package storage

import "strings"

const AvatarKeyPrefix = "avatars/"

// IsPublicAssetKey reports whether an object key may be served without auth.
func IsPublicAssetKey(key string) bool {
	key = strings.TrimSpace(key)
	if key == "" {
		return false
	}
	if strings.Contains(key, "..") {
		return false
	}
	return strings.HasPrefix(key, PublishAttachmentKeyPrefix) ||
		strings.HasPrefix(key, AvatarKeyPrefix) ||
		strings.HasPrefix(key, EphemeralKeyPrefix)
}