27 ms·
This is awesome! Been waiting for something like this to replace the bloated SDK Amazon provides. Important question— is there a pathway to getting signed URLs?
by akouri 1y ago
This is awesome! Been waiting for something like this to replace the bloated SDK Amazon provides. Important question— is there a pathway to getting signed URLs?
- neon_me 1y agoFor now, unfortunately, no - no signed URLs are supported. It wasn't my focus (use case), but if you find a simple/minimalistic way to implement it, I can help you with that to integrate it. From my helicopter perspective, it adds extra complexity and size, which could maybe be ideal for a separate fork/project?
- mannyv 1y agoSigned URLs are great because it allows you to allow third parties access to a file without them having to authenticate against AWS. Our primary use case is browser-based uploads. You don't want people uploading anything and everything, like the wordpress upload folder. And it's timed, so you don't have to worry about someone recycling the URL.
- jmogly 1y agoI use presigned urls as part of a federation layer on top of an s3 bucket. Users make authenticated requests to my api which checks their permissions (if they have access to read/write to the specified slice of the s3 bucket), my api sends a presigned url back to allow read/write/delete to that specific portion of the bucket.
- ecshafer 1y agoYou can just use s3 vis rest calls if you dont like their sdk.
- nikeee 1y agoI've built an S3 client with similar goals like TFA, but supports pre-signing: https://github.com/nikeee/lean-s3 https://github.com/nikeee/lean-s3 Pre-signing is about 30 times faster than the AWS SDK and is not async. You can read about why it looks like it does here: https://github.com/nikeee/lean-s3/blob/main/DESIGN_DECISIONS.md https://github.com/nikeee/lean-s3/blob/main/DESIGN_DECISIONS...
- e1g 1y agoFYI, you can add browser support by using noble-hashes[1] for SHA256/HMAC - it's a well-done library, and gives you performance that is indistinguishable from native crypto on any scale relevant to S3 operations. We use it for our in-house S3 client. [1] https://github.com/paulmillr/noble-hashes https://github.com/paulmillr/noble-hashes
- continuational 1y agoSHA256 and HMAC are widely available in the browser APIs: https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/digest https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypt...
- e1g 1y agoSublteCrypto is async, and the author specifically said they want their API to be sync.