From 86af4d6a04a1c30ebfe2377cdc3270ade911b2fe Mon Sep 17 00:00:00 2001
From: GitLab Bot <gitlab-bot@gitlab.com>
Date: Thu, 5 Jan 2023 00:07:14 +0000
Subject: Add latest changes from gitlab-org/gitlab@master

---
 lib/api/helpers.rb | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

(limited to 'lib/api/helpers.rb')

diff --git a/lib/api/helpers.rb b/lib/api/helpers.rb
index 95c81c14bf9..38430aac455 100644
--- a/lib/api/helpers.rb
+++ b/lib/api/helpers.rb
@@ -608,6 +608,8 @@ module API
       if file.file_storage?
         present_disk_file!(file.path, file.filename)
       elsif supports_direct_download && file.class.direct_download_enabled?
+        return redirect(signed_head_url(file)) if head_request_on_aws_file?(file)
+
         redirect(cdn_fronted_url(file))
       else
         header(*Gitlab::Workhorse.send_url(file.url))
@@ -707,6 +709,19 @@ module API
 
     private
 
+    def head_request_on_aws_file?(file)
+      request.head? && file.fog_credentials[:provider] == 'AWS'
+    end
+
+    def signed_head_url(file)
+      fog_storage = ::Fog::Storage.new(file.fog_credentials)
+      fog_dir = fog_storage.directories.new(key: file.fog_directory)
+      fog_file = fog_dir.files.new(key: file.path)
+      expire_at = ::Fog::Time.now + file.fog_authenticated_url_expiration
+
+      fog_file.collection.head_url(fog_file.key, expire_at)
+    end
+
     # rubocop:disable Gitlab/ModuleWithInstanceVariables
     def initial_current_user
       return @initial_current_user if defined?(@initial_current_user)
-- 
cgit v1.2.3