Enhancement Request: Improve Security of Signed URLs for Document Access

Zisha

Current Behavior

• Limble generates pre-signed URLs for files (with Expires, Signature, and Key-Pair-Id).
• These URLs act as bearer tokens — anyone who has the link can open the file until it expires.
• Once generated, there is no additional validation (e.g., whether the user is still logged in).

Pros of the Current Setup

• Convenient for sharing or embedding files.
• Fast and scalable, works well with CDNs.
• Expiration timestamp offers a basic safeguard.

Cons / Risks

• If a link is leaked or forwarded, anyone can access it until it expires.
• No way to revoke a single URL early (except by rotating all signing keys).