https://discord.cloudflare.com logo
Join Discord
Powered by
# r2
  • s
    That's in a worker
  • s
    I added the binding in the dashboard
  • s
    That message has the code I used
  • d
    If it helps, it's specifically 
    Accept: application/signed-exchange
    that 404s (any string that starts with application/signed-exchange, ie. application/signed-exchangessssss)
  • e
    firefox 404s regardless of accept
  • e
    mine does, anyway
  • e
    anyway, i think i managed to repro on a real origin
  • e

    https://erisa.party/2022/12/image.pngâ–¾

    * *
  • e
    to say the least that is concerning
  • e
    let me see what else i can find out / who i can yell at
  • d
    You need to use this in a Worker
  • d
    With a worker you can bind R2 and call env.R2.list(), as Skye mentioned
  • h
    Copy code
    js
const data = await (await fetch("https://your.worker.domain")).json();
  • a
    hi, i would like to know if i can attach a domain to R2 and still keep my files in private mode?
  • a
    right now, i have atatched the domain, but the files are now publicaly accessible if they have the key name, i was previously using signed urls for providing the download feature.
  • e
    thanks for this hint - i can only reproduce on my real origin when 
    Automatic Signed Exchanges (SXGs)
    is enabled in the dashboard
  • e
    looks like that feature breaks transform rules
  • e
    and i have a theory on why...
  • d
    omg tea
  • h
    You can
  • h
    In your Worker?
  • a
    is r2 ready for production env? can we use it as an aws s3 alternative?
  • e
    yes
  • e
    R2 is generally available and supports the S3 API: https://developers.cloudflare.com/r2/data-access/s3-api/
  • a
    but the files get public when we attach a domain to r2 .. how is that reliable?
  • e
    ?
  • e
    There are many use cases for wanting a public bucket on a URL
  • e
    to expose a bucket privately you can write your own logic inn a Cloudflare Worker or add CORS rules and access the S3 API from your client
  • e
    Missing the feature to have private buckets on custom domains without custom logic doesn't make it not production-ready 😅
  • a
    yes, how can some one know that? its a major security risk.
1...883884885...1050Latest