Why is artifact download url to be expired in 1 minute?

[jjangga0214]

I'm not sure whether this issue is proper to be here. Please let me know where to forward if desired.

The official docs for action api says artifact download URL expires in 1 minute.

Why is there such expiration and even so short?

What if someone needs a fixed, lasting URL without an expiration?

Thanks.

[mk-pmb]

… or if someone is just on a slow uplink.

[yacaovsnc]

I understand the need for a fixed and lasting URL. Unfortunately we do not support this at the moment, it's because the redirect download URL is considered signed with a HMAC key and it is stateless. The blob storage we use does not have ways to authenticate the GitHub user, so we cannot provide long-lasting URLs that bypass security checks for now. Even if an artifact is public, it's possible that the repo will become private in the future so we still need to check for user permission every time.

[nkalupahana]

@yacaovsnc Could the timeout be made slightly longer (say, 5 minutes)? On a slow internet connection with really large artifacts, the link expires before it even goes through. (Good example of this: https://github.com/nkalupahana/ros2-foxy-macos/actions/runs/873341876)