Pre-signed URLs are great, but should we add an extra layer of auth? ⚡
Recently, I stumbled upon this question on Duggup, and here’s the summary of my detailed answer to it.
For almost all cases, short-lived pre-signed URLs are recommended as they are easy to implement and relatively secure to share, keeping it secure against
- man in the middle attack
- a brute-force guesswork
But if you want a long-term pre-signed URL then create a proxy server and add an auth layer on it. To avoid frequent re-authentication, ensure refresh-tokens are leveraged.
You can read the complete answer - https://lnkd.in/gUJasV5R
⚡ I keep writing and sharing these engineering nuggets, so if you are keen on learning them, follow along.
duggup.com/p/arpit