Displaying Images and Documents
How to display documents and images in your app.
Hello, Iโve gone through several posts regarding accessing work-flow generated PDFs.
With the help of related posts, I was able to access (& download/print/share) the getablefileurl with the concerned person(s).
By turning off - โRequire Image and File URL Signingโ, I would just concatenate the URL with a serial number.
CONCATENATE(ENCODEURL(https://www.appsheet.com/template/gettablefileurl?appName=xxxx&tableName=xxxx&fileName=xxxx") , [Serial_Number] , โ.pdfโ)
However, this means thereโs a chance someone changes the Serial Number and accesses other invoices.
So, it makes sense to turn it on for security purposes.
When the โRequire Image and File URL Signingโ is turned on, we canโt access it without โ&appVersion=xxxx&signature=xxxxโ
How can I go about obtaining the App Version and Signature?
Thanks!
There is no way AFAIK.
@Steve Any idea?
Not possible.
Hi! I found this because I became interested in the โsignatureโ in the following URL:
https://www.appsheet.com/fsimage.png?appid=38710ffa-ae1c-4939-b208-f43540e63eed&datasource=google&filename=DocId%3D1nwpP4dJ8_KHLj_BTLGx-1ggcUEzU4j70&signature=60799b04fc4509382c9b0727afef92423622d7fced5b2fb4e4e4d8306cb5c097&tableprovider=google&userid=2078346
The signature here seems to be
60799b04fc4509382c9b0727afef92423622d7fced5b2fb4e4e4d8306cb5c097
Is it the case that the โsignatureโ here is for the specific file but that we cannot learn what it is, even for one of our own images? Or, does โsignatureโ in the above URL mean something different?
The signature is a security feature designed specifically to hide the public URL of the image and to be virtually impossible to guess. In fact, I believe the signature for any given file changes over time, so that a given signature will expire and become unusable.
See also:
How to display documents and images in your app.
I believe the signature for any given file changes over time, so that a given signature will expire and become unusable.
Thanks! Very interesting. Iโll try to study up on this. Perhaps that means that these image links to logos in AppSheet templates (thatโs where I got the link), wonโt copy properly in the future.
By the way, hereโs another post of mine about this issue:
Hi again, Maria! Today I learned that AppSheet has already solved the problem that concerned me. Look, for example at the following template: https://www.appsheet.com/templates/This-attendance-tracker-app-helps-log-student-attendance-in-class... This template uses the following URL to identify the main branding image: [image] https://www.appsheet.com/fsimage.png?appid=76893664-5529-44e8-8fb8-b90bd7256a25&datโฆ
Alright then, is there any way to (somehow) secure it a bit?
Currently, I use a workflow automation Integromat that automatically shortens the URL using Bit.ly.
This at least hides the URL when I passed it on to the concerned party.
Maybe I can give it a try with UNIQUEID().
Thank you for clarifying @Steve.
However, this means thereโs a chance someone changes the Serial Number and accesses other invoices.
Do not use serial numbers.
Prefer UNIQUEID() for ALL of the Key values on your tables
User | Count |
---|---|
41 | |
36 | |
28 | |
23 | |
16 |