Warning
This content has been generated by machine translation. The translations are automated and have not undergone human review or validation.
7.3 Object Permission Management - Pre-Authenticated Requests
Pre-Authenticated Requests is a function that allows users to access buckets or objects without authentication. It is created as a temporary shared link that allows you to access the Bucket or Object without authentication until the specified period. This shared link will make it accessible to any user.
Access to Object URL
In the Object Details screen, check the URL path of the object.
If you access the verified URL path with a browser, the following error occurs.
Setting Pre-Authenticated Requests on Object
Click Create Pre-Authenticated Request from the action menu on the right side of the object.
This is the Create Pre-Authenticated Request setting screen.
Target: You can select a target based on Bucket, Object, or Prefix. In this case, it is Object.
Access Type: You can set permissions for read and write.
Expiration: You can set the expiry period. The default is one week.
After setting, click Create Pre-Authenticated Request below.
Copy the created PAR share link.
Access the PAR share link with your browser. It is accessed fine without authentication as shown in the picture.
Deleting Pre-Authenticated Requests
Select Pre-Authenticated Requests from the Resources menu on the left side of the Bucket detail screen. Then, the currently created PAR list is displayed as shown in the figure. Select the right action menu of the PAR to be deleted and click Delete.
After confirming the confirmation message, click OK.
After the PAR is deleted, access the previously accessed PAR shared link again. As shown in the picture, it is no longer accessible.
Setting up Pre-Authenticated Requests on Bucket
Bucket can also create a PAR shared link in the same way.
Enable Object Listing: It is recommended to additionally enable the function to get a list when accessing the API.
If Enable Object Listing is enabled, when you access the Bucket PAR shared link, the resulting list is displayed as a JSON message as shown below. Access to individual objects is possible with SDK or API. So, let’s skip this part for now.
Create a pre-authentication link for Prefix in the same way.
As an individual, this article was written with my personal time. There may be errors in the content of the article, and the opinions in the article are personal opinions.