Skip to content
GhostMind

Secure File Downloads

Downloading Assets

Generated assets require authentication to download:

Terminal window
curl https://ghostmind.optdmsa.com/v1/conversations/{conversation_id}/assets/{asset_id}/download \
  -H "Authorization: Bearer sk-gm-..." \
  -o asset.png

Security Properties

  • Tenant-isolated: Cross-tenant access returns 404
  • Authentication required: No anonymous downloads
  • Path traversal prevention: Storage paths are validated
  • No permanent public URLs: Download links are not public

Range Requests

Audio content supports Range requests for partial downloads:

Terminal window
curl https://ghostmind.optdmsa.com/v1/audio/generations/{id}/content \
  -H "Authorization: Bearer sk-gm-..." \
  -H "Range: bytes=0-1023" \
  -o chunk.wav

Next Steps