Can't access private files on Amazon S3 or Rackspace

[seanthepottingshed]

• OctoberCMS Build: Latest
• PHP Version: 7.2
• Database Engine: mysql
• Plugins Installed: RainLab.GoogleAnalytics 1.3.0

Description:

Clicking on fileupload form widget, displays modal with Attachment URL link for private files:

• https://github.com/rainlab/googleanalytics-plugin/blob/master/models/Settings.php#L23

Steps To Reproduce:

• Navigate Settings > Google Analytics
• Ensure Private Key already uploaded
• Click on fileuploader widget
• Click on Attachment URL

[LukeTowers]

Seems like a problem with your storage driver @seanthepottingshed, the URL generated by private files should be pointing at the backend files controller by default. Can you share the URL you're seeing and the configuration of the filesystem disk used for the file in question?

[seanthepottingshed]

Sure thing here you go:

• https://voyonic-ipqqvojqrg.s3.eu-west-2.amazonaws.com/uploads/protected/5f9/177/548/5f9177548c405055748179.json?X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAJBWEHPW6LX3B5ALA%2F20210318%2Feu-west-2%2Fs3%2Faws4_request&X-Amz-Date=20210318T101743Z&X-Amz-SignedHeaders=host&X-Amz-Expires=0&X-Amz-Signature=12a449c713b4479f9708dd03be9b3bf6875b53ce45898a9e6958d63180bee12f

'storage'                     => [

    'uploads' => [
        'disk'            => 's3',
        'folder'          => 'uploads',
        'path'            => 'https://s3-eu-west-2.amazonaws.com/voyonic-ipqqvojqrg/uploads',
        'temporaryUrlTTL' => 0,
    ],

    'media'   => [
        'disk'   => 's3',
        'folder' => 'media',
        'path'   => 'https://s3-eu-west-2.amazonaws.com/voyonic-ipqqvojqrg/media',
    ],

    'resized' => [
        'disk'   => 'local',
        'folder' => 'resized',
        'path'   => 'https://s3-eu-west-2.amazonaws.com/voyonic-ipqqvojqrg/resized',
    ],

],

[seanthepottingshed]

@LukeTowers

Sorry I'm an idiot, I've just noticed the issue temporaryUrlTTL should not be 0! Sorry for wasting your time.

[LukeTowers]

There's your problem: 'temporaryUrlTTL' => 0,. Private files on S3 & Rackspace disks in october take advantage of the temporary URL feature of those drivers for increased security; setting this value to 0 means you're telling the application that you want to create a temporary URL that lasts 0 seconds

[LukeTowers]

@seanthepottingshed no worries, just feeding the google machine for future people with similar issues 😉