Make ShareLink URL point to Console instead to MinIO Server

[cesnietor]

Currently whenever we want to share a file, the share url contains a default url which if for some reason is not reacheable by the browser it will fail to access it.

The proposal is to make Console handle the GET of the object instead of sending them to MinIO server.
That way it doesn't matter what the MinIO server DNS is, since you can already access Console.

Right now:

Expected Behavior

Share url uses console backend url and port
Use some other endpoint e.g. https://play.min.io:9443/api/v1/get-file/cestest/file-s2.txt?X-Amz-Algorithm=A...

Current Behavior

Share url uses 127.0.0.1 url

Steps to Reproduce (for bugs)

1. Add an Object
   2.Click on an object
2. Click on Share File

[bexsoft]

Steps Required:

• Create local endpoint under console to receive share requests
• Create a method where we can review the presigned key from share file to validate if request is valid
• Get the file as if we were in local download through Console UI.

[ravindk89]

To clarify - @harshavardhana @bexsoft based on internal conversations, would this remove the need for us to use MINIO_SERVER_URL at all?

I've seen two user reports from community about having issues when using that envvar, vs not using it at all and simply specifying the FQDN of console to --console-address.

[cesnietor]

No @ravindk89 we still need that to communicate with MinIO, this is just sending the share files to console instead of MinIO.

[ravindk89]

Thanks - I thought we had, at one point, discussed behavior where Console would always talk to MinIO over localhost? Or is that the case, and the MINIO_SERVER_URL necessary when MinIO TLS certs do not cover localhost?

[dberardo-com]

is it possible to generate this URL programmatically, example from the CLI or from the Kubernetes Operator ?

[prakashsvmx]

you can use mc share or any sdk https://github.com/minio/minio-go to generate presigned url

[dberardo-com]

and can those link be permanent ? as in, never expire ?

[prakashsvmx]

never expire ?

No.. it is as per s3 Max 7 days

A presigned URL remains valid for the period of time specified when the URL is generated. If you create a presigned URL with the Amazon S3 console, the expiration time can be set between 1 minute and 12 hours. If you use the AWS CLI or AWS SDKs, the expiration time can be set as high as 7 days.

https://docs.aws.amazon.com/AmazonS3/latest/userguide/using-presigned-url.html

for non expiring links, you can use mc anonymous to set bucket policy to download so any object can be accessed with direct link like: <http://host/bucket/object>