mirror of
https://github.com/projectsend/projectsend.git
synced 2026-10-03 21:03:17 +00:00
ignacionelson
a150dc4955
Downloads, previews and public links from managed storage have failed in every browser since late August with the bucket's AccessDenied XML. The platform pins each instance's R2 key to our servers' IP (portal 0125be7, 2026-08-26). Core started redirecting to signed URLs at about the same time (57540164,d6fd5a91). A signed URL carries every restriction of the key that signed it, so it worked from the server and nowhere else. A disk can now name another disk in `signing_disk`, and links are signed with that one. The platform gives it a read-only key without the IP pin. The read-write key stays pinned. A name that points at no configured disk is ignored, and the file's own disk signs as before. Uploads are unaffected: they go through the server, and nothing else signs.