Hacker News new | ask | show | jobs
by ev1 1456 days ago
Is this strictly for techies that would possess AWS keys in the first place (see Dropbox HN launch post, just set up your own FTP server, etc) or eventually intended for normal people?

If you are implementing client side encryption, something like "log in with dropbox" oauth, GDrive, etc or similar to just serialize an encrypted snapshot into a known folder would be the most usable for non techies based on previous stuff I've worked on. Asking people to set up restricted IAM roles and keys to write to a single bucket for a todo list is honestly very high up there on the ridiculous list, as much as I would totally do that.

1 comments

It's only intended for techies (and friends thereof I suppose). It's really a tiny project that I've set out to finish in 16 hours as a challenge. So far the progress is great but those S3 libraries are throwing a wrench in my schedule. Because of that tight time budget I think oauth would be out of scope as I've never done anything like it.

Getting into this I was under the impression that uploading a file to S3 was as simple as chucking the api key into the Autorization header of a post and off we go. That's the type of ease of use I'm looking for. Turns out its not quite as trivial with a whole signature process etc.

I haven't had an issue with it, you're basically just calling a function.

https://github.com/awsdocs/aws-doc-sdk-examples/blob/main/ja...

Apparently the sdk doesn't play nice with vite. And it's way to heavy for my use case anyway. After looking further I found this library that is perfect for my needs https://github.com/mhart/aws4fetch.