files.com 1.1.744 → 1.1.746

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b8af62f099ab3fe1820b5ff20e5dc202bee1a742c42505961cd9d00c7c894d66
-  data.tar.gz: 337cc2a388ec0cc310a9fe9473906ce64eeaa20bd8a17ea74b9c2dc1a43f6ef8
+  metadata.gz: 55f688340c1d5973051508e5030a9eaa3a068cd65b27358049faeaf9443350ef
+  data.tar.gz: e9bc4c9ab0eaa231d1d789feb4a6033e46ea497ac83bb29f725ceaddca79eb68
 SHA512:
-  metadata.gz: c30b00f9b88d92ea33ba15f91cf370478862dce94240b2118027294efeb76a24885a0f100cfb7ee6771e51ff3c84d0bb2f20edd688bb7972ba72178db7e8ffda
-  data.tar.gz: 8a559215377d6c771e06610d57ac45e29d30ee1a0a7c51945a77ee620e650a450892964060de75d255cdf21610969116e5adaa9df35a5983507d9c48598db27d
+  metadata.gz: 2086b7cdd11439fead79be67ec193427434fc2beedc231242953c485c9e6549bc5c1713f7e3d8be952398073ef51acd579180b112a552469504416913a7e5446
+  data.tar.gz: 9e403669a84f1914de24bc82296fd6b770cf67f80bad8d3886cfa0e479e6763e67a87cc61420eb4136fa2f21f17911daafefb31b03a57bbb6f7274f08103a4f6

data/_VERSION

@@ -1 +1 @@
-1.1.744
+1.1.746

data/docs/behavior.md

@@ -33,7 +33,7 @@
 * `name` (string): Name for this behavior.
 * `description` (string): Description for this behavior.
 * `value` (object): Settings for this behavior.  See the section above for an example value to provide here.  Formatting is different for each Behavior type.  May be sent as nested JSON or a single JSON-encoded string.  If using XML encoding for the API call, this data must be sent as a JSON-encoded string.
-* `public_hosting_url` (string): Public URL for this publicly hosted folder when the `Serve Publicly` behavior has a key configured. When a Custom Domain with `public_hosting` destination is attached to this behavior, the URL uses that domain. Otherwise it uses the site's `subdomain.hosted-by-files.com` host, unless `custom_domain_only` is enabled, in which case no URL is returned.
+* `public_hosting_url` (string): Public URL for this publicly hosted folder when the `Serve Publicly` behavior has a key configured. Only returned to site admins or users with admin permission on this folder. When a Custom Domain with `public_hosting` destination is attached to this behavior, the URL uses that domain. Otherwise it uses the site's `subdomain.hosted-by-files.com` host, unless `custom_domain_only` is enabled, in which case no URL is returned.
 * `disable_parent_folder_behavior` (boolean): If true, disables the inherited behavior for this folder and its children. Valid only for behavior types that child folders may override, and requires recursive to be true. Rejected for all other behavior types.
 * `recursive` (boolean): Whether this behavior is recursive for this record. `always` behaviors are always `true`, `never` behaviors are always `false`, and `sometimes` behaviors may be either value.
 * `inherited` (boolean): If true, this behavior is inherited from a higher scope rather than owned by the requested workspace.

data/lib/files.com/api_client.rb

@@ -150,9 +150,10 @@ module Files
     def remote_request(method, url, headers = {}, body = nil)
       context = RequestLogContext.new
       context.method       = method
-      context.path         = url
+      context.path         = "[transfer]"
+      Util.log_debug("Transfer request", method: method, url: url)
 
-      execute_request_with_rescues(Files.base_url, context, skip_body_logging: true) do
+      execute_request_with_rescues(Files.base_url, context, skip_body_logging: true, is_transfer: true) do
         conn.run_request(method, url, body, headers) do |req|
           req.options.open_timeout = Files.open_timeout
           req.options.timeout = Files.read_timeout
@@ -215,7 +216,7 @@ module Files
       raise AuthenticationError, "The provided Session ID is invalid (it contains whitespace)"
     end
 
-    def execute_request_with_rescues(base_url, context, skip_body_logging: false)
+    def execute_request_with_rescues(base_url, context, skip_body_logging: false, is_transfer: false)
       num_retries = 0
       begin
         request_start = Time.now
@@ -240,14 +241,18 @@ module Files
           retry
         end
 
+        Util.log_debug("Transfer error details", error_message: e.message) if is_transfer
+
         case e
         when Faraday::ClientError, Faraday::ServerError
           if e.response and has_error_type?(e)
-            handle_error_response(e.response, error_context)
+            handle_error_response(e.response, error_context, is_transfer: is_transfer)
           else
-            handle_network_error(e, error_context, num_retries, base_url)
+            handle_network_error(e, error_context, num_retries, base_url, is_transfer: is_transfer)
           end
         else
+          raise e.exception("Transfer request failed (#{e.class})"), cause: nil if is_transfer
+
           raise
         end
       end
@@ -266,7 +271,7 @@ module Files
       str
     end
 
