공유 파일 요청
컬렉션을 사용해 정리하기
내 환경설정을 기준으로 콘텐츠를 저장하고 분류하세요.
앱이 다른 앱에서 공유한 파일에 액세스하려고 할 때 권한을 요청하는 앱 (클라이언트)
는 일반적으로 파일을 공유하는 앱 (서버)에 요청을 보냅니다. 대부분의 경우 요청은
서버 앱에서 공유할 수 있는 파일을 표시하는 Activity
를 시작합니다.
사용자가 파일을 선택하면 서버 앱은 파일의 콘텐츠 URI를
클라이언트 앱을 선택합니다.
이 과정에서는 클라이언트 앱이 서버 앱에서 파일을 요청하고 파일의
콘텐츠 URI를 가져와서 콘텐츠 URI를 사용하여 파일을 엽니다.
파일 요청 전송
서버 앱에서 파일을 요청하기 위해 클라이언트 앱은
startActivityForResult
다음과 같은 작업이 포함된 Intent
ACTION_PICK
및 클라이언트 앱의 MIME 유형
처리할 수 있습니다.
예를 들어, 다음 코드 스니펫은
Intent
를 서버 앱에 연결하여
파일 공유에서 설명한 Activity
는 다음과 같습니다.
Kotlin
class MainActivity : Activity() {
private lateinit var requestFileIntent: Intent
private lateinit var inputPFD: ParcelFileDescriptor
...
override fun onCreate(savedInstanceState: Bundle?) {
super.onCreate(savedInstanceState)
setContentView(R.layout.activity_main)
requestFileIntent = Intent(Intent.ACTION_PICK).apply {
type = "image/jpg"
}
...
}
...
private fun requestFile() {
/**
* When the user requests a file, send an Intent to the
* server app.
* files.
*/
startActivityForResult(requestFileIntent, 0)
...
}
...
}
자바
public class MainActivity extends Activity {
private Intent requestFileIntent;
private ParcelFileDescriptor inputPFD;
...
@Override
protected void onCreate(Bundle savedInstanceState) {
super.onCreate(savedInstanceState);
setContentView(R.layout.activity_main);
requestFileIntent = new Intent(Intent.ACTION_PICK);
requestFileIntent.setType("image/jpg");
...
}
...
protected void requestFile() {
/**
* When the user requests a file, send an Intent to the
* server app.
* files.
*/
startActivityForResult(requestFileIntent, 0);
...
}
...
}
요청한 파일에 액세스
서버 앱은 파일의 콘텐츠 URI를
Intent
이 Intent
는 클라이언트에 전달됩니다.
앱이 onActivityResult()
의 재정의에서 사용됩니다. 한 번
클라이언트 앱이 파일의 콘텐츠 URI를 가지고 있다면
FileDescriptor
파일 보안은 콘텐츠 URI를 적절하게 파싱하는 경우에만 이 과정에서 보존됩니다.
클라이언트 앱이
수신하는 알림을 전송합니다. 콘텐츠를 파싱할 때 이 URI가 가리키지 않는지 확인해야 합니다.
원하는 디렉터리 외부의 모든 파일에 액세스할 수 있으므로
경로 순회를 시도해야 합니다.
클라이언트 앱만 파일에 액세스할 수 있어야 하고
있습니다. 권한은 일시적이므로 클라이언트 앱의 작업 스택이 완료되면
파일에 더 이상 액세스할 수 없습니다.
다음 스니펫은 클라이언트 앱이
서버 앱에서 전송된 Intent
및 클라이언트 앱이
다음과 같이 콘텐츠 URI를 사용하는 FileDescriptor
입니다.
Kotlin
/*
* When the Activity of the app that hosts files sets a result and calls
* finish(), this method is invoked. The returned Intent contains the
* content URI of a selected file. The result code indicates if the
* selection worked or not.
*/
public override fun onActivityResult(requestCode: Int, resultCode: Int, returnIntent: Intent) {
// If the selection didn't work
if (resultCode != Activity.RESULT_OK) {
// Exit without doing anything else
return
}
// Get the file's content URI from the incoming Intent
returnIntent.data?.also { returnUri ->
/*
* Try to open the file for "read" access using the
* returned URI. If the file isn't found, write to the
* error log and return.
*/
inputPFD = try {
/*
* Get the content resolver instance for this context, and use it
* to get a ParcelFileDescriptor for the file.
