@bytescale/sdk 3.21.1 → 3.21.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +3 -3
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -416,9 +416,9 @@ The Bytescale JavaScript SDK automatically adds the `apiKey` from the constructo
|
|
|
416
416
|
|
|
417
417
|
With API key auth, the requester has access to the resources available to the API key:
|
|
418
418
|
|
|
419
|
-
- Secret API keys (`secret_***`)
|
|
419
|
+
- Secret API keys (`secret_***`) can perform all API operations.
|
|
420
420
|
|
|
421
|
-
- Public API keys (`public_***`)
|
|
421
|
+
- Public API keys (`public_***`) can perform file uploads and file downloads only. File overwrites, file deletes, and all other destructive operations cannot be performed using public API keys.
|
|
422
422
|
|
|
423
423
|
Each Public API Key and Secret API Key can have its read/write access limited to a subset of files/folders.
|
|
424
424
|
|
|
@@ -426,7 +426,7 @@ Each Public API Key and Secret API Key can have its read/write access limited to
|
|
|
426
426
|
|
|
427
427
|
JWTs are optional.
|
|
428
428
|
|
|
429
|
-
With JWTs, the user can download private files directly via the URL, as authentication is performed implicitly via a session cookie _or_ via an `authorization` header if service workers are
|
|
429
|
+
With JWTs, the user can download private files directly via the URL, as authentication is performed implicitly via a session cookie _or_ via an `authorization` header if service workers are enabled (see the `serviceWorkerScript` param on the `AuthManager.beginAuthSession` method). This allows the browser to display private files in `<img>`, `<video>`, and other elements.
|
|
430
430
|
|
|
431
431
|
With JWTs, the user can also perform API requests, such as file uploads, as these can be granted by the [JWT's payload](https://www.bytescale.com/docs/types/BytescaleJwt). The Bytescale JavaScript SDK will automatically inject the user's JWT into the `authorization-token` request header for all API requests, assuming the `AuthManager.beginAuthSession` method has been called.
|
|
432
432
|
|