Skip to content

Avatar review lifecycle

View as Markdown

Uploaded avatars are user-controlled media, so Sudomimus separates account preview from application delivery.

The user may see a newly uploaded image on their own account surface while it is waiting for review. Applications continue to receive the current approved avatar, or a generated fallback, until the upload is approved.

StateWhat the user seesWhat applications receive
PENDINGThe account surface can show the uploaded preview and mark it as waiting for review.The previous approved avatar, or the generated fallback.
APPROVEDThe upload becomes the account avatar.Future tokens and /userinfo responses can include the approved avatar when claim policy and consent allow it.
REJECTEDThe upload should be shown as rejected or replaced by the fallback/current avatar.No change. Applications keep receiving the previous approved avatar or fallback.

Applications do not fetch account-avatar review state directly. They see avatar data only through the claim system:

  • Session and OIDC /userinfo can include picture and picture_animated.
  • Avatar fields appear only when the application’s claim policy and the user’s grant allow them.

When an upload is approved, applications see the new avatar on the next token issue or /userinfo response that includes the avatar claim. Treat those URLs as replaceable profile fields, not permanent identifiers.

  • Show pending uploads only in account-management UI, not as if they were already published to applications.
  • Keep a fallback ready for rejected uploads.
  • Do not promise that an uploaded avatar is visible to applications until it is approved.
  • If your product supports motion, use the animated URL; otherwise render the static URL.