API Status
Live Monitor

Endpoint

Description

Securely serves all assets (images, videos, documents, fonts, etc.) through the API with authentication, rate limiting, and path validation. All assets are protected from direct access and must be requested through this endpoint. This ensures complete control over asset access and prevents unauthorized downloads.

Supported File Types

Security Features

• Path validation - only allowed directories can be accessed
• Directory traversal protection - prevents accessing files outside public folder
• File type validation - only whitelisted file types allowed
• File size limits - 50MB for videos, 10MB for other files
• Rate limiting - prevents abuse and excessive requests
• Security headers - all responses include security headers
• Proper MIME types - correct content types for all file formats

Allowed Paths

Example Usage

GET /api/assets/products/scripts/bl-3d-printer/1.png

GET /api/assets/products/scripts/bl-job-center/video/showcase.mp4

200 OK
Content-Type: image/png (or video/mp4, etc.)
Content-Length: [file size]
Cache-Control: public, max-age=31536000, immutable
X-RateLimit-Limit: 100
X-RateLimit-Remaining: 99

Using in Code

import { getSecureAssetUrl } from '@/lib/asset-utils'

const imagePath = '/products/scripts/bl-3d-printer/1.png'
const secureUrl = getSecureAssetUrl(imagePath)
// Returns: '/api/assets/products/scripts/bl-3d-printer/1.png'

<img src={secureUrl} alt="Product Image" />

import { getSecureAssetUrl } from '@/lib/asset-utils'

const videoPath = '/products/scripts/bl-job-center/video/showcase.mp4'
const secureUrl = getSecureAssetUrl(videoPath)

<video src={secureUrl} controls />