Displaying unpublished photos in Composer preview

[gmacgregor]

Does the ArcXP team or the ArcXP community have any implementation suggestions regarding the May 1 change that deprecates public access to unpublished images via Resizer? The only advice/solution outlined I can find is:

• Use an Arc Developer Token to securely access unpublished images over the web
• Alternatively, publish the content that needs to be viewed publicly.

I have been working on this issue but haven’t yet made any real progress. We are already generating image urls for unpublished photos with a auth token in place, using the Signing Service API. However, unpublished photos fail to load (Access Denied error) and I cannot figure out why. Here's an example of a unpublished photo url that uses the signing service:

https://<my-org-subdomain>.<org-tld>.com/resizer/v2/E5ZG3WT5AFGZFH6A453I75GC5M.jpg?auth=e69a8e77af16624b3701d13005b9e2b6e79146c93bde2d83bf9985216c8b90d0&width=1500&quality=80

My expectation is that despite being unpublished, since it's a signed url, it should be accessible. However, I receive a AccessDenied error. Am I signing the wrong asset metadata (the photo id)? Does the signing service expect a restricted or read only Arc access token? The one I am supplying now is a all access admin token.

Any help or suggestions appreciated, thanks!

[jimas14]

Hi @gmacgregor, thanks for the question!

Unpublished images are only accessible via our authenticated environment (i.e. *.arcpublishing.com), and also requires a &public=false query parameter to be present. Have you tried adding that?

[gmacgregor]

This is helpful @jimas14 thank you so much. Serving form the .arcpublishing.com TLD with public=false seems to work as expected.

May I suggest that this information be added to developer docs, maybe on the page about how to use resizer.

[jimas14]

Glad to hear! We've updated the FAQ to include this 👍