*/
contentResolver.openFileDescriptor(returnUri, "r")
} catch (e: FileNotFoundException) {
e.printStackTrace()
Log.e("MainActivity", "File not found.")
return
}
// Get a regular file descriptor for the file
val fd = inputPFD.fileDescriptor
...
}
}
자바
/*
* When the Activity of the app that hosts files sets a result and calls
* finish(), this method is invoked. The returned Intent contains the
* content URI of a selected file. The result code indicates if the
* selection worked or not.
*/
@Override
public void onActivityResult(int requestCode, int resultCode,
Intent returnIntent) {
// If the selection didn't work
if (resultCode != RESULT_OK) {
// Exit without doing anything else
return;
} else {
// Get the file's content URI from the incoming Intent
Uri returnUri = returnIntent.getData();
/*
* Try to open the file for "read" access using the
* returned URI. If the file isn't found, write to the
* error log and return.
*/
try {
/*
* Get the content resolver instance for this context, and use it
* to get a ParcelFileDescriptor for the file.
*/
inputPFD = getContentResolver().openFileDescriptor(returnUri, "r");
} catch (FileNotFoundException e) {
e.printStackTrace();
Log.e("MainActivity", "File not found.");
return;
}
// Get a regular file descriptor for the file
FileDescriptor fd = inputPFD.getFileDescriptor();
...
}
}
openFileDescriptor()
메서드
파일의 ParcelFileDescriptor
를 반환합니다. 이 객체에서 클라이언트는
앱은 FileDescriptor
객체를 가져와 파일을 읽는 데 사용할 수 있습니다.
추가 관련 정보는 다음을 참조하세요.
이 페이지에 나와 있는 콘텐츠와 코드 샘플에는 콘텐츠 라이선스에서 설명하는 라이선스가 적용됩니다. 자바 및 OpenJDK는 Oracle 및 Oracle 계열사의 상표 또는 등록 상표입니다.
최종 업데이트: 2025-07-27(UTC)
[null,null,["최종 업데이트: 2025-07-27(UTC)"],[],[],null,["# Requesting a shared file\n\nWhen an app wants to access a file shared by another app, the requesting app (the client)\nusually sends a request to the app sharing the files (the server). In most cases, the request\nstarts an [Activity](/reference/android/app/Activity) in the server app that displays the files it can share.\nThe user picks a file, after which the server app returns the file's content URI to the\nclient app.\n\n\nThis lesson shows you how a client app requests a file from a server app, receives the file's\ncontent URI from the server app, and opens the file using the content URI.\n\nSend a request for the file\n---------------------------\n\n\nTo request a file from the server app, the client app calls\n[startActivityForResult](/reference/android/app/Activity#startActivityForResult(android.content.Intent, int)) with an\n[Intent](/reference/android/content/Intent) containing the action such as\n[ACTION_PICK](/reference/android/content/Intent#ACTION_PICK) and a MIME type that the client app\ncan handle.\n\n\nFor example, the following code snippet demonstrates how to send an\n[Intent](/reference/android/content/Intent) to a server app in order to start the\n[Activity](/reference/android/app/Activity) described in [Sharing a file](/training/secure-file-sharing/share-file#SendURI): \n\n### Kotlin\n\n```kotlin\nclass MainActivity : Activity() {\n private lateinit var requestFileIntent: Intent\n private lateinit var inputPFD: ParcelFileDescriptor\n ...\n override fun onCreate(savedInstanceState: Bundle?) {\n super.onCreate(savedInstanceState)\n setContentView(R.layout.activity_main)\n requestFileIntent = Intent(Intent.ACTION_PICK).apply {\n type = \"image/jpg\"\n }\n ...\n }\n ...\n private fun requestFile() {\n /**\n * When the user requests a file, send an Intent to the\n * server app.\n * files.\n */\n startActivityForResult(requestFileIntent, 0)\n ...\n }\n ...\n}\n```\n\n### Java\n\n```java\npublic class MainActivity extends Activity {\n private Intent requestFileIntent;\n private ParcelFileDescriptor inputPFD;\n ...\n @Override\n protected void onCreate(Bundle savedInstanceState) {\n super.onCreate(savedInstanceState);\n setContentView(R.layout.activity_main);\n requestFileIntent = new Intent(Intent.ACTION_PICK);\n requestFileIntent.setType(\"image/jpg\");\n ...\n }\n ...\n protected void requestFile() {\n /**\n * When the user requests a file, send an Intent to the\n * server app.\n * files.\n */\n startActivityForResult(requestFileIntent, 0);\n ...\n }\n ...\n}\n```\n\nAccess the requested file\n-------------------------\n\n\nThe server app sends the file's content URI back to the client app in an\n[Intent](/reference/android/content/Intent). This [Intent](/reference/android/content/Intent) is passed to the client\napp in its override of [onActivityResult()](/reference/android/app/Activity#onActivityResult(int, int, android.content.Intent)). Once\nthe client app has the file's content URI, it can access the file by getting its\n[FileDescriptor](/reference/java/io/FileDescriptor).\n\n\nFile security is preserved in this process only as long as you properly parse the content URI\nthat the client app receives. When parsing content, you must ensure that this URI does not point\nto anything outside of the intended directory, ensuring that no\n[path traversal](/privacy-and-security/risks/path-traversal) is being attempted.\nOnly the client app should gain access to the file, and only for the permissions granted by the\nserver app. Permissions are temporary, so once the client app's task stack is finished, the\nfile is no longer accessible outside the server app.\n\n\nThe next snippet demonstrates how the client app handles the\n[Intent](/reference/android/content/Intent) sent from the server app, and how the client app gets the\n[FileDescriptor](/reference/java/io/FileDescriptor) using the content URI: \n\n### Kotlin\n\n```kotlin\n/*\n * When the Activity of the app that hosts files sets a result and calls\n * finish(), this method is invoked. The returned Intent contains the\n * content URI of a selected file. The result code indicates if the\n * selection worked or not.\n */\npublic override fun onActivityResult(requestCode: Int, resultCode: Int, returnIntent: Intent) {\n // If the selection didn't work\n if (resultCode != Activity.RESULT_OK) {\n // Exit without doing anything else\n return\n }\n // Get the file's content URI from the incoming Intent\n returnIntent.data?.also { returnUri -\u003e\n /*\n * Try to open the file for \"read\" access using the\n * returned URI. If the file isn't found, write to the\n * error log and return.\n */\n inputPFD = try {\n /*\n * Get the content resolver instance for this context, and use it\n * to get a ParcelFileDescriptor for the file.\n */\n contentResolver.openFileDescriptor(returnUri, \"r\")\n } catch (e: FileNotFoundException) {\n e.printStackTrace()\n Log.e(\"MainActivity\", \"File not found.\")\n return\n }\n\n // Get a regular file descriptor for the file\n val fd = inputPFD.fileDescriptor\n ...\n }\n}\n```\n\n### Java\n\n```java\n /*\n * When the Activity of the app that hosts files sets a result and calls\n * finish(), this method is invoked. The returned Intent contains the\n * content URI of a selected file. The result code indicates if the\n * selection worked or not.\n */\n @Override\n public void onActivityResult(int requestCode, int resultCode,\n Intent returnIntent) {\n // If the selection didn't work\n if (resultCode != RESULT_OK) {\n // Exit without doing anything else\n return;\n } else {\n // Get the file's content URI from the incoming Intent\n Uri returnUri = returnIntent.getData();\n /*\n * Try to open the file for \"read\" access using the\n * returned URI. If the file isn't found, write to the\n * error log and return.\n */\n try {\n /*\n * Get the content resolver instance for this context, and use it\n * to get a ParcelFileDescriptor for the file.\n */\n inputPFD = getContentResolver().openFileDescriptor(returnUri, \"r\");\n } catch (FileNotFoundException e) {\n e.printStackTrace();\n Log.e(\"MainActivity\", \"File not found.\");\n return;\n }\n // Get a regular file descriptor for the file\n FileDescriptor fd = inputPFD.getFileDescriptor();\n ...\n }\n }\n```\n\n\nThe method [openFileDescriptor()](/reference/android/content/ContentResolver#openFileDescriptor(android.net.Uri, java.lang.String))\nreturns a [ParcelFileDescriptor](/reference/android/os/ParcelFileDescriptor) for the file. From this object, the client\napp gets a [FileDescriptor](/reference/java/io/FileDescriptor) object, which it can then use to read the file.\n\nFor additional related information, refer to:\n\n- [Intents and Intent Filters](/guide/components/intents-filters)\n- [Retrieving Data from the Provider](/guide/topics/providers/content-provider-basics#SimpleQuery)"]]