Uploads and expiring links.
Keep your users’ files from your backend and hand out download links that expire. No storage key ever reaches a browser.
What you get.
Only links leave.
Your backend calls Objects, never a browser. A browser only ever sees a link.
Every upload checked.
MDRN reads each upload back and checks it against the SHA-256 you gave before the file is ready.
Deleted, not gone.
A deleted file is kept 30 days. Restore it from the console in that time.
A link that expires.
Your backend checks who is asking, then hands the browser a download link. Anyone holding it can open the file for 15 minutes, then it stops working.
Questions.
Does Objects know which user owns a file?
No. Every file belongs to the project and environment, and your backend decides who may reach it: store each file’s owner and check it before every link.
Is an uploaded HTML or SVG file safe to open?
Yes. A download is served inside a sandbox, so a file someone uploaded runs no script and reaches no cookie when opened.
Can I take every file with me?
Yes. mdrn objects pull <dir> downloads every ready file under the name you gave it, and running it again finishes an interrupted pull.