-    private def handle_error_response(http_resp, context)
+    private def handle_error_response(http_resp, context, is_transfer: false)
       begin
         resp = Response.from_faraday_hash(http_resp)
         error_data = resp.data[:error] || resp.data[:errors]
@@ -275,17 +280,22 @@ module Files
 
         raise Error, "Unknown error" unless error_data
       rescue JSON::ParserError, Error
+        raise APIError.new("Transfer request failed", http_status: http_resp[:status]), cause: nil if is_transfer
+
         raise general_api_error(http_resp[:status], http_resp[:body])
       end
 
-      error = specific_api_error(resp, error_data, context)
+      error = specific_api_error(resp, error_data, context, is_transfer: is_transfer)
 
       error.response = resp
-      raise(error)
+      raise error, cause: nil if is_transfer
+
+      raise error
     end
 
-    private def specific_api_error(resp, error_data, _context)
-      Util.log_error("API error", status: resp.http_status, error_message: error_data[:message])
+    private def specific_api_error(resp, error_data, _context, is_transfer: false)
+      message = is_transfer ? "Transfer request failed" : error_data[:message]
+      Util.log_error("API error", status: resp.http_status, error_message: message)
 
       opts = {
         http_body: resp.http_body,
@@ -295,28 +305,34 @@ module Files
         code: error_data[:code] || resp.http_status,
       }
 
-      return APIError.new(error_data[:message], **opts) unless resp&.data&.dig(:type)
+      return APIError.new(message, **opts) unless resp&.data&.dig(:type)
 
       begin
         error_type = resp.data[:type].split("/").last
         error_class_name = "#{error_type.split("-").map(&:capitalize).join}Error"
         error_class = Files.const_get(error_class_name)
-        error_class.new(error_data[:message], **opts)
+        error_class.new(message, **opts)
       rescue NameError
-        APIError.new(error_data[:message], **opts)
+        APIError.new(message, **opts)
       end
     end
 
-    private def handle_network_error(error, _context, num_retries, base_url = nil)
+    private def handle_network_error(error, _context, num_retries, base_url = nil, is_transfer: false)
       base_url ||= Files.base_url
 
-      error_message = error.message.empty? ? error.response[:body] : error.message
+      error_message = if is_transfer
+                        error.class.name
+                      else
+                        error.message.empty? ? error.response[:body] : error.message
+                      end
 
       Util.log_error("Network error", error_message: error_message)
       message = "Could not connect to Files.com at URL #{base_url}. Please check your internet connection and try again. If this problem persists, you should check Files.com's service status at https://status.files.com, or contact your primary account representative."
       message += " Request was retried #{num_retries} times." if num_retries > 0
       message += "\n\n(Network error: #{error_message})"
 
+      raise APIConnectionError, message, cause: nil if is_transfer
+
       raise APIConnectionError, message
     end
 
@@ -372,7 +388,8 @@ module Files
     end
 
     private def log_response_error(context, request_start, error)
-      Util.log_error("Error", elapsed: Time.now - request_start, error_message: error.message, method: context.method, path: context.path)
+      Util.log_error("Error", elapsed: Time.now - request_start, error_type: error.class, method: context.method, path: context.path)
+      Util.log_debug("Error details", error_message: error.message)
     end
 
     class RequestLogContext

data/lib/files.com/models/behavior.rb

@@ -72,7 +72,7 @@ module Files
       @attributes[:value] = value
     end
 
-    # string - Public URL for this publicly hosted folder when the `Serve Publicly` behavior has a key configured. When a Custom Domain with `public_hosting` destination is attached to this behavior, the URL uses that domain. Otherwise it uses the site's `subdomain.hosted-by-files.com` host, unless `custom_domain_only` is enabled, in which case no URL is returned.
+    # string - Public URL for this publicly hosted folder when the `Serve Publicly` behavior has a key configured. Only returned to site admins or users with admin permission on this folder. When a Custom Domain with `public_hosting` destination is attached to this behavior, the URL uses that domain. Otherwise it uses the site's `subdomain.hosted-by-files.com` host, unless `custom_domain_only` is enabled, in which case no URL is returned.
     def public_hosting_url
       @attributes[:public_hosting_url]
     end

data/lib/files.com/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Files
-  VERSION = "1.1.744"
+  VERSION = "1.1.746"
 end

data/spec/lib/api_client_spec.rb

@@ -3,6 +3,67 @@ require "spec_helper"
 RSpec.describe Files::ApiClient do
   let(:subject) { described_class.new }
 
+  describe "signed transfer privacy" do
+    it "keeps API error types without echoing a transfer URL" do
+      url = "https://transfer.example.test/private-part?signature=secret"
+      output = StringIO.new
+      original_logger = Files.logger
+      Files.logger = Logger.new(output, level: Logger::INFO)
+      connection = Faraday.new do |builder|
+        builder.response :raise_error
+        builder.adapter :test do |stub|
+          stub.put(url) { [ 404, {}