How it works
When BYOS is connected, a completed stream is copied to your backend under an encrypted key (torrin never stores your filenames in the clear). Playback still goes through torrin’s signed, geo-routed URLs, so the origin and your credentials stay hidden — the client can’t tell BYOS content from shared-cache content.Connecting
Two shapes, depending on the backend:-
S3-compatible (S3, Backblaze, Wasabi, Garage…) — pass the endpoint and keys directly:
-
OAuth backends (Google Drive, Dropbox, OneDrive, pCloud) — start the consent flow at
GET /api/storage/oauth/{provider}/startand torrin finishes the connection on callback.
Managing it
Everything written to your storage is encrypted with a key torrin holds, so a raw browse of
your bucket shows opaque blobs, not media.