Scoped upload URLs - FiveMesh Docs

Use scoped upload URLs when another script or client-visible integration needs to upload a file without receiving the service key. The SDK calls GET /presigned-url with your server-side service key and returns a short-lived uploadUrl. Uploads sent to that URL are checked against the path, file count, file size and MIME rules you configured.

Create an upload URL

local upload = exports["fivemesh-sdk"]:createPresignedUrl({
    path = "uploads",
    maxFiles = 1,
    expiresIn = 3600,
    allowedMimeTypes = { "image/png", "image/jpeg" },
    allowCustomMetadata = true
})

if not upload.success then
    print(("FiveMesh upload URL failed: %s"):format(upload.error.message))
    return
end

print(upload.uploadUrl)

The returned URL is a credential. Keep it short-lived and scoped to the path the caller needs.

Upload with the URL

Use uploadWithPresignedUrl if a server resource already has a token or full upload URL and wants to send a file through it.

local result = exports["fivemesh-sdk"]:uploadWithPresignedUrl(upload.uploadUrl, fileBytes, {
    filename = "proof.png",
    metadata = {
        source = "support"
    }
})

if not result.success then
    print(("FiveMesh presigned upload failed: %s"):format(result.error.message))
    return
end

print(result.object.publicUrl)

Options

Option	Description
`path`	Locks uploads to a CDN folder.
`maxFiles`	Maximum files accepted by the URL.
`expiresIn`	URL lifetime in seconds.
`maxFileSize`	Maximum bytes accepted per file.
`allowedMimeTypes`	MIME allow-list such as `image/png` or `image/jpeg`.
`allowCustomMetadata`	Allows upload requests to include metadata.