Version: 1.0.0
Portrait API
Portrait is Intrasys's self-hosted, Gravatar-style avatar service. Two surfaces on two hosts:
media.portrait.intrasys.ai— public, unauthenticated reads. Every well-formed hash resolves to a saved avatar (designed / uploaded) or a deterministic generated one.api.portrait.intrasys.ai— session-gated writes. Requires a Portrait WorkOS session cookie and only ever acts on hashes the session user has verified.
The identity key is sha256(lower(trim(email))) — byte-identical to
Gravatar's spec, public, safe in client-side HTML.
Authentication
- API Key: sessionCookie
Iron-sealed WorkOS session cookie, scoped to .portrait.intrasys.ai.
Set by the headless Magic Auth flow; sent automatically by the console.
Security Scheme Type: | apiKey |
|---|---|
Cookie parameter name: | portrait_session |