- π¬π§United Kingdom shenzhuxi
I don't think $settings['s3fs.upload_as_private'] = TRUE is sufficient now. With this setting, all the public files, included aggregated js/css, need the token to have permission to be accessed. Users need to set up "Presigned URLs" and timing cache to make the public files accessible. It won't work with Drupal 10 because https://www.drupal.org/project/drupal/issues/3027639 π Make css/js optimized assets path configurable Fixed .
I think this module should allow read access to public directory without the requirement of the token, so users can simply change the new $settings['file_public_base_url'] in Drupal 10.
- πΊπΈUnited States cmlara
It won't work with Drupal 10 because https://www.drupal.org/project/drupal/issues/3027639 π Make css/js optimized assets path configurable Fixed .
That config option is only relevant for the assets:// scheme, which is not currently supported by s3fs. My current suggestion is we do not add support for assets:// as it is heavily tied to core and is stateless safe, see β¨ Add support for s3fs to use the assets:// stream wrapper Postponed .
Users need to set up "Presigned URLs" and timing cache to make the public files accessible.
That is one option, another (IMHO better) option is that the S3 Bucket Access Policy be configured to allow public access for the public paths in the bucket. Ive also heard of CDN's being able to use authenticated access to feed the public path. This is (lightly) noted in the README file.
I think this module should allow read access to public directory without the requirement of the token, so users can simply change the new $settings['file_public_base_url'] in Drupal 10.
$settings['file_public_base_url']
is used by the core public:// and its derivative scheme to change its base URL. in s3fs we do offer the CNAME configuration option that accomplishes the same feature to change the host a bucket is refereed to, though a feature request could be made for s3fs to use$settings['file_public_base_url']
as an override for the public:// s3fs scheme if that is what you are looking for, that isn't tied to Bucket Owner Enforced support.