Allow anonymous access on the S3 endpoint #263

Open
opened 2022-03-06 17:01:04 +00:00 by quentin · 4 comments
Owner

This issue tracks wether we want to allow anonymous access on the S3 endpoint and how (currently we allow anonymous access only on the website endpoint that we can use as a "fake" CDN). This is the place to reference which applications are using it, and wether we have a workaround for them.

Currently, the following apps are known to use anonymous access on the S3 API:

  • Peertube, a workaround is known (cf doc)
  • Misskey, a workaround is known (similar to Peertube)

Other apps we suspect may need this workaround:

  • Mastodon
This issue tracks wether we want to allow anonymous access on the S3 endpoint and how (currently we allow anonymous access only on the website endpoint that we can use as a "fake" CDN). This is the place to reference which applications are using it, and wether we have a workaround for them. Currently, the following apps are known to use anonymous access on the S3 API: - Peertube, a workaround is known (cf doc) - Misskey, a workaround is known (similar to Peertube) Other apps we suspect may need this workaround: - Mastodon
quentin added the
scope
s3-api
label 2022-03-06 17:01:04 +00:00

This would be a great feature. I regularly use minio with the following use case: I upload a file to a bucket, and a link to this file is then shared (with the https://s3.domain.tld/bucket/file.ext URL).

It would be great to be able to transition to garage, but I can't change the shared links.

Thus having a feature like this would help, even better with a file granularity on what is read-only and what is not accessible.

I know it would be possible to setup a workaround by using the web port, but I would like to avoid having to change the subdomain.

So yeah, that's my use case for anonymous access to buckets! :-)

This would be a great feature. I regularly use minio with the following use case: I upload a file to a bucket, and a link to this file is then shared (with the https://s3.domain.tld/bucket/file.ext URL). It would be great to be able to transition to garage, but I can't change the shared links. Thus having a feature like this would help, even better with a file granularity on what is read-only and what is not accessible. I know it would be possible to setup a workaround by using the web port, but I would like to avoid having to change the subdomain. So yeah, that's my use case for anonymous access to buckets! :-)

Any update on this regarding a possible inclusion in the roadmap?

Any update on this regarding a possible inclusion in the roadmap?
Owner

Sorry, it's quite low priority and I don't have time to dedicate to this currently, so it's not on any roadmap. Feel free to work on this yourself if you're interested :)

Sorry, it's quite low priority and I don't have time to dedicate to this currently, so it's not on any roadmap. Feel free to work on this yourself if you're interested :)
Contributor

Outline use this feature ;)

[`Outline`](https://github.com/outline/outline/discussions/5108) use this feature ;)
Sign in to join this conversation.
No milestone
No project
No assignees
4 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: Deuxfleurs/garage#263
No description provided.