Squirrel.Windows icon indicating copy to clipboard operation
Squirrel.Windows copied to clipboard

Securely update incremental hosting on Cloud (AWS, OneDrive etc)

Open Jackychans opened this issue 5 years ago • 2 comments

Hi, I've been doing the model in which the full setup and incremental update, nuget packages all in one place in AWS S3 hosting. However, since this public hosting is setup as public, is there away that I could let user securely update instead of exposing everything, and people just keep downloading once they know URL endpoint of S3 without using my app

Jackychans avatar Oct 10 '20 10:10 Jackychans

While I'm not familiar with the workings of AWS, I am hosting our update packages in a private Azure blob storage container that can only be accessed via a SAS token. Maybe this discussion will help you: https://github.com/Squirrel/Squirrel.Windows/issues/1324

Note that you will need to loop through ReleaseEntries and download them one by one using your custom WebClient yourself, as Squirrel will try to re-use the provided WebClient for concurrent downloads, which is not possible.

frederikolsen88 avatar Oct 22 '20 10:10 frederikolsen88

I think the solution proposed in #1528, while not perfect, gets the job done.

adiaz-iot avatar Jun 08 '21 15:06 adiaz-iot