mirror of
https://github.com/suitenumerique/drive.git
synced 2026-08-17 20:15:40 +02:00
GCS based storages like S3NS reject presigned PUT URLs signing the x-amz-acl header: their S3 compatibility layer consumes x-amz-* headers having an x-goog-* equivalent, so the signature check no longer finds the header in the request. Objects are private by default on S3 and GCS, so the ACL can simply be dropped by setting AWS_S3_UPLOAD_ACL to an empty string. The setting is exposed in the config endpoint so the frontend can send a header matching the signature. See https://documentation.s3ns.fr/storage/docs/aws-simple-migration