Signed URLs now available for Vercel Blob
Vercel Blob now supports time-bound signed URLs that allow you to generate scoped URLs for upload, download, delete, and inspect operations without exposing your entire Blob store credentials. Each URL is constrained to a single operation, pathname, and expiry (up to 7 days), and multipart upload URLs enable browsers to stream large files directly to storage.
You can now generate time-bound signed URLs for . A signed URL is a scoped URL with an expiry that allows you to upload, download, inspect, or delete a specific object without giving access to your entire Blob store.Vercel Blob
Each URL is scoped to a single operation (, , , or ), a single pathname, and an expiry you choose, up to 7 days. The signature covers the operation and constraints, so a URL signed for a can't be reused as a .putgetheaddeleteGETPUT
Upload URLs () support multipart, so the browser can stream large files straight to Blob storage without round-tripping through your server.put
Delete URLs accept an option so the delete only applies if the object hasn't been overwritten since you signed the URL:ifMatch
Signed URLs work alongside . Your server authenticates to Blob via OIDC, generates a signed token, and produces narrowly scoped, time-bound URLs for the browser, so your long-lived never leaves the server.OIDCBLOB_READ_WRITE_TOKEN
Update to and to get started.@vercel/blob2.4.0read the documentation
Direct uploads from the browser
Conditional deletes
Source: original entry ↗