You can now generate time-bound signed URLs for . A signed URL is a scoped URL with an expiry that allows you to upload, download, inspect, or delete a specific object without giving access to your entire Blob store.Vercel Blob Each URL is scoped to a single operation (, , , or ), a single pathname, and an expiry you choose, up to 7 days. The signature covers the operation and constraints, so a URL signed for a can't be reused as a .putgetheaddeleteGETPUT Upload URLs () support multipart, so the browser can stream large files straight to Blob storage without round-tripping through your server.put Delete URLs accept an option so the delete only applies if the object hasn't been overwritten since you signed the URL:ifMatch Signed URLs work alongside .

Your server authenticates to Blob via OIDC, generates a signed token, and produces narrowly scoped, time-bound URLs for the browser, so your long-lived never leaves the server.OIDCBLOB_READ_WRITE_TOKEN Update to and to get started.@vercel/blob2.4.0read the documentation Read more Direct uploads from the browser Conditional deletes