LB-Phone and LB-Tablet media uploads with FiveMesh CDN

Use FiveMesh CDN with LB-Phone or LB-Tablet by configuring a custom upload method. Use presigned uploads so the script can upload phone or tablet media without exposing your FiveMesh API key to clients.

If you use both LB-Phone and LB-Tablet, give each script its own CDN path prefix such as /phone and /tablet. You can restrict Developer API Keys to those prefixes from the FiveMesh dashboard.

Prerequisites

Before you begin, confirm:

FiveMesh CDN is set up for the active workspace.
You have either a Server API Key or a Developer API Key with cdn:write permission.
If you use a Developer API Key with path restrictions, its allowed prefixes cover the paths the script should manage.
You can edit the LB-Phone or LB-Tablet server files.

Both LB-Phone and LB-Tablet support Server API Keys (fm_server_...) and Developer API Keys (fm_live_...). Use a Developer API Key with cdn:write and allowed prefixes such as phone or tablet when you need path isolation. A Server API Key includes CDN write access, but its server binding does not restrict CDN paths. See API keys for how to generate either type. The presigned endpoint is https://api.fivemesh.io/v1/presigned-url. The public workspace slug comes from your CDN settings; you do not pass it in this request.

Do not configure direct uploads with a permanent API key in client-visible files. Keep the API key in server-side LB-Scripts files and return presigned upload URLs to the client.

LB-Phone configuration

To use presigned uploads with LB-Phone, update the server and upload configuration.

Configure server credentials

Open lb-phone/server/apiKeys.lua and configure the API keys and target path prefixes.Each API_KEYS value accepts either a Server API Key or a Developer API Key with cdn:write. You can use the same key for all three media types.

API_KEYS = {
    Video = "YOUR_API_KEY",
    Image = "YOUR_API_KEY",
    Audio = "YOUR_API_KEY",
}

UPLOAD_PATHS = {
    Video = "phone/video",
    Image = "phone/images",
    Audio = "phone/audio",
}

Request a presigned upload URL

Update lb-phone/server/custom/functions/functions.lua to implement GetPresignedUrl.

function GetPresignedUrl(source, uploadType)
    local apiKey = API_KEYS[uploadType]
    local uploadPath = UPLOAD_PATHS[uploadType]

    if not apiKey or not uploadPath then
        infoprint("error", ("[GetPresignedUrl] Invalid uploadType '%s' (missing API key or path)"):format(uploadType))
        return false
    end

    local p = promise.new()

    PerformHttpRequest(
        ("https://api.fivemesh.io/v1/presigned-url?allowCustomMetadata=true&randomizeName=true&path=%s"):format(uploadPath),
        function(status, body, headers, error)
            if status ~= 201 then
                infoprint("error", ("[GetPresignedUrl] Request failed for '%s', status: %s"):format(uploadType, status))
                if error then
                  infoprint("error", "Error: " .. error)
                end
                p:resolve(false)
                return
            end

            local ok, data = pcall(json.decode, body)
            if not ok or not data or not data.success or not data.uploadUrl then
                infoprint("error", ("[GetPresignedUrl] Invalid response for '%s'"):format(uploadType))
                p:resolve(false)
                return
            end

            p:resolve(data.uploadUrl)
        end,
        "GET",
        nil,
        { ["Authorization"] = ("Bearer %s"):format(apiKey) }
    )

    return Citizen.Await(p)
end

Use presigned URLs in upload settings

In lb-phone/shared/upload.lua, set url to "PRESIGNED_URL" for custom methods. Set each media type in Config.UploadMethod to "Custom" in your phone configuration.

UploadMethods = {
    Custom = {
        Video = {
            url = "PRESIGNED_URL",
            field = "file",
        },
        Image = {
            url = "PRESIGNED_URL",
            field = "file",
        },
        Audio = {
            url = "PRESIGNED_URL",
            field = "file",
        },
    }
}

Return the custom method

Confirm CustomGetUploadMethod exists in lb-phone/client/custom/functions/functions.lua.

---@param uploadType "Video" | "Image" | "Audio"
---@return UploadMethod?
function CustomGetUploadMethod(uploadType)
    local methods = UploadMethods[Config.UploadMethod[uploadType]]
    if not methods then
        infoprint("error", "Upload methods not found for ", uploadType)
        return
    end

    ---@type UploadMethod?
    local method = methods[uploadType] or methods.Default
    if not method then
        infoprint("error", "Upload method not found for ", uploadType)
        return
    end

    return method
end

LB-Tablet configuration

LB-Tablet uses the same presigned upload pattern.

Configure server credentials

Open lb-tablet/server/apiKeys.lua and add the same API_KEYS and UPLOAD_PATHS values. Either key type works here too.

Request a presigned upload URL

Update lb-tablet/server/custom/functions/functions.lua with the same GetPresignedUrl function used for LB-Phone.

Use presigned URLs in upload settings

In lb-tablet/config/upload.lua, set url = "PRESIGNED_URL" for each custom media type. Set the corresponding Config.UploadMethod entries to "Custom".

Return the custom method

Confirm CustomGetUploadMethod is implemented in lb-tablet/client/custom/functions/functions.lua.

Verify uploads

Restart the affected LB resource after changing its configuration. Upload an image, video and audio clip, then check each public URL and the intended CDN folder. LB versions can change custom hook locations. Check your installed resource and the official LB-Phone installation guide or LB-Tablet installation guide before replacing a hook. Preserve other customizations when updating.

Troubleshooting

GetPresignedUrl prints the HTTP status to the server console when FiveMesh does not return an upload URL.

Status	Check
`401`	The API key is missing, mistyped or revoked. Copy the full key into `apiKeys.lua` and restart the resource.
`403`	The key lacks `cdn:write`, or a Developer API Key’s allowed prefixes do not cover the `UPLOAD_PATHS` value.
`0` or no status	The server could not reach `api.fivemesh.io`. Check outbound HTTPS from the game server.

If the upload URL is created but media does not appear, confirm each media type in Config.UploadMethod is set to "Custom" and that FiveMesh CDN setup has finished provisioning. Check the intended folder in the object browser.

Dashboard

Integrations

FiveMesh CDN

FiveMesh Cache

FiveMesh Voice

FiveMesh Logs

FiveMesh Portal

Account

Reference

LB-Phone and LB-Tablet media uploads with FiveMesh CDN

Prerequisites

LB-Phone configuration

LB-Tablet configuration

Verify uploads

Troubleshooting

Prerequisites

LB-Phone configuration

LB-Tablet configuration

Verify uploads

Troubleshooting

Related pages