Ironflow is pre-1.0: APIs can change between releases. Pin a version. What is ready →

Signed URL Flow

Your backend asks Ironflow for a signed URL. Ironflow checks that the bucket allows signed URLs, then signs a token for one path. The browser sends a plain PUT with the token and needs no Ironflow credentials. Ironflow reads the bucket switch again on every use, so setting allowSignedUrls: false stops every URL of the bucket at once.

Ironflow signed URL upload: backend mints a token, browser uploads with it

Limits, TTL and cluster rules are in File Storage.