POSTing to S3: InvalidPolicyDocument about carrierwave_direct

[sshaw]

Doing exactly what's done in the README's HAML example results in:

🆗, I lied. I did not set success_action_redirect. When I do that, I get:

<Error>
<Code>AccessDenied</Code>
<Message>
Invalid according to Policy: Policy Condition failed: ["eq", "$success_action_redirect", "http://example.com"]
</Message>
<!-- snip -->
</Error>

{
  "expiration": "2019-11-02T05:03:46Z",
  "conditions": [
    [
      "starts-with",
      "$key",
      "sshaw/xxx"
    ],
    {
      "X-Amz-Algorithm": "AWS4-HMAC-SHA256"
    },
    {
      "X-Amz-Credential": "xxx"
    },
    {
      "X-Amz-Date": "20191101T190346Z"
    },
    {
      "bucket": "xxx"
    },
    {
      "acl": "private"
    },
    {
      "success_action_redirect": "http://example.com"
    },
    [
      "content-length-range",
      1,
      5242880
    ]
  ]
}

[p8]

Are you calling direct_fog_hash?

User.new.avatar.direct_fog_hash.to_json

It's could use some documentation in the README.md

[sshaw]

Are you calling direct_fog_hash?

No. I'm doing what's in the documentation, which calls @uploader.policy.

User.new.avatar.direct_fog_hash.to_json

This just returns a Hash of values, most of which are already used in the HTML form. Not sure of the significance here.

[p8]

hmm strange, It shouldn't post json. Could you post some code?

[sshaw]

hmm strange, It shouldn't post json. Could you post some code?

@p8, let me quote myself here:

Doing exactly what's done in the README's HAML example...

When you do what's given there, does it work for you?

[p8]

I'm using the Rails example which works for me.
The haml example should probably be something like:

%form{:action => @uploader.direct_fog_url, :method => "post", :enctype => "multipart/form-data"}
  - @object.direct_fog_hash.each do |key, value|
    - if key != :uri
      %input{:type => "hidden", :name => key, :value => value}
  %input{:type => "hidden", :name => "success_action_redirect", :value => @uploader.success_action_redirect}
  %input{:name => "file", :type => "file"}
  %input{:type => "submit", :value => "Upload to S3"}

[sshaw]

Thanks @p8, that works!

[p8]

Great! I'll change the README example

[sshaw]

So it appears the only difference between the old example and the new example is redirect URL was not included.