[BUG] OSS pre-signed upload returns 403 (Forbidden).

[amusitela]

OpenIM Server Version

openim-server:v3.8.3-patch.3

Operating System and CPU Architecture

Linux (AMD)

Deployment Method

Docker Deployment

Bug Description and Steps to Reproduce

It is suspected that the request headers are missing the X-Oss-Callback parameter.

Screenshots Link

No response

[amusitela]

,不好意思刚刚上传错图片了

[dsx137]

This is almost certainly caused by an unconfigured MINIO_EXTERNAL_ADDRESS in .env.

The default value in .env is:

MINIO_EXTERNAL_ADDRESS="http://external_ip:10005"

The external_ip placeholder must be replaced with the actual IP address or domain of your server. The presigned upload URL is generated server-side using this address, so if it still contains external_ip, the client will fail with a 403 because the host cannot be resolved.

This is a known issue, identical to open-im-server #2439.

Fix:

1. Replace external_ip in .env with your actual server IP or domain:

MINIO_EXTERNAL_ADDRESS="http://:10005"

If you are using Nginx + domain, refer to the official docs and use the proxy path:

MINIO_EXTERNAL_ADDRESS="https://your-domain.com/im-minio-api"

2. Then recreate the containers:

docker compose down
docker compose up -d

If the 403 still occurs after changing MINIO_EXTERNAL_ADDRESS, check that the MinIO service itself is healthy and that the port 10005 is accessible from the client or Nginx proxy.