Безопасные URL для S3, MinIO и OSS

engineering

storage-url-safety is a Claude Code skill that guides correct URL strategy selection when designing file upload and download functionality with object storage systems such as MinIO, OSS, and S3. It documents six concrete pitfalls: using presigned URLs for long-lived assets like avatars and product images (MinIO/S3 cap expires at 7 days), missing public-read bucket policies, mismatched presigned URL expiry durations, lack of file type and size validation for direct client uploads, CDN origin-pull misconfiguration, and the anti-pattern of duplicating resolveImageUrl logic across seven or more services. Each trap includes wrong and correct Java code samples, mc and ossutil64 commands for bucket policy setup, and a reference table mapping resource types to recommended URL strategies and expiry ranges. Backend developers building file storage features will use this skill to avoid 403 errors, broken image links, and scattered URL-resolution code.