Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Limit number of downloads #10

Open
paulgalow opened this issue Sep 30, 2022 · 0 comments
Open

Limit number of downloads #10

paulgalow opened this issue Sep 30, 2022 · 0 comments

Comments

@paulgalow
Copy link

paulgalow commented Sep 30, 2022

It might be useful to have an optional feature to limit the amount of downloads.

Potential benefits include

  • Limiting the blast radius of denial of wallet attacks
  • Enabling "self-destructing" download links that are valid for one download only, e.g. for sending sensitive information

Thoughts on how to implement that

  • Use DynamoDB table item attributes to track current and max downloads counters
  • Alternative: Store current and max downloads counters as object metadata on each uploaded file. Would alleviate need for separate database but would add more latency since S3 would effectively act as a database. The biggest downside I see for that option: in order to change object metadata you need to create a copy of that object.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant