Skip to content

Storage: Provide credential-free access to public-access buckets #4279

Closed
@tseaver

Description

@tseaver

Per the GCS authentication doc:

Objects are anonymously accessible if the allUsers group has READ permission.

Add support for such access to the storage client. Two strategies seem possible:

  • Add a classmethod factory to the Client class which bypasses inferring credentials from the user environment.
  • Add a custom AnonymousCredentials singleton which can be passed to the Client constructor.

We don't need to enforce any limits on the access to buckets / objects retrieved from the "anonymous" client: the back-end will return UNAUTHORIZED.

System tests can use the gcp-public-data-landsat bucket, if desired (hopefully CI throttling won't be an issue).

Metadata

Metadata

Assignees

Labels

api: storageIssues related to the Cloud Storage API.type: feature request‘Nice-to-have’ improvement, new feature or different behavior or design.

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions