Cloudflare Developers•3y ago

I am getting this error even though I gave this permission with domain in r2. where did i go wrong?

KKvothe I am getting this error even though I gave this permission with domain in r2. wh...

kev-ac•7/18/23, 6:02 PM

Didn't someone with another username ask this exact question here 2 hours ago? Its even the same file name..

Just this time with r2.dev not a custom domain.

KKvothe I am getting this error even though I gave this permission with domain in r2. wh...

kev-ac•7/18/23, 6:10 PM

Like said before, you need to set up a CORS policy.

helen•7/18/23, 6:35 PM

Hello everyone, what is this R2 port?

helen•7/18/23, 6:35 PM

Hhelen Hello everyone, what is this R2 port?

flakey5•7/18/23, 6:36 PM

Port that the server is listening on. 443 should be correct

helen•7/18/23, 6:46 PM

ops

helen•7/18/23, 6:46 PM

(Unauthorized) error: Service Error Message.; XML Error Message: <?xml version="1.0" encoding="UTF-8"?><Error><Code>Unauthorized</Code><Message>SigV2 authorization is not supported. Please use SigV4

Erisa•7/18/23, 6:49 PM

The error comes from the CA, I will have to do some more extensive testing later within working hours unless someone else beats me to it

Hhelen (Unauthorized) error: Service Error Message.; XML Error Message: <?xml version="...

Erisa•7/18/23, 6:50 PM

Yeah SigV2 isn't supported, what's trying to use it and does it support v4?

dax•7/18/23, 8:22 PM

can we constrain the allowed file types uploaded to r2 via presigned urls?

Ddax can we constrain the allowed file types uploaded to r2 via presigned urls?

kev-ac•7/18/23, 8:36 PM

In S3 there is a conditions field which can limit what kind of files (size, content type, etc.) can be uploaded. I don't know if R2 supports this, the documentation says nothing about it.

Kkev-ac In S3 there is a conditions field which can limit what kind of files (size, cont...

dax•7/18/23, 8:40 PM

I'll give it a test, I know contentLength works, but not sure about the rest

Ddax can we constrain the allowed file types uploaded to r2 via presigned urls?

Karew•7/18/23, 8:59 PM

You can presign the Content-Type header, but clients can just lie about what they’re uploading. If you need real content validation you need to do it on your server either before or after the upload

dax•7/18/23, 9:09 PM

how would you do it before?

dax•7/18/23, 9:10 PM

after would work but the lack of events makes this harder to implement

Ddax how would you do it before?

kev-ac•7/18/23, 9:27 PM

It depends on the uploaded file size. You could create an upload endpoint on your server and after checking the file upload it from your server to R2. For small files like images thats a way, but will get impractical for large files.
But all in all you should make a risk assessment what a malicious user achieve when manipulating the upload.

kev-ac•7/18/23, 9:29 PM

Oh and one other solution I've implemented once in a Nextjs app with large files:
Create an API endpoint where users upload file chunks to and keep track of the progress. Once all chunks where received (and forwarded to R2) I've known that the file upload was complete and I could send out a message to process the file.

dax•7/18/23, 9:30 PM

ah thats pretty cool

dax•7/18/23, 9:30 PM

we might opt for that approach depending on the complexity of handling file chunks

dax•7/18/23, 9:31 PM

honestly if r2 had events, it can be much more powerful and a real competitor to s3

Ddax we might opt for that approach depending on the complexity of handling file chun...

kev-ac•7/18/23, 9:31 PM

Thats rather simple. You split up the file in chunks on the client and send it one by one

Ddax honestly if r2 had events, it can be much more powerful and a real competitor to...

kev-ac•7/18/23, 9:31 PM

I go long ways to not use S3 in any projects.

dax•7/18/23, 9:32 PM

right now, the main value proposition is pricing

dax•7/18/23, 9:32 PM

I'm on GCP so it would be GCS for me haha

Walshy•7/18/23, 10:23 PM

as long as you pay for your usage nope.

Walshy•7/18/23, 10:23 PM

indeed, i said usage not egress :p

Walshy•7/18/23, 10:23 PM

https://developers.cloudflare.com/r2/pricing/#pricing

just r2 pricing but otherwise, you're good

Walshy•7/18/23, 10:24 PM

the prices listed on that page yes

Erisa•7/18/23, 10:24 PM

Good question

Walshy•7/18/23, 10:24 PM

tell 'em all to move to R2

Řambo•7/18/23, 10:25 PM

anyone have any advice? general-helpCloudflare R2 public bucket urls with %27 not found

EErisa Ah, probably something to do with multipart then

PencilNavigator•7/19/23, 4:45 AM

Hi sorry to interrupt but any fix for this?

kian•7/19/23, 2:28 PM

Nope - you would need to read the file and then reupload it with the new content

Unsmart•7/19/23, 3:28 PM

create a new object and then list and read all

Erisa•7/19/23, 3:37 PM

Even AWS S3 doesnt support it, there's no API mechanisn for append afaik

rlopzc•7/19/23, 5:46 PM

Hello. I've noticed an unexpected behaviour when creating R2 API Keys. Seems that API keys are bounded to each profile (user account) but not to the organization account?

This is an issue in case a developer that has created API keys leaves the company then we will lose immediate access to R2. Does someone know how to create an account wide API key?

kian•7/19/23, 5:46 PM

That's how all API tokens work in Cloudflare, they're all associated to the user that created them.

kian•7/19/23, 6:39 PM

You get 10 GB-month of free allowance every month. If you store 10 GB for 30 days, that is your free allowance.

kian•7/19/23, 6:40 PM

If you stored 20 GB for 30 days, you'd only be billed for 10 GB-month.

Caleb•7/19/23, 7:47 PM

Is there a way to check if an object in an r2 bucket exist before making the read request

Caleb•7/19/23, 7:48 PM

I’m assuming no

kian•7/19/23, 7:48 PM

You can do HEADHEAD, that's about it - but I doubt it's any faster than a

GET

GET

returning a 404.

kian•7/19/23, 7:48 PM

Both will go to the same place and return the same stuff.

Caleb•7/19/23, 7:49 PM

Yeah that’s what I thought

trying to come up with a solution to tell users what objects are available without creating a separate database

Ddav1d Doesn't make sense to check before reading, might as well read and deal with the...

Caleb•7/19/23, 7:51 PM

Yeah the issue is that it incurs a read unit each time a nonexistent object is requested where as if the object does exist it is most likely already cached in cdn and won’t incur read

I am getting this error even though I gave this permission with domain in r2. where did i go wrong?

Similar Threads

Similar Threads

Similar Threads