Skip to content

Option to skip pre-signing S3 URLs #18420

@christensenjairus

Description

@christensenjairus

Is your feature request related to a problem?

Is there a way to disable pre-signing media file urls when using the s3 media backend? I've made "*" be able to GetObject on arn:aws:s3:::<my-bucket>/media/public/application-icons/*, so I shouldn't need Authentik to make pre-signed urls for the icons, but it does, causing the /applications endpoint to take 15-20s to load while it gets >50 icons pre-signed.

Describe the solution you'd like

I'd like an option for Authentik to serve the raw s3 urls to the media, skipping pre-signing the urls, to improve performance for users that have public Get permissions set on their authentik media bucket.

Describe alternatives that you've considered

I've considered moving to file backend because waiting 15-20s for the /applications endpoint bugs me! I use ceph rados gateway for my s3, so it's an s3 performance issue at heart, but I feel like this option would be good to have for everyone.

Additional context

No response

Metadata

Metadata

Labels

enhancementNew feature or requestenhancement/confirmedEnhancements that will be implemented in the future

Projects

Status

Done

Relationships

None yet

Development

No branches or pull requests

Issue actions