Skip to content

Storage: support signed URL on GAE and GCE #2142

Closed

Description

@neozwu

Today signed url requires a service account with a signer. GAE and GCE use their built-in service account, which cannot sign blob. Our current impl only retrieves signer from service account. Therefore, it is not working on GAE and GCE. GAE has appIdentity.signForApp API that can be used to sign blob. It seems there's ongoing work to support GCE to sign blob. We should make GAE ( and GCE once it's ready) blob signing available in client lib as well.

Activity

  1. self-assigned this
    on Jun 12, 2017
  2. added
    priority: p2Moderately-important priority. Fix may not be included in next release.
    type: feature request‘Nice-to-have’ improvement, new feature or different behavior or design.
    on Jul 17, 2017
  3. garrettjonesgoogle commented on Aug 10, 2017

    @garrettjonesgoogle
    Contributor

    @neozwu there are two tasks in here: 1) GAE, 2) GCE. Could you split this apart?

  4. neozwu commented on Nov 15, 2017

    @neozwu
    ContributorAuthor

    GAE & GCE now both use metadata server. Close this issue since supporting signing URL is tracked in #2629

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

api: storageIssues related to the Cloud Storage API.priority: p2Moderately-important priority. Fix may not be included in next release.type: feature request‘Nice-to-have’ improvement, new feature or different behavior or design.

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions