Is there anyway to protect the derivations endpoint?

[gczh]

From what I understand (i might be wrong!), the derivations endpoint allows one to easily generate variants on the fly.

However, if the upload: true setting is turned on, would it be possible for someone to abuse the endpoint and generate infinite variations? With each variation, that would saturate the file storage provider (AWS S3 / Cloudflare R2).

If so, then that would cost quite a bit for the app?

Is there any way then to protect the derivations endpoint from such situations?

[janko]

Yes, derivation URLs are signed, so only the app can generate them - https://shrinerb.com/docs/plugins/derivation_endpoint#how-it-works.