tempurls cannot be limited in size

Bug #1464196 reported by Tom Mason on 2015-06-11
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Object Storage (swift)
Mohit Motiani

Bug Description

When creating a tempurl for PUT requests, such as to allow users to upload files directly to swift via javascript in their browser, there is no way to limit the size of the request, so users can upload files of arbitrary size.
Amazon's s3 solves this problem by including the value of the Content-Length header in the data to be hashed.
Currently, I can see no way of solving this problem without abandoning tempurls altogether and just using an intermediate server.

Christian Schwede (cschwede) wrote :

Uploading more thant 5GB of data is by default not possible, because that's the default maximum object size within Swift. Is this number too large in your case?

Is it possible for you to use the formpost middleware? You have to use a POST instead of a PUT, but in that case you can limit the maximum size of the upload: http://docs.openstack.org/kilo/config-reference/content/object-storage-form-post.html

Tom Mason (b-tsm-n) wrote :

Yes, I want to limit users to about 50mb or so.
That should do fine for me, but it is a little odd that the formpost middleware supports this but tempurl doesn't.

Changed in swift:
importance: Undecided → Wishlist
status: New → Confirmed
Changed in swift:
assignee: nobody → Mohit Motiani (mohit-motiani)
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers