Decipher / druxt-experiments

Experimenting with Druxt
1 stars 1 forks source link

Experiment: Authenticated only private file system #24

Open Decipher opened 2 years ago

Decipher commented 2 years ago

As a user I want a Decoupled Druxt site with an authenticated only private file repository.

Has anyone found a good solution in a decoupled site to access a private file? Users are authenticated to the headless site via Simple OAuth. We can see the name of the file just fine using JSONAPI, but when trying to access the private file, the Drupal site thinks it's being viewed by an anonymous user and returns a 403. It's a video file. Wondering if there's a way to handle tokens for this?