Question

Serve Private Spaces Object to Browser via CDN

I am trying to access files uploaded to my Spaces bucket. They are private and associated with my users account. I authenticate on my server and was hoping to redirect to a URL where they can see the file.

I have this working with a pre-signed getObject URL. However, I would really prefer to gain the benefits of serving my files from the CDN. Here is what I am doing successfully now:

AWS.config.update({                                                    
  accessKeyId: KEY,                                                    
  secretAccessKey: SECRET,                                             
  region: 'nyc3',                                                      
  signatureVersion: 'v4',                                              
});                                                                    
                                                                       
const options = {                                                      
  signatureVersion: 'v4',                                              
  region: 'nyc3',                                                      
  endpoint: new AWS.Endpoint('nyc3.digitaloceanspaces.com'),
};                                                                     
                                                                       
const client = new AWS.S3(options);                                    
                                                                       
const url = client.getSignedUrl('getObject', {                         
  Bucket: 'myBucket',                                                
  Key: 'theObjectKey',                                                    
  Expires: 5 * 60, // 5 minutes                                        
});                                                                    
                                                                       
res.redirect(url);                                                     

This provides me with a URL like:

https://myBucket.nyc3.digitaloceanspaces.com/THE_OBJECT_KEY?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=CREDENTIAL&X-Amz-Date=20200418T164223Z&X-Amz-Expires=300&X-Amz-Signature=SIGNATURE&X-Amz-SignedHeaders=host

This works well.

Is there any possible way to do this, but using my Spaces CDN? It appears that AWS’ Cloudfront has a completely different lib for signing CF objects (seen here: https://aws.amazon.com/blogs/developer/creating-amazon-cloudfront-signed-urls-in-node-js/).

Any help is much appreciated. Happy to answer any questions.

Show comments

Submit an answer

This textbox defaults to using Markdown to format your answer.

You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

Sign In or Sign Up to Answer

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

Want to learn more? Join the DigitalOcean Community!

Join our DigitalOcean community of over a million developers for free! Get help and share knowledge in Q&A, subscribe to topics of interest, and get courses and tools that will help you grow as a developer and scale your project or business.

You can use a pre-signed URL with the CDN as shown in the following documentation

https://www.digitalocean.com/docs/spaces/resources/s3-sdk-examples/#generate-a-pre-signed-url-to-download-a-private-file

Please let me know if this helps you out.

Assuming that you have already enabled your CDN, have you tried using the same URL that getSignedUrl returns, but with the domain changed to point to the CDN?

E.g., instead of:

https://myBucket.nyc3.digitaloceanspaces.com/THE_OBJECT_KEY?X-Amz-Algorithm=...

Try:

https://myBucket.nyc3.cdn.digitaloceanspaces.com/THE_OBJECT_KEY?X-Amz-Algorithm=...