Workspace File Management
The Workspace File Management backend is the canonical file catalog used by the Cogrion Workspace UI. It stores hierarchy, stable IDs, permissions, trash state, and history metadata in PostgreSQL and stores file bytes in S3 or Alibaba OSS.
What It Does
- Lists and mutates an access-controlled folder hierarchy
- Handles upload, download, rename, move, clone, trash, and restore
- Stores direct user grants and inherited folder access
- Records file-history events and object-version identifiers when storage versioning supplies them
Components
| Component | Description |
|---|---|
| Service | Custom backend (workspace-file-management-backend) — Keycloak OIDC, REST API |
| PostgreSQL | Canonical file/folder metadata, permissions, trash state, and history |
| S3 or OSS | File bytes and optional historical object versions |
Storage
AWS uses workload identity for S3; AliCloud uses RRSA for OSS. Files use opaque
keys below workspace-file-management/. Rename and move update metadata without
moving bytes.
Authentication
Keycloak OIDC via a dedicated OAuth client.
Go Deeper
- JupyterHub — runtime for notebooks stored through this service
- Storages — the workspace S3 or OSS bucket this service reads and writes
- BFF API — proxies file requests from the Cogrion UI to this service
- Workspace file assessment — current behavior, architecture, evidence, and findings