FiloraFS
FiloraFS API reference
Complete released FiloraFS-Lite and FiloraFS-Pro endpoint reference with edition availability.
Updated
File capability matrix
| Method and path | Lite | Pro | Purpose |
|---|---|---|---|
| POST /file | X-API-KEY | Bearer JWT | Upload a multipart file |
| GET /file/{filename} | Yes | No | Stream a Lite file by stored filename |
| GET /file/stream/{id} | No | Yes | Stream a Pro file inline |
| GET /file/download/{id} | No | Yes | Download a Pro file as an attachment |
| GET /file/list | Yes | Yes | List stored filenames (Lite) or metadata (Pro) |
| GET /file/info/{filename} | Yes | No | Read Lite filesystem metadata |
| GET /file/info/{id} | No | Yes | Read Pro persisted metadata |
| DELETE /file/{filename} | Yes | No | Delete a Lite file |
| DELETE /file/{id} | No | Yes | Delete a Pro file |
| POST /file/generate-pre-signed-url | No | Yes | Create temporary access |
| GET /file/presigned/{token} | No | Public | Use a local application token |
| GET /file/thumbnail/{id} | No | Yes | Return an image thumbnail or fallback |
Lite access model
Every non-OPTIONS request is checked by ApiKeyFilter. Send the configured value in X-API-KEY. Lite has no users, roles, or ownership model.
Pro authentication
| Method | Path | Access | Purpose |
|---|---|---|---|
| POST | /api/auth/register | Public | Create a user |
| POST | /api/auth/login | Public | Return access and refresh tokens |
| POST | /api/auth/refresh | Public | Return a new access token for a valid refresh token |
| POST | /api/auth/logout | Public | Delete the supplied refresh-token session |
Pro users and roles
| Method | Path | Access | Purpose |
|---|---|---|---|
| GET | /api/users/me | Bearer JWT | Return username and authorities |
| GET | /api/users/profile | Bearer JWT | Return the current profile DTO |
| GET | /api/users/all | ROLE_ADMIN | List users |
| GET | /api/users/restricted | ROLE_USER or ROLE_ADMIN | Exercise an additional business rule |
| GET | /api/users/admin-only | ROLE_ADMIN | Exercise an admin-only route |