Fair point, the web app is just for my family and will have images of us hence why I wanted it for authenticated users only. However I also wanted to avoid performing an api call per image to get the url every time someone opened the web app. I thought I might be able to createSignedUrl when the image is uploaded and store the URL in a table. Therefore being able to pull the url of all images at once 🙂

I’d consider a public bucket where you add a random uuid to the file name. Same security as a private bucket with an infinite token, but GetPublicURL does not make a server call to get the url. Filename-uuid.png would provide same security as long lived token.

Amazing idea! Really like that. Thank you @garyaustin