Request
Response
Returns a smaller, optimized version of the image.Query Parameters
Thumbnail vs Full Image
Use Cases
- Gallery thumbnails
- List views
- Card previews
- Low-bandwidth scenarios
HTML Usage
Access Control
- Public uploads: Thumbnails accessible to everyone
- Private uploads: Thumbnails require authentication and ownership:
- No auth cookie/token present: returns
401 Unauthorized - Authenticated but not the owner: returns
403 Forbidden - There is no admin override - only the owner can access a private upload’s thumbnail
- No auth cookie/token present: returns
/api/image/{id}, which returns 404 Not Found for all unauthorized access to private images (including missing auth and non-owner requests) to avoid leaking whether an upload exists.