Serves a blob from a permissioned space through the AppView, which holds the space credential the client does not. Every byte is verified against the CID before it is served, and the content type is sniffed rather than trusted. Supports HTTP range requests.
Parameters
cid
string
cid
Required
The blob's CID.
did
string
did
Required
DID of the repo holding the blob.
filename
string
Optional
Sets the download filename.
space
string
space-ref
Optional
The space holding the blob. Required for a blob in a permissioned space, and omitted for one on a public repo.
variant
string
Optional
A rendition of a resizable image.
Output
Encoding
*/*Errors
AuthRequired
The request has no valid service auth. Forbidden
The requesting user may not read the space holding the blob. BlobNotFound
No blob matches the given DID and CID. InvalidRequest
The arguments are inconsistent or malformed beyond schema validation. UpstreamFailure
The repo's PDS failed while the AppView fetched the blob. Try It
Requests are sent directly from your browser. Some servers may block requests due to CORS.
View raw schema
{
"type": "query",
"errors": [
{
"name": "AuthRequired",
"description": "The request has no valid service auth."
},
{
"name": "Forbidden",
"description": "The requesting user may not read the space holding the blob."
},
{
"name": "BlobNotFound",
"description": "No blob matches the given DID and CID."
},
{
"name": "InvalidRequest",
"description": "The arguments are inconsistent or malformed beyond schema validation."
},
{
"name": "UpstreamFailure",
"description": "The repo's PDS failed while the AppView fetched the blob."
}
],
"output": {
"encoding": "*/*"
},
"parameters": {
"type": "params",
"required": [
"did",
"cid"
],
"properties": {
"cid": {
"type": "string",
"format": "cid",
"description": "The blob's CID."
},
"did": {
"type": "string",
"format": "did",
"description": "DID of the repo holding the blob."
},
"space": {
"type": "string",
"format": "space-ref",
"description": "The space holding the blob. Required for a blob in a permissioned space, and omitted for one on a public repo."
},
"variant": {
"type": "string",
"description": "A rendition of a resizable image.",
"knownValues": [
"thumbnail",
"avatar",
"banner",
"full"
]
},
"filename": {
"type": "string",
"description": "Sets the download filename."
}
}
},
"description": "Serves a blob from a permissioned space through the AppView, which holds the space credential the client does not. Every byte is verified against the CID before it is served, and the content type is sniffed rather than trusted. Supports HTTP range requests."
}