Version: 1.0.0
Portrait API
Portrait is Intrasys's self-hosted, Gravatar-style avatar service. Two surfaces on two hosts:
media.portrait.intrasys.ai— public, unauthenticated reads. Every well-formed hash resolves to a saved avatar (designed / uploaded) or a deterministic generated one.api.portrait.intrasys.ai— session-gated writes. Requires a Portrait sign-in and only ever acts on hashes the session user has verified.
The identity key is sha256(lower(trim(email))) — byte-identical to
Gravatar's spec, public, safe in client-side HTML.
Authentication
- API Key: sessionCookie
Session cookie scoped to .portrait.intrasys.ai, set by the
magic-link sign-in and sent automatically by the console.
Security Scheme Type: | apiKey |
|---|---|
Cookie parameter name: | portrait_session |