Login redirect¶

Instead of throwing a “Authentication required!” message you can redirect the user to a certain page so he can login.

Add following to your ext_localconf.php or typo3conf/AdditionalConfiguration.php

$GLOBALS['TYPO3_CONF_VARS']['EXTCONF']['fal_securedownload']['login_redirect_url'] = '/login/?redirect_url=###REQUEST_URI###';

No Access redirect¶

Instead of throwing a “Access denied” message you can redirect the user to a certain page to inform the user about the access denied with optional some extra info.

Add following to your ext_localconf.php or typo3conf/AdditionalConfiguration.php

$GLOBALS['TYPO3_CONF_VARS']['EXTCONF']['fal_securedownload']['no_access_redirect_url'] = '/no-access/?redirect_url=###REQUEST_URI###';

EXT:ke_search support¶

To have proper support for ke_search you need at least version 1.8.4 of ke_search and 0.0.8 of fal_secure_download.

EXT:solrfal support¶

To have correct urls to indexed files you need to add/adjust following ext:solr typoscript configuration.

plugin.tx_solr.index.queue._FILES.default.filePublicUrl = public_url
plugin.tx_solr.index.queue._FILES.default.url = public_url

This feature is sponsored by: STIMME DER HOFFNUNG Adventist Media Center

Signals and slots¶

BeforeFileDump¶

This signal will be fired everytime a file is going to download or display. This signal will not be fired, if access to requested file is restricted for current logged in frontend user. BeforeFileDump is useful for e.g. tracking access of downloaded files.

Example of how to register a slot for this signal (in your ext_localconf.php):

/** @var \TYPO3\CMS\Extbase\SignalSlot\Dispatcher $signalSlotDispatcher */
$signalSlotDispatcher = \TYPO3\CMS\Core\Utility\GeneralUtility::makeInstance('TYPO3\\CMS\\Extbase\\SignalSlot\\Dispatcher');
$signalSlotDispatcher->connect(
        'BeechIt\FalSecuredownload\Hooks\FileDumpHook',
        'BeforeFileDump',
        'Vendor\ExtensionName\Slot\BeforeFileDumpSlot',
        'logFileDump'
);

EXT:fal_securedownload vs EXT:naw_securedl¶

fal_securedownload uses the FAL API to create secure links instead of checking/changing all links found in the HTML output.
fal_securedownload supports remote storages.
fal_securedownload requires proper use of the FAL API so extensions that do not use $file->getPublicUrl() to create links to your files or not secured. But that would also mean remote and non public storages are not supported.
With fal_securedownload editors can set the permissions for files/folders by fe_group in the BE File list module.
Links created by fal_securedownload are exchangeable with other users without the risk that people get access to files they are not allowed to access as a FE login is required to get access.
- fal_securedownload ‘secured’ links don’t have a expiration date and are only usable for users with a FE login.
- Links do not change over time.

Known issues¶

My FileDumpEID hook isn’t executed

The DownloadLinkViewHelper used in the FileTree plugin adds a &download to the asset link. The hook that is used to check if you have permissions to access the asset will force a download when this parameter is set. Problem with this is that all other FileDumpEID hooks registered after fal_securedownload will not be executed anymore then.
I got javascript errors after including the provided typoscript template

This is properly because you do not have jQuery available on the FE. You can easily disable the provided javascript be adding this line to you typoscript template

page.jsFooterInline.303030 >

Files in my “secure” folder aren’t processed by ext:tika

If the folder is outside of the document root you need to set $GLOBALS[‘TYPO3_CONF_VARS’][‘BE’][‘lockRootPath’] else ext:tika will not process the files.

Todo¶

Complete this document

Further development¶

The git repository of ext:fal_securedonwload can be found on Github.

Pull request and suggestions for improvement are very welcome.