In mojolicious, how to protect images from public view

Question

Somebody can help me, please. I have app in mojolicious Lite

I wanna block images from all without session login

when i type http://m.y.i.p:3000/images/imageX.jpg

i wanna show images only with session login.

my html code is

<a href="images/imagex.jpg">shwo image 1 </a>

score 3 · Accepted Answer · answered Jul 20 '18 at 21:18

Same way as any other content. Set up a handler for requests, render (or don't render) the content.

get '/images/*img' => sub {
    my $c = shift;
    if (!$c->session("is_authenticated")) {
        return $c->render( text => "Forbidden", status => 403 );
    }
    my $file = $c->param("img");
    if (!open(my $fh, '<', $IMAGE_DIR/$file)) {
        return $c->render( text => "Not found", status => 404 );
    }
    my $data = do { local $/; <$fh> };
    close $fh;
    $c->render( data => $data, format => 'jpg' );
};

Your request handler will take priority over the default handler that serves content from public folders, but once you have this handler in place, you don't need to store the files it serves in a public folder.

score -1 · Answer 2 · answered Jul 21 '18 at 00:00

another sololution is

get '/pays/*img' => sub {
my $self = shift;

my $img = $self->param('img');
plugin 'RenderFile';

my @imgext = split(/\./, $img);
my $ext = $imgext[-1];


$self->render_file(
'filepath' => "/directiry/$img",
'format'   => "$ext",                 # will change Content-Type "application/x-download" to "application/pdf"
'content_disposition' => 'inline',   # will change Content-Disposition from "attachment" to "inline"
                     # delete file after completed

);

It is use plugin 'RenderFile';

This is only a handler to respond with an image. There is no authorization at all. — Sven Eppler, Jul 24 '18 at 11:53

In mojolicious, how to protect images from public view

2 Answers2