[wip] presigned url version of handleUpload by elliotdauber · Pull Request #1059 · vercel/storage

elliotdauber · 2026-04-30T19:51:11Z

No description provided.

vercel · 2026-04-30T19:51:16Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
vercel-storage-next-integration-test-suite	Ready	Preview	May 4, 2026 10:35pm

changeset-bot · 2026-04-30T19:51:17Z

⚠️ No Changeset found

Latest commit: fa32df8

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

elliotdauber · 2026-05-04T21:27:25Z

+      options.ifMatch !== undefined
+    ) {
+      throw new BlobError(
+        "client/`upload` doesn't allow `addRandomSuffix`, `cacheControlMaxAge`, `allowOverwrite` or `ifMatch`. Configure these options at the server side when generating client tokens.",


i need to update messaging here

elliotdauber · 2026-05-04T21:27:31Z

+  signature: string;
+  body: string;
+}): Promise<boolean> {
+  console.warn('verifyCallbackSignaturePresigned is not yet implemented');


elliotdauber · 2026-05-04T21:28:06Z

+  const resolvedWebhookPublicKey =
+    webhookPublicKey ?? process.env.BLOB_WEBHOOK_PUBLIC_KEY;
+  if (!resolvedWebhookPublicKey) {
+    throw new BlobError('Missing webhook public key');


should we error here? or only when doing webhook callback, if onUploadCompleted is provided

elliotdauber · 2026-05-04T21:28:55Z

+const BLOB_PRESIGN_QUERY_DELEGATION = 'vercel-blob-delegation' as const;
+
+function normalizeDelegationStoreId(storeId: string): string {
+  const lowercase = storeId.toLowerCase();


im not actually sure if we should be lowercasing store ids. Idk if they are case sensitive

elliotdauber · 2026-05-04T22:35:16Z

merged into elliot/presigned-urls to make branch management easier

* [wip] presigned url version of handleUpload * up * up * up * add presigned urls for mpu * update options shape * webhook signature * update example * up * up * up * change to operation

* presigned urls * up * normalize * fix * update to new signing string * [wip] presigned url version of handleUpload (#1059) * [wip] presigned url version of handleUpload * up * up * up * add presigned urls for mpu * update options shape * webhook signature * update example * up * up * up * change to operation * up * up * verify webhook signature * up * callbackUrl * non-null * presigned url opts * new delegation token + url opts * dont lowercase store id * validUntil instead of ttlSeconds * up * up * Add 'delete' to DelegationOperation for presigned DELETE URLs (#1061) Mirrors the API-side change that adds `delete` to the issue_signed_token allowed operations. `presignUrl` now signs canonical `operation=delete\npathname=...` against the public blob object URL (same host shape as `get`/`head`, just used with HTTP DELETE). Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com> * change upload to put * delete * up * presigned url payload * update app * fix * docs * refactor presign url * up * up * up * add head * up * add params to url * add keys first * token payload * add buildPresignedGetUrl * up * presignUrl returns url, not accepted in sdk methods * up * up * feat(blob): presigned HEAD & DELETE URLs (#1064) * feat(blob): presigned DELETE URLs Wires the `'delete'` DelegationOperation (added in #1061, since rebased out of elliot/presigned-urls) through `presignUrl`. A token issued with `operations: ['delete']` can now mint a presigned `DELETE /?pathname=…` against the control-plane API. - `PresignDeleteUrlOptions` accepts `pathname`, optional `validUntil`, optional `ifMatch`. Upload-only fields are rejected at the type level. - `presign()` gates on the delegation scope including `'delete'`. - `buildPresignedDeleteUrl()` mirrors the PUT URL shape; the HTTP method is the discriminator (canonical signing string carries `operation=delete`). - `buildPresignCanonicalQueryEntries()` for `delete` emits only `validUntil` (when below the delegation ceiling) and `ifMatch`. - E2E test route + delete button on the presigned-upload demo page. Based on `elliot/presigned-urls`, not `main`. * feat(blob): presigned HEAD URLs (#1065) `HEAD` mirrors `GET` against the blob object host (`<storeId>.<access>.blob.vercel-storage.com/<pathname>`); the URL shape is identical and the HTTP method is the discriminator. `operation=head` goes into the canonical signing string so a GET-signed URL cannot be replayed as a HEAD (and vice versa). - `'head'` added to `DelegationOperation`. - `PresignHeadUrlOptions` — same shape as `PresignGetUrlOptions` (`pathname`, optional `validUntil`). - `presign()` gates on the delegation scope including `'head'`. - `presignUrl()` reuses `buildPresignedGetUrl()` for `operation: 'head'`. - `buildPresignCanonicalQueryEntries()` for `head` emits only `validUntil` (when below the delegation ceiling) — same as `get`. - E2E test route + HEAD button on the presigned-upload demo page. Stacked on `falcoagustin/presigned-delete-impl` (#1064). * environment error * up * cleanup --------- Co-authored-by: Agustin Falco <agusfalco_11@hotmail.com> Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

* Add Vercel OIDC auth * up * header * up * prioritize token * normalize storeId in OIDC auth resolution BLOB_STORE_ID and the storeId option are accepted in either store_<id> or <id> form (Vercel env pull writes the prefixed form), and may be mixed-case. resolveBlobAuth was passing those through verbatim, so the storeId in API headers and CDN host subdomains could be malformed — e.g. blob.get against a private store with `store_WdsHBk1w9fDO4vPW` built `https://store_WdsHBk1w9fDO4vPW.private.blob.vercel-storage.com/...` and 404'd. The RW path was unaffected because parseStoreIdFromReadWriteToken yields a bare lowercase id from the token's structure. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * preserve case when normalizing storeId The first pass also lowercased — that breaks API requests, since the Vercel Blob API is case-sensitive on the storeId (header and bearer parsing). The CDN host accepts either case, so prefix-strip alone is sufficient and works for both consumers. Verified end-to-end against a private store: blob get and blob list both succeed. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * add oidcToken option * minor version * Vercel Presigned URLs (#1057) * presigned urls * up * normalize * fix * update to new signing string * [wip] presigned url version of handleUpload (#1059) * [wip] presigned url version of handleUpload * up * up * up * add presigned urls for mpu * update options shape * webhook signature * update example * up * up * up * change to operation * up * up * verify webhook signature * up * callbackUrl * non-null * presigned url opts * new delegation token + url opts * dont lowercase store id * validUntil instead of ttlSeconds * up * up * Add 'delete' to DelegationOperation for presigned DELETE URLs (#1061) Mirrors the API-side change that adds `delete` to the issue_signed_token allowed operations. `presignUrl` now signs canonical `operation=delete\npathname=...` against the public blob object URL (same host shape as `get`/`head`, just used with HTTP DELETE). Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com> * change upload to put * delete * up * presigned url payload * update app * fix * docs * refactor presign url * up * up * up * add head * up * add params to url * add keys first * token payload * add buildPresignedGetUrl * up * presignUrl returns url, not accepted in sdk methods * up * up * feat(blob): presigned HEAD & DELETE URLs (#1064) * feat(blob): presigned DELETE URLs Wires the `'delete'` DelegationOperation (added in #1061, since rebased out of elliot/presigned-urls) through `presignUrl`. A token issued with `operations: ['delete']` can now mint a presigned `DELETE /?pathname=…` against the control-plane API. - `PresignDeleteUrlOptions` accepts `pathname`, optional `validUntil`, optional `ifMatch`. Upload-only fields are rejected at the type level. - `presign()` gates on the delegation scope including `'delete'`. - `buildPresignedDeleteUrl()` mirrors the PUT URL shape; the HTTP method is the discriminator (canonical signing string carries `operation=delete`). - `buildPresignCanonicalQueryEntries()` for `delete` emits only `validUntil` (when below the delegation ceiling) and `ifMatch`. - E2E test route + delete button on the presigned-upload demo page. Based on `elliot/presigned-urls`, not `main`. * feat(blob): presigned HEAD URLs (#1065) `HEAD` mirrors `GET` against the blob object host (`<storeId>.<access>.blob.vercel-storage.com/<pathname>`); the URL shape is identical and the HTTP method is the discriminator. `operation=head` goes into the canonical signing string so a GET-signed URL cannot be replayed as a HEAD (and vice versa). - `'head'` added to `DelegationOperation`. - `PresignHeadUrlOptions` — same shape as `PresignGetUrlOptions` (`pathname`, optional `validUntil`). - `presign()` gates on the delegation scope including `'head'`. - `presignUrl()` reuses `buildPresignedGetUrl()` for `operation: 'head'`. - `buildPresignCanonicalQueryEntries()` for `head` emits only `validUntil` (when below the delegation ceiling) — same as `get`. - E2E test route + HEAD button on the presigned-upload demo page. Stacked on `falcoagustin/presigned-delete-impl` (#1064). * environment error * up * cleanup --------- Co-authored-by: Agustin Falco <agusfalco_11@hotmail.com> Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com> * up * rm dead code * throw on manual token * up * up --------- Co-authored-by: Agustin Falco <agusfalco_11@hotmail.com> Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

vercel Bot deployed to Preview April 30, 2026 19:51 View deployment

vercel Bot deployed to Preview April 30, 2026 21:03 View deployment

vercel Bot had a problem deploying to Preview April 30, 2026 22:10 Failure

vercel Bot deployed to Preview April 30, 2026 22:30 View deployment

elliotdauber force-pushed the elliot/presigned-urls branch from 501d37d to 4fed205 Compare May 4, 2026 18:22

elliotdauber force-pushed the elliot/presigned-handle-upload branch from dfec20e to 3e9a3e0 Compare May 4, 2026 18:23

vercel Bot deployed to Preview May 4, 2026 18:40 View deployment

vercel Bot deployed to Preview May 4, 2026 18:42 View deployment

vercel Bot deployed to Preview May 4, 2026 21:19 View deployment

vercel Bot deployed to Preview May 4, 2026 21:25 View deployment

vercel Bot deployed to Preview May 4, 2026 21:27 View deployment

elliotdauber commented May 4, 2026

View reviewed changes

vercel Bot deployed to Preview May 4, 2026 21:42 View deployment

elliotdauber added 11 commits May 4, 2026 15:04

[wip] presigned url version of handleUpload

62dc2a8

up

e146540

up

6971fa5

up

96bff4c

add presigned urls for mpu

27bfeeb

update options shape

3396388

webhook signature

84f4a7b

update example

51e25e2

up

a885de8

up

635fd5c

up

1750415

elliotdauber force-pushed the elliot/presigned-handle-upload branch from ef94e63 to 1750415 Compare May 4, 2026 22:06

vercel Bot deployed to Preview May 4, 2026 22:07 View deployment

change to operation

fa32df8

elliotdauber marked this pull request as ready for review May 4, 2026 22:34

vercel Bot deployed to Preview May 4, 2026 22:35 View deployment

elliotdauber merged commit 41de657 into elliot/presigned-urls May 4, 2026
3 checks passed

elliotdauber deleted the elliot/presigned-handle-upload branch May 4, 2026 22:35

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[wip] presigned url version of handleUpload#1059

[wip] presigned url version of handleUpload#1059
elliotdauber merged 12 commits into
elliot/presigned-urlsfrom
elliot/presigned-handle-upload

elliotdauber commented Apr 30, 2026

Uh oh!

vercel Bot commented Apr 30, 2026 •

edited

Loading

Uh oh!

changeset-bot Bot commented Apr 30, 2026 •

edited

Loading

Uh oh!

elliotdauber May 4, 2026

Uh oh!

elliotdauber May 4, 2026

Uh oh!

elliotdauber May 4, 2026

Uh oh!

elliotdauber May 4, 2026

Uh oh!

Uh oh!

elliotdauber commented May 4, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

elliotdauber commented Apr 30, 2026

Uh oh!

vercel Bot commented Apr 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

changeset-bot Bot commented Apr 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ No Changeset found

Uh oh!

elliotdauber May 4, 2026

Choose a reason for hiding this comment

Uh oh!

elliotdauber May 4, 2026

Choose a reason for hiding this comment

Uh oh!

elliotdauber May 4, 2026

Choose a reason for hiding this comment

Uh oh!

elliotdauber May 4, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

elliotdauber commented May 4, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

vercel Bot commented Apr 30, 2026 •

edited

Loading

changeset-bot Bot commented Apr 30, 2026 •

edited

Loading