@betechspark/imageproxy-server

Node-only server helpers for betechspark Image Proxy:

• JWT (HS256) for Authorization: Bearer on GET /image/:id private catalog rows
• HMAC query exp / sig for GET /asset/... with source key fileserver/<uuid> (same secret as File Server)

Built on @betechspark/fileserver-server and @betechspark/imageproxy-client.

Do not import in browser bundles.

Install

npm i @betechspark/imageproxy-server

JWT for /image/:id

import { createImageproxyServer } from '@betechspark/imageproxy-server';

const ip = createImageproxyServer({
  jwtSecret: process.env.JWT_SECRET!,
});

const token = await ip.signImageJwt({ userId: 'user-123' }, 3600);
// Client: fetch(url, { headers: { Authorization: `Bearer ${token}` } })

JWT_SECRET must match Image Proxy configuration (distinct from FILESERVER_SIGNING_SECRET).

HMAC for /asset + fileserver/<id>

const ip = createImageproxyServer({
  jwtSecret: process.env.JWT_SECRET!,
  fileserverSigningSecret: process.env.FILESERVER_SIGNING_SECRET!,
});

const url = ip.buildPrivateFileserverAssetUrl(
  'https://images.example.com',
  fileId,
  { w: 400, f: 'webp' },
  300
);

See USAGE.md for Next.js route handlers.