search

TTLabs / EvaporateJS

Javascript library for browser to S3 multipart resumable uploads
1.82k stars 206 forks source link

Clarify signing functionality #368

Open oyeanuj opened 7 years ago

oyeanuj commented 7 years ago

Hi @bikeath1337, thank you for putting out this library!

As I was evaluating this for my use-case, I wanted to clarify the signing functionality. From the signing examples (Ruby), it uses HMAC signing for the string passed. Is my understanding correct, that signing endpoint needs to return signed string and not a pre-signed url?

In my current setup, I am generating pre-signed urls on the server-side. I am wondering if that is compatible with Evaporate in any way?

Apologies if this is mentioned somewhere, and I'd be happy to add to the wiki, if you think clarifications are needed!

Thank you!

bikeath1337 commented 7 years ago

Evaporate doesn't use pre-signed urls. Instead, assuming you work with V4 signatures (you should) http://docs.aws.amazon.com/AmazonS3/latest/API/sig-v4-authenticating-requests.html, your secured signing method returns a signature.

There are many examples of how to create a signature in the example folder of the project.