Configuration

Publish the config

php artisan vendor:publish --tag=media-library-config

The configuration file will be placed in config/media-library.php

Api Path

Allow the endpoint path in config/cors.php. The default is media.

...
'paths' => [..., 'media/*'],
...

Middleware

Guard your uploads and mutation endpoints to only allow admin access.

This guards the protected file access routes, browsing and file/folder update endpoints. Alternatively you can desable certain endpoints if not needed.

...
'route' => [
	...
    'middleware' => [
        ...
        'media.protected' => [
            'auth',
            'can',
        ]
    ],
],

To further protect other routes, define the values for each route name.

See all routes.