Implement hash-based file storage for avatars

Spegnimento

25 novembre 2025 alle ore 16:41 UTC

Autore

snadjafinia

Impegno

8a8f54c

- Generate SHA-256 hash from avatar ID after persistence - Store hash in database fileHash field - Upload files to MinIO using hash-based naming: {hash}.{fileExtension} - Update all URL generation to use hash instead of ID - Add backward compatibility: generate hash for old avatars without hash - Update photo upload, Avatar Creator creation, update, and delete operations - Prevents enumeration attacks by making file names unpredictable