for me that the same aswell, i have only my domain authorized, but there are no cors headers sent by

for me that the same aswell, i have only my domain authorized, but there are no cors headers sent by r2 for some reason.

Kkubectl for me that the same aswell, i have only my domain authorized, but there are no ...

Deleted User•11/13/24, 1:41 PM

did you add cors rules?

Deleted User•11/13/24, 1:42 PM

DDeleted User did you add cors rules?

kubectlOP•11/13/24, 1:53 PM

yes

kubectlOP•11/13/24, 1:54 PM

kubectlOP•11/13/24, 1:54 PM

the censored part is the domain my website run under

kubectlOP•11/13/24, 2:09 PM

merci <3

boldpix•11/13/24, 2:36 PM

Hi everyone
Even if we restrict R2 to allow direct file access only from the machine, is there a risk that users could still access the file unauthorized by finding its direct address?

Original message was deleted

boldpix•11/13/24, 3:04 PM

We are considering using a custom domain, but what is the difference between using a custom domain and a default domain?

Original message was deleted

boldpix•11/13/24, 3:28 PM

Ok, We have a domain in cloudflare and we can use that domain

boldpix•11/13/24, 3:31 PM

Can you answer my question?

Original message was deleted

boldpix•11/13/24, 4:07 PM

Is it possible to create a token that is exclusive to a machine, and by possessing this token, only that machine can access a file?

Original message was deleted

boldpix•11/13/24, 4:11 PM

Do you mean Amazon S3?

Original message was deleted

boldpix•11/13/24, 4:18 PM

Can the S3 protocol be used in the R2 free plan?

Original message was deleted

boldpix•11/13/24, 4:41 PM

Thank you

Original message was deleted

Hello, I’m Allie!•11/14/24, 11:52 PM

And, to be fair, there is an R2 Protocol. It’s called Workers!

Original message was deleted

Hello, I’m Allie!•11/15/24, 12:42 AM

:hallucinates:

Hello, I’m Allie!•11/15/24, 12:42 AM

But yeah, I’m flip-flopping

danielqura•11/15/24, 5:52 PM

Hello
i have issue i have this video https://cdn.loyaltydrones.com/Media/Projects/Shamsa.mp4 and https://cdn.loyaltydrones.com/Media/Projects/Yasmeena.mp4
it working if you open it but if add it to player not working it play just sound

Original message was deleted

zimmed•11/16/24, 2:36 PM

Hey, I'm running into a similar issue trying to fetch a file from an allowed origin through a custom domain.

Origin request header is correct, and I have everything mentioned here in my config, but cors requests are still failing due to missing the allowed origin header in the response. Everything else looks correct from the response. Cache-Status: HIT, Content-Type, Content-Length, ETag, etc.

What could I be missing?

shun•11/16/24, 2:42 PM

How can I programmatically purge the cache if only the content of the image uploaded to R2 has been ?

Custom domain in R2 (e.g. public-images.mydomain.com)

After uploading an image to R2 with /test.png, if I upload another image file again with /test.png, it is not updated when accessed from a browser. This was solved by purging from the dashboard by specifying https://public-images.mydomain.com/test.png, but I want to do this programmatically.
How do I do this?

Original message was deleted

zimmed•11/16/24, 2:42 PM

Zzimmed Click to see attachment

zimmed•11/16/24, 2:44 PM

The AllowedOrigins are omitted, but correct. The exact value of the request's Origin header is provided here.

KarthickthasanS•11/16/24, 2:44 PM

Can someone help me to turn on https. I tried turned on always use https, http rewrites and pages rules , configuration added and ssl labs given grade T. But still page is not secure

Original message was deleted

shun•11/16/24, 2:48 PM

This. Thanks!
https://developers.cloudflare.com/api/operations/zone-purge?schema_url=https%3A%2F%2Fraw.githubusercontent.com%2Fcloudflare%2Fapi-schemas%2Fmain%2Fopenapi.yaml

Cloudflare API Documentation

Interact with Cloudflare's products and services via the Cloudflare API

Zzimmed The AllowedOrigins are omitted, but correct. The exact value of the request's Or...

zimmed•11/16/24, 2:51 PM

Original message was deleted

zimmed•11/16/24, 2:52 PM

No, the list has just grown as I try to debug and add anything I can find in the forums that might fix it.

zimmed•11/16/24, 2:55 PM

I'm not sure if there's a delay in the config being applied, but after saving it to match yours and trying again, nothing has changed.

Original message was deleted

zimmed•11/16/24, 3:02 PM

Same thing. But I do still see that the Cache-Control is set to max-age=14400, which I would expect to be 3600 based on my provided config, no?

Original message was deleted

zimmed•11/16/24, 3:08 PM

If that's the case, then which repsonse header is supposed to indicate the browser can cache the preflight response for up to the time specified?

Original message was deleted

zimmed•11/16/24, 3:10 PM

Yes, but the cache is browser-side. So how does the browser know to cache it for an hour? Typically caching is achieved through the Cache-Control response header.

Original message was deleted

zimmed•11/16/24, 3:11 PM

Which the browser receives via... ?

Original message was deleted

zimmed•11/16/24, 3:14 PM

Is it possible the browser is still receiving a cached preflight response since that header isn't present in the response (was added only about 30 minutes ago to the config)?

Original message was deleted

zimmed•11/16/24, 3:16 PM

Do the responses cache server-side at all? Because it wouldn't make sense that I'd still be getting a cached response from another browser, or even the same browser with caching disabled.

maco6517•11/16/24, 3:56 PM

Why can I still access my direct link when I set the rule like this? What did I do wrong?

maco6517•11/16/24, 3:56 PM

https://video.wikidata.top/ab.mp4

Original message was deleted

maco6517•11/16/24, 4:05 PM

let me add mp4 link to cosplay website it can play,

Original message was deleted

maco6517•11/16/24, 4:07 PM

is there any way to block others from getting my direct mp4 link to play?

Fernando Dilland•11/16/24, 4:10 PM

I’m sharing this library I made for a video player with HLS, supporting multiple qualities and deferred loading with Cloudflare R2. Suggestions and support are welcome! :MeowHeartCloudflare:

Includes CORS configuration recommendations, video thumbnails, etc.!

https://github.com/fernandodilland/r2-player.js

GitHub

GitHub - fernandodilland/r2-player.js: Cloudflare R2 and HLS embedd...

Cloudflare R2 and HLS embedded video player JavaScript library featuring thumbnails, lazy loading, and multiple quality options. - fernandodilland/r2-player.js

Original message was deleted

maco6517•11/16/24, 4:15 PM

how can i get my cosplay.baby site to play mp4 links, which other sites can't play

Original message was deleted

maco6517•11/16/24, 4:20 PM

I have enabled hot link and I don't know what to do next :((

maco6517•11/16/24, 4:27 PM

my mp4 direct link still works :((

Original message was deleted

maco6517•11/16/24, 4:32 PM

https://video.wikidata.top/ab.mp4 yes sir it still works no block

Original message was deleted

maco6517•11/16/24, 4:49 PM

https://cosplay.baby/video/juqcyxp3mbZwnTW but it doesn't work with my site :((

maco6517•11/16/24, 5:28 PM

:((

maco6517•11/16/24, 6:10 PM

https://cosplay.baby/video/juqcyxp3mbZwnTW
Can anyone help me the rule is working "block
Hostname" but does not work with Referer

flayks•11/16/24, 7:42 PM

Hey! I have a grid of looped video previews using R2 and only 9 of out 12 play, is there a limit on the amount of simultaneous requests or something?
Most videos load and some just failed as "canceled"

I was using Mux and no such issue so it's not coming from my code or browser either, feels specific to Cloudflare and/or R2!

Original message was deleted

flayks•11/16/24, 8:19 PM

The code has not changed from Mux to R2 so what can explain this?

for me that the same aswell, i have only my domain authorized, but there are no cors headers sent by

Similar Threads

Similar Threads

Similar Threads