8000 Allow Customization of port, host, and scheme in presigned Functions for Enhanced Security · Issue #101 · xtyxtyx/minio-dart · GitHub
[go: up one dir, main page]
Skip to content

Allow Customization of port, host, and scheme in presigned Functions for Enhanced Security #101

New issue
New issue
Open
#111
Open
Allow Customization of port, host, and scheme in presigned Functions for Enhanced Security#101
#111

Description

@mskayali
mskayali
opened on Jan 17, 2025

The presigned functions in the following file:
https://github.com/xtyxtyx/minio-dart/blob/3a59a0d277a69719d98108ce6ddae2ec82f8b320/lib/src/minio_sign.dart

Currently, these functions rely on URL information defined in the Minio client. However, when generating presigned URLs, the server URL is used for signing. Due to security concerns, the server URL may differ for internal (intra-network) and external (internet-facing) networks.

To address this, it is necessary to allow optional customization of the port, host, and scheme parameters when generating presigned URLs. This enhancement would provide greater flexibility and address potential security concerns when using different network configurations.

Activity

  1. hammadparveez
    added a commit that references this issue on Feb 24, 2026

    feat: add overrideHost/Port/Scheme to presigned URL methods (xtyxtyx#101

    7285bfa

  2. arrrrny commented on Oct 22, 2026

    @arrrrny
    arrrrny
    on Oct 22, 2026

    Implemented in the fork (0.2.0). presignedUrl and presignedPostPolicy take
    optional host, port and useSSL overrides. The override is applied to the
    URL and to the signature, so the generated URL verifies on the public host
    even when the client talks to an internal one:

    final url = await minio.presignedUrl(
  'GET',
  'bucket',
  'object',
  expires: 3600,           // seconds
  host: 'objects.example.com',
  port: 443,
  useSSL: true,
);

  3. arrrrny commented on Oct 22, 2026

    @arrrrny
    arrrrny
    on Oct 22, 2026

    This ships in zuraffa_minio — the maintained fork of this package, which upstream has not touched since August 2025.

    The fork keeps the API of the original package unchanged, so moving over is an import swap:

    // before
import 'package:minio/minio.dart';
// after
import 'package:zuraffa_minio/minio.dart';

    Source, the changelog and the sweep of the open issues of this tracker: https://github.com/arrrrny/zuraffa_minio

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions
      0