Support URL token authentication for Cloud Files not on the CDN.
S3 has a feature where you can generate URL-tokens (hashes) to grant download access to a file not on the CDN. This allows the developer to keep more private and sensitive files off the CDN but grant download access to users without Cloud accounts.
Without this feature, developers must host these files themselves or create a download proxy script which defeats the bandwidth and performance benefits of the cloud.
35 comments
-
James Healy
commented
I haven't tested this yet, but according to http://www.rackspace.com/blog/rackspace-cloud-files-adds-new-control-features/ this feature is now available
-
Matt Borja
commented
Needed for secure streaming of video content. Please implement.
-
Nicklas
commented
This is very important feature please implement it !
-
Anonymous
commented
We would love to use rackspace, but this is stopping us
-
Daniel
commented
19 months, and this suggestion status is 'Under Review' - come on!!
-
Aaron Israel
commented
We want to move from Amazon - but we NEED this Feature.
Cloud Hosting does not make sense for us without it. -
Alaattin KAHRAMANLAR
commented
I cannot believe how this feature is missing. I didn't even think it wasn't implemented. I'm sorry but I'm going to AWS too.
-
Jeremy O.
commented
This is actually possible to do on at least your LAMP Cloud Server and your private Cloud Files containers. You'll mount your cloud files with CloudFuse then you'll install the Apache mod-auth-token, then write your PHP auth script. I think the developer of the mod-auth-token gives very well developed code samples to follow.
I've submitted some additional feedback for something similar to use while you have public edge cdn containers. Hopefully a solution will come out of these 2 requests...
-
Anonymous
commented
I'm really disappointed that this still isn't addressed. We have a couple of applications where this is absolutely required. It looks like we're going to have to switch to Amazon too.
-
Anonymous
commented
come on guys... +1
-
Nicholas Young commented
This is a must-have feature for almost all of my applications. And frankly, it's frustrating to see so many people wishing for this feature for so long, and the company not even so much as acknowledge these requests.
If there are any updates on this feature, I'm sure everyone would like to hear.
-
James Sutherland
commented
With Amazon (S3 and CloudFront), you can do this on both the CDN and storage layers: you can grant CloudFront access to your objects without making them public, and have CloudFront itself authenticate the (RSA) signatures, ideal for frequently-used objects, or have them hit S3 directly using SHA-HMAC signatures for individual content such as reports or invoices which are unlikely to benefit from caching.
CDN or not, only users with an appropriately-signed URL can access the data: CloudFront edge servers can authenticate themselves cryptographically to S3 and fetch cache misses over HTTPS to ensure the content remains secure.
-
Saritha
commented
We are keeping files on S3 just because of this. This is a very important and basic feature for businesses.
And Amazon may lure our hosting business away as well...
-
Rodney
commented
I need this by launch time or we will have to go with Amazon.
-
Michael
commented
Please Include this, I will be forced to go back to EDGECAST if this is not implemented. There's a lot of leechers and theft out there! This is a must and needs to be implemented to stop these bandwidth theft and leechers! Thank you so much!
-
Matthew Johnston commented
I need this feature also, as it is forcing me to consider the Amazon S3 cloud
-
Fran Thomas
commented
This is v. important
-
Shubhendra singh
commented
Combination of CFID & CFTOKEN is called as urltoken. If user disabled the browser cookie, It is used to track a user's browser session.
For more coldfusion interview question please visit this link...
http://www.mindstick.com/Interview/919/What%20is%20URL%20token -
ojno
commented
Critical for my application. I'm having to do 'proxying' just as the OP says, and it really defeats the point. Please implement this feature! It's been almost a year!
-
Luke
commented
very much needed, such as Amazon S3 "Bucket Policies" or "Query String Authentication" which generates expiring image urls.
