I have uploaded an image as a member profile picture. And if I try to access the same image by copying the image URL and pasting in the browser, I can access the image without even login into the application. Is there any way to add security or authentication so that it cannot be accessed without login?
Although to be perfectly honest here, if you know what you are doing you can easily download an image from any website even if it is protected by some sort of protection.
There are ways to create blobs that make it inordinately difficult to download content such as video, to the point that even using cURL commands fail to fetch the data. It’s very time-intensive to implement and you’ll probably need to use fetch to point to a Python file that creates the blob but it is possible.
That being said, nothing can stop someone from taking a screenshot, which is why it’s almost never used for image files, whereas at least to record video takes time, space, and effort.