Links expire within an hour when sharing from web interface regardless of the value set

[asgardius]

When i share a file from MinIO web interface its link expires within an hour despite choosing another value like 1 day or 2 days. Sharing files using third party S3 clients works fine

Expected Behavior

Shared link must expire on the established date

Current Behavior

When sharing files from web interface its download links expires 1 hour after their creation

Possible Solution

The issue appear to be at web interface

Steps to Reproduce (for bugs)

1.Upload a file to a bucket
2.Share it from web interface
3.wait 1 hour or 2
4.Open sharing link

Context

I was trying to share a video from a bucket on my personal website and video links stopped working. 2 days later i could share it without issues using a third party S3 client

Regression

Is this issue a regression? No

Your Environment

• Version used: RELEASE.2021-07-30T00-02-00Z

• Server setup and configuration: NGINX web server and the following config files
  api-nginx.txt
  panel-nginx.txt
  minio-systemd.txt
  minio-env.txt

• Operating System and version : Ubuntu 20.04 (Linux asgardius-minio 5.8.0-1037-oracle Migrating from unix ts to time.Time minio#38~20.04.1-Ubuntu SMP Fri Jul 16 01:02:14 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux)

[dvaldivia]

sounds like we may need to check the sharing code

[thebrooder]

This is still broken in minio server installation RELEASE.2021-09-09T21-37-07Z

Are there any updates on this?

[bexsoft]

Will do some testing on this after #1083 gets merged. This PR changes the way we request links by date in console.

[l-austenfeld]

I noticed a difference in the links generated by the Minio console and the cli tool:

http://10.0.2.100:9000/test/foo?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=VM8UFZ8WA9JDGLX5FJWM%2F20211014%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20211014T144835Z&X-Amz-Expires=604799&X-Amz-Security-Token=eyJhbGciOiJIUzUxMiIsInR5cCI6IkpXVCJ9.eyJhY2Nlc3NLZXkiOiJWTThVRlo4V0E5SkRHTFg1RkpXTSIsImV4cCI6MzYwMDAwMDAwMDAwMCwicG9saWN5IjoiY29uc29sZUFkbWluIn0.8baEtu9q-2BRsIFSXNOi3Z9UZzv9NFD0aJoNKRZexv6aCy4To6CYqt9RSgO-_dvyFHBhA-MUVGphv8kFt4ad8Q&X-Amz-SignedHeaders=host&versionId=null&X-Amz-Signature=9c5db22982b55656f14d1620debb113da7062d59b6a40ddb945682e2b0dc6b4e

http://127.0.0.1:9000/test/foo?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=minioadmin%2F20211014%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20211014T144913Z&X-Amz-Expires=604800&X-Amz-SignedHeaders=host&X-Amz-Signature=870078410bfeaaff059dabbbaaffe1c9b9a84234042fc8fbd01700478b97d314

The first link was created in the web console, the second via the cli tool.
Notice the value of the X-Amz-Expires and X-Amz-Credential parameters.

I don't know how the web console works internally, but to me it looks like the console gets a temporary token on login and uses that to create the link. As https://docs.aws.amazon.com/AmazonS3/latest/userguide/ShareObjectPreSignedURL.html points out, as soon as a temporary token is no longer valid the links it created will not work either.

[dvaldivia]

@l-austenfeld that is correct, the console uses a temporary token (STS Token) which last less than 1 hour, we are looking into how to solve this problem so that share links last longer

[abhi1693]

This is still broken in https://github.com/minio/console/releases/tag/v0.13.2

[harshavardhana]

This is still broken in https://github.com/minio/console/releases/tag/v0.13.2

Yes it is @abhi1693 and it will be for a while - it's not a priority at the moment. Create service accounts use them in mc to generate shared URLs for now.

[abhi1693]

@harshavardhana Isn't there any way to do this via console? I need to give UI access to our customers who will generate their own links and not being able to do that is a deal breaker.