Merge pull request #487 from humanmade/include-referer

Add Referer header support to S3 requests

Author: jerico

src/lambda-handler.ts

@@ -24,12 +24,16 @@ const streamify_handler: StreamifyHandler = async ( event, response ) => {
 		'X-Amz-Expires'?: string;
 		'presign'?: string,
 		key: string;
+		referer?: string;
 	};
 	args.key = key;
 	if ( typeof args.webp === 'undefined' ) {
 		args.webp = !! ( event.headers && Object.keys( event.headers ).find( key => key.toLowerCase() === 'x-webp' ) );
 	}
-
+	const refererHeaderKey = Object.keys(event.headers || {}).find(h => h.toLowerCase() === 'referer');
+	if (refererHeaderKey) {
+			args.referer = event.headers[refererHeaderKey];
+	}
 	// If there is a presign param, we need to decode it and add it to the args. This is to provide a secondary way to pass pre-sign params,
 	// as using them in a Lambda function URL invocation will trigger a Lambda error.
 	if ( args.presign ) {

src/lib.ts

@@ -24,6 +24,7 @@ export interface Args {
 	'X-Amz-Signature'?: string;
 	'X-Amz-Date'?: string;
 	'X-Amz-Security-Token'?: string;
+	referer?: string;
 }
 
 export type Config = S3ClientConfig & { bucket: string };
@@ -56,6 +57,12 @@ export async function getS3File( config: Config, key: string, args: Args ): Prom
 			 */
 			sign: async request => {
 				if ( ! args['X-Amz-Algorithm'] ) {
+					// Add referer to the request headers on non-presigned URLs
+					// Presigned URLs works without the referer header
+					if (args.referer) {
+						request.headers = request.headers || {};
+						request.headers['referer'] = args.referer;
+					}
 					return request;
 				}
 				const presignedParamNames = [