Resized Image REST API Broken in 10.3.2.7882?

Community Version: 10.3.2.7882

For any request using the /resized-image rest api endpoint, the application is throwing a 403 forbidden response at me. The IIS App Pool identity has access to the requested folder in the filestorage.  This is only happening for images using /resized-image.  Is this a known bug?

Example:

community/resized-image/__size/512x256x1/__key/communityserver-blogs-components-weblogfiles/00-00-00-00-06/7651.fake.image.jpg

Response: You do not have permission to view this directory or page.

Status Code: 403

Parents
  • That isn't a REST API, its not meant to be called directly because it relies on you being signed in to the community.  In 11 that url would respect API authentication but not earlier, and this would have always been the case.  The REST API for files is https://community.telligent.com/community/10/w/api-documentation/61480/show-cfs-rest-endpoint.

  • Sorry, I didn't mention that we're using the default "Blog - Post List" wdiget in a grid layout with thumbnails showing.

    Looking at the widget code, this section is where its grabbing the URL to display. Sometimes it uses:

    /community/cfs-file/__key/communityserver-blogs-components-weblogfiles/...

    and sometimes it uses:

    /community/resized-image/__size/320x240/__key/communityserver-blogs-components-weblogfiles

    Its the latter that is throwing 403 for me

    #if ($showthumbnail)
    	<div class="avatar">
    	    #if ($viewLayout == 'grid')
    	        #set ($imageWidth = 512)
    		    #set ($imageHeight = 256)
    	    #else
    			#set ($imageWidth = 100)
    			#set ($imageHeight = 100)
    		#end
    		<a href="$core_v2_encoding.HtmlAttributeEncode($post.Url)">
    			$core_v2_ui.GetResizedImageHtml($postImage, $imageWidth, $imageHeight, "%{border='0px', alt=$post.Name, ResizeMethod = 'ZoomAndCrop' }")
    		</a>
    	</div>
    #end

Reply
  • Sorry, I didn't mention that we're using the default "Blog - Post List" wdiget in a grid layout with thumbnails showing.

    Looking at the widget code, this section is where its grabbing the URL to display. Sometimes it uses:

    /community/cfs-file/__key/communityserver-blogs-components-weblogfiles/...

    and sometimes it uses:

    /community/resized-image/__size/320x240/__key/communityserver-blogs-components-weblogfiles

    Its the latter that is throwing 403 for me

    #if ($showthumbnail)
    	<div class="avatar">
    	    #if ($viewLayout == 'grid')
    	        #set ($imageWidth = 512)
    		    #set ($imageHeight = 256)
    	    #else
    			#set ($imageWidth = 100)
    			#set ($imageHeight = 100)
    		#end
    		<a href="$core_v2_encoding.HtmlAttributeEncode($post.Url)">
    			$core_v2_ui.GetResizedImageHtml($postImage, $imageWidth, $imageHeight, "%{border='0px', alt=$post.Name, ResizeMethod = 'ZoomAndCrop' }")
    		</a>
    	</div>
    #end

Children