I suggest you...

Support URL token authentication for Cloud Files not on the CDN.

S3 has a feature where you can generate URL-tokens (hashes) to grant download access to a file not on the CDN. This allows the developer to keep more private and sensitive files off the CDN but grant download access to users without Cloud accounts.

Without this feature, developers must host these files themselves or create a download proxy script which defeats the bandwidth and performance benefits of the cloud.

387 votes
Vote 0 votes Vote Vote
Vote
Sign in
Check!
(thinking…)
Reset
or sign in with
  • facebook
  • google
    Password icon
    I agree to the terms of service

    You'll receive a confirmation email with a link to create a password (optional).

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    Michael RoachMichael Roach shared this idea  ·   ·  Flag idea as inappropriate…  ·  Admin →
    under review

    35 comments

    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • facebook
    • google
      Password icon
      I agree to the terms of service

      You'll receive a confirmation email with a link to create a password (optional).

      Signed in as (Sign out)
      Submitting...
      • Aaron IsraelAaron Israel commented  ·   ·  Flag as inappropriate

        We want to move from Amazon - but we NEED this Feature.
        Cloud Hosting does not make sense for us without it.

      • Jeremy O.Jeremy O. commented  ·   ·  Flag as inappropriate

        This is actually possible to do on at least your LAMP Cloud Server and your private Cloud Files containers. You'll mount your cloud files with CloudFuse then you'll install the Apache mod-auth-token, then write your PHP auth script. I think the developer of the mod-auth-token gives very well developed code samples to follow.

        I've submitted some additional feedback for something similar to use while you have public edge cdn containers. Hopefully a solution will come out of these 2 requests...

      • AnonymousAnonymous commented  ·   ·  Flag as inappropriate

        I'm really disappointed that this still isn't addressed. We have a couple of applications where this is absolutely required. It looks like we're going to have to switch to Amazon too.

      • Nicholas YoungNicholas Young commented  ·   ·  Flag as inappropriate

        This is a must-have feature for almost all of my applications. And frankly, it's frustrating to see so many people wishing for this feature for so long, and the company not even so much as acknowledge these requests.

        If there are any updates on this feature, I'm sure everyone would like to hear.

      • James SutherlandJames Sutherland commented  ·   ·  Flag as inappropriate

        With Amazon (S3 and CloudFront), you can do this on both the CDN and storage layers: you can grant CloudFront access to your objects without making them public, and have CloudFront itself authenticate the (RSA) signatures, ideal for frequently-used objects, or have them hit S3 directly using SHA-HMAC signatures for individual content such as reports or invoices which are unlikely to benefit from caching.

        CDN or not, only users with an appropriately-signed URL can access the data: CloudFront edge servers can authenticate themselves cryptographically to S3 and fetch cache misses over HTTPS to ensure the content remains secure.

      • SarithaSaritha commented  ·   ·  Flag as inappropriate

        We are keeping files on S3 just because of this. This is a very important and basic feature for businesses.

        And Amazon may lure our hosting business away as well...

      • MichaelMichael commented  ·   ·  Flag as inappropriate

        Please Include this, I will be forced to go back to EDGECAST if this is not implemented. There's a lot of leechers and theft out there! This is a must and needs to be implemented to stop these bandwidth theft and leechers! Thank you so much!

      • ojnoojno commented  ·   ·  Flag as inappropriate

        Critical for my application. I'm having to do 'proxying' just as the OP says, and it really defeats the point. Please implement this feature! It's been almost a year!

      • LukeLuke commented  ·   ·  Flag as inappropriate

        very much needed, such as Amazon S3 "Bucket Policies" or "Query String Authentication" which generates expiring image urls.

      ← Previous 1

      Knowledge Base and Helpdesk

      ©2011 Rackspace, US Inc. About Rackspace | Fanatical Support® | Hosting Solutions | Investors | Careers | Privacy Statement | Website Terms | Sitemap