From 066850eb7f742331fe1f716adc5052b918c13c43 Mon Sep 17 00:00:00 2001
From: Joakim Olsson <joakim@unbound.se>
Date: Thu, 16 Apr 2026 08:26:45 +0200
Subject: [PATCH] feat: add PresignURL method for existing objects

Generate presigned download URLs for objects already stored in S3,
valid for 15 minutes. Needed by document-service to serve document
download links.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 s3.go | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/s3.go b/s3.go
index a194263..0a3a266 100644
--- a/s3.go
+++ b/s3.go
@@ -92,6 +92,19 @@ func (s *S3) storeWithDirectUpload(path string, content io.Reader, contentType s
 	return req.URL, nil
 }
 
+// PresignURL generates a presigned download URL for an existing object.
+// The URL is valid for 15 minutes.
+func (s *S3) PresignURL(ctx context.Context, key string) (string, error) {
+	req, err := s.presigner.PresignGetObject(ctx, &s3.GetObjectInput{
+		Bucket: aws.String(s.bucket),
+		Key:    aws.String(key),
+	}, s3.WithPresignExpires(15*time.Minute))
+	if err != nil {
+		return "", err
+	}
+	return req.URL, nil
+}
+
 // New creates a new S3 storage instance using the upload manager
 // This loads AWS config from the default locations and is suitable for most use cases
 func New(bucket string) (*S3, error) {