Skip to main content

MAX_SIGNED_URL_SECONDS

@forge/monorepo

@forge/monorepo / backend/src / MAX_SIGNED_URL_SECONDS

Variable: MAX_SIGNED_URL_SECONDS

const MAX_SIGNED_URL_SECONDS: 900 = 900

Defined in: backend/src/files/index.ts:50

The ceiling on a signed URL's life.

A signed URL is a bearer token in a query string: it goes into logs, into a browser's history, and — if a tool result ever carried one — into the run event log, where anyone who can read the conversation can read it long after the check that produced it. #118 refused to return one from a tool for exactly that reason.

Fifteen minutes is long enough to load a document and short enough that a leaked URL is usually already dead. signedReadUrl clamps rather than trusting the caller.