Hello 👋 I am using prisma cloud service to serve the files for our application. We can read in the documentation

Files are secured using a unique and unguessable secret. You can protect this secret by using the read permissions on the File type as with any other type. For example, you can restrict access to a file’s secret to authenticated users.

File downloads however are currently not governed by permissions on the File type. As such, everyone with a file’s secret and the project id can download a file. Please reach out in the Forum or Slack if you have any questions about this.

So, basically I need to restrict download itself. As it says, I’m reaching the slack to ask for a possible solutions to this

This is Graphcool Cloud, not Prisma Cloud. You can set up a file proxy if you want: https://github.com/prisma/templates/tree/master/outdated/file-handling/file-proxy

Are there any solutions for serving files through graphql-yoga server tho? That would make things simpler.

Sure, there are examples about this in the yoga repo

Thanks Nilan!