Django亚马逊s3 SuspiciousOperation

psy*_*ok7 5 django amazon-s3 boto amazon-web-services django-storage

因此,当我尝试从浏览器访问S3上的某个图像时,一切正常.但是当python正在做它时,我得到一个SuspiciousOperation错误.我的静态文件夹在S3上是公共的,所以我真的不知道它来自哪里.

Publication.objects.get(id=4039).cover.url
Traceback (most recent call last):
  File "<console>", line 1, in <module>
  File "/home/vagrant/.pyenv/versions/blook/lib/python2.7/site-packages/django/db/models/fields/files.py", line 64, in _get_url
    return self.storage.url(self.name)
  File "/home/vagrant/.pyenv/versions/blook/lib/python2.7/site-packages/queued_storage/backends.py", line 291, in url
    return self.get_storage(name).url(name)
  File "/home/vagrant/.pyenv/versions/blook/lib/python2.7/site-packages/queued_storage/backends.py", line 115, in get_storage
    elif cache_result is None and self.remote.exists(name):
  File "/home/vagrant/.pyenv/versions/blook/lib/python2.7/site-packages/storages/backends/s3boto.py", line 410, in exists
    name = self._normalize_name(self._clean_name(name))
  File "/home/vagrant/.pyenv/versions/blook/lib/python2.7/site-packages/storages/backends/s3boto.py", line 341, in _normalize_name
    name)
SuspiciousOperation: Attempted access to 'http:/s3-eu-west-1.amazonaws.com/xpto/static/images/default-image.png' denied.
Run Code Online (Sandbox Code Playgroud)

我的设置:

AWS_S3_SECURE_URLS = True  # use http instead of https
S3_URL = 'http://s3-eu-west-1.amazonaws.com/%s' % AWS_STORAGE_BUCKET_NAME
MEDIA_ROOT = 'media/'
STATIC_ROOT = '/static/'
STATIC_URL = S3_URL + STATIC_ROOT
MEDIA_URL = S3_URL + '/' + MEDIA_ROOT
Run Code Online (Sandbox Code Playgroud)

现在我可以解决它,但这不是一个长期的解决方案.有任何想法吗?

小智 5

Danigosa 在此线程中的回答是: django-storages 和 amazon s3 - 可疑操作

创建一个特殊的存储类,如本文所述: 使用 Amazon S3 存储您的 Django 站点静态和媒体文件

然后_normalize_name像这样覆盖:

from django.conf import settings
from storages.backends.s3boto3 import S3Boto3Storage


class StaticStorage(S3Boto3Storage):

    location = settings.STATICFILES_LOCATION

    def _clean_name(self, name):
        return name

    def _normalize_name(self, name):
        if not name.endswith('/'):
            name += "/"

        name += self.location
        return name


class MediaStorage(S3Boto3Storage):

    location = settings.MEDIAFILES_LOCATION

    def _clean_name(self, name):
        return name

    def _normalize_name(self, name):
        if not name.endswith('/'):
            name += "/"

        name += self.location
        return name
Run Code Online (Sandbox Code Playgroud)

最后 - (至少在 Python 3 上)不要使用

{% load static from staticfiles %}
Run Code Online (Sandbox Code Playgroud)

在您的模板中。

坚持:

{% load static %}
Run Code Online (Sandbox Code Playgroud)

  • 我相信它应该是`name = self.location + name` 而不是`name += self.location` (3认同)