Workflowdownloadsgcssecuritytopic:system

    Secure Download Delivery (GCS Signed URLs)

    Token-gated download endpoint that signs private Google Cloud Storage URLs and enforces download limits.

    Context

    This workflow is part of RPS Digital project.

    Workflow

    Secure Download Delivery (GCS Signed URLs)

    6 steps
    1. Receive download token request
      action
    2. Token valid and within limits?
      decision
    3. Resolve storage object key
      action
    4. Generate GCS signed URL
      decision
    5. Record download attempt
      action
    6. Respond with redirect or JSON
      action