water/server/app/miniapi/controller/PhotoController.php

<?php

declare(strict_types=1);

namespace app\miniapi\controller;

use support\Request;
use support\Response;
use support\annotation\route\DisableDefaultRoute;
use app\miniapi\http\Fields;
use app\miniapi\service\PhotoService;

#[DisableDefaultRoute]
final class PhotoController extends BaseController
{
    public function photo(Request $request, string $id): Response
    {
        $photo = (new PhotoService($this->access($request)))->read(
            $this->id($id),
            Fields::choice($request->get(), 'scope', ['enterprise', 'driver']),
            Fields::id($request->get(), 'resource_id')
        );

        return new Response(200, [
            'Content-Type' => $photo->mime,
            'Cache-Control' => 'no-store',
            'X-Content-Type-Options' => 'nosniff',
        ], $photo->image_data);
    }
}