2025-04-22

Access to files attached to members now requires authentication

Access to files attached to members now requires authentication.
As a result, URLs of file extension items set for members (e.g., https://sitekey.g.kuroco-img.app/files/member/ext/1_profile_image.png) can no longer be accessed without authentication.

Affected Endpoints/Items

Member::list/details

caution

Please design the member retrieval endpoint so that only members with appropriate permissions can send requests.

• There is no impact if a user with viewing permissions for members sends a request.
• If a user without viewing permissions for members sends a request, they will not be able to access the file URL.

Response example:

{
  "errors": [],
  "messages": [],
  "list": [
    ・・・
    {
      "profile_image": {
        "id": "8_ext_profile_image",
        "url": "https://sitekey.g.kuroco-img.app/t=7bb3884c36651c45b17642bee5446c622b90d962ff678a32b0a69123ef8bfd5e/files/member/ext/8_profile_image.png",
        "url_org": "https://sitekey.g.kuroco-img.app/files/member/ext/8_profile_image.png",
        "desc": "desc"
      },
    }
  ],
  ・・・
}

Topics::list/details with add_owner_info_cols set

• If using the url item, you can continue to use it as is.
  If an unauthenticated user or a user without viewing permissions for members requests Topics::list/details, a temporary token will be attached to the url item in member_info.

• If using the url_org item, users who are not logged in or do not have viewing permissions for members will not be able to access the URL.

Response example:

{
  "errors": [],
  "messages": [],
  "list": [
    {
      ・・・
      "member_info": {
        "name1": "DivertaTaro",
        "member_id": 1,
        "profile_image": {
          "id": "1_ext_profile_image",
          "url": "https://sitekey.g.kuroco-img.app/v=1733886692/files/member/ext/1_profile_image.png",
          "url_org": "https://sitekey.g.kuroco-img.app/files/member/ext/1_profile_image.png",
          "desc": "desc"
        }
      },
      ・・・
    }
  ],
}

Implementation Date

April 21, 2025

This change has been applied to all versions.

Contact

If you have any further questions regarding this matter, please feel free to contact Kuroco Support.

• Support