Right now, the result of a C2D data (outputs/algo logs) are sent as a URL to the consumer.
Which means that anyone who has those URL has access to them, even if he/she is not the actual consumer.
Proposal:
C2D should output the results only as an array of files, containing names and sizes
If anyone want to get the result index 0, they should call the provider (give me result index 0 for job XXX), and only signing the request.
The provider will call C2D op-service, which will read the file content and send it back (and never expose the URL)
Right now, the result of a C2D data (outputs/algo logs) are sent as a URL to the consumer. Which means that anyone who has those URL has access to them, even if he/she is not the actual consumer.
Proposal: