /v1/avatars/{file}

Business user avatar.

GET /v1/incidents/{file}

Incident evidence.

GET /v1/active_avatars/{file}

Asset photo.

GET /v1/external_avatars/{file}

External user avatar.

GET /v1/files/{file}

Document template.

GET /v1/extras/{file}

Extra file.

GET /v1/business-avatar/{file}

Business logo.

GET /v1/tutorials/{tutorial_name}/{file}

Tutorial PDF.

GET /v1/tutorials/{tutorial_name}/{platform}/{lang}/{file}

Tutorial image.

Router: routes/v1/files.js

Controller: controllers/files.js

Middleware: middlewares/uri_files.js

Service: services/s3.js