[Feature] Support for Immich Public Proxy

[apparle]

I have searched the existing feature requests to make sure this is not a duplicate request.

• Yes

The feature

Instead of API key, which allow full blown access to immich, I'd prefer Kiosk to run on top of an Immich Public Proxy link. This enhances the security.

Is that possible?

[damongolding]

That is not possible.

Kiosk requires direct access to Immich to retrieve all the data needed from the API.

[apparle]

I'm asking the question in a different way -- is the frontend modular enough that if one is happy with only the limited information available via public proxy, can we make a nice slideshow and display it ?

Architecturally, immich-kiosk is relatively higher risk security wise, because it's getting access to whole of immich even though it only needs access to a subset of images. And I expect immich-kiosk to run on devices in other family members' devices like TVs and digital frames, and that too with relatively poor security postures (outdated OSes, poor firewalls etc.). So, ideally I want a mechanism to limit the external internet access to a very limited set of images, not whole of immich. Public proxy is a interesting tool in that it doesn't ask for full access to immich but only what's already authorized with URL based tokens.

[damongolding]

The frontend does very little. It doesn't connect to Immich directly either. It's the server that does all the heavy lifting and communication with Immich.

For your case, is it the risk of said family members seeing images/assets that are not intended for them?