I actually finished off the WebCrypto runtime implementation last year to be standard compliant. DigestStream is another coworker who's a beast and is getting our streams up to snuff (+ helping out R2 on the side)

It's on the radar for standardization. We're pushing it

i suspected you're using DO in the worker, tell-tale delay on cold start, feels exactly the same : ))))

Didn't I say this before? We built R2 on top of Workers & Durable Objects. Albeit a version of Durable Objects that's only for R2 that has a turbo installed and the break lines cut

Durable Objects: Steroids Version

doh, just got a chance to try r2 with Arq (excellent backup app for mac https://www.arqbackup.com/) which has a "s3-compatible" storage option. It gets through initial setup, but then fails trying to sync with

GET https://<account>.r2.cloudflarestorage.com/<bucket>/?prefix=471A5A4F-3B84-4540-A052-BE8625FA5099/&delimiter=/&max-keys=500: The request signature we calculated does not match the signature you provided. Check your secret access key and signing method.

seems like it ought to work since it's doing path-style

Grr... maybe our signature algorithm is wrong. DM me your account tag again & redo the request?

or either order really

but the auth header is redacted

Do other requests work?

I'm wondering if it's an issue w/ the search params

just the initial setup (lists/creates the bucket!)

Lists buckets doesn't work?

The request you showed is ListObjectsV2

just the initial setup works, only the object-level stuff seems fail, i'll send you my info and try again

PutObject?

the list is failing, still trying to figure it out

Yeah - it's on our side

It might work if you do

delimiter=/&max-keys=500

But our code there is broken. I should have double-checked

ok constructed essentially the same query as that UI error message, but using the aws cli:

aws s3api list-objects-v2 --bucket <bucket> --profile <profile> --endpoint-url https://<account>.r2.cloudflarestorage.com --debug --prefix 471A5A4F-3B84-4540-A052-BE8625FA5099/ --delimiter / --max-keys 500

and it works

lists no objects (empty bucket)

so yea something in the signature calc on the arq side, i'll see if i can find its local logs

right - but I bet you that command sorts the search params before sending

oh duh

it's not v2

it's list objects v1

there's no list-type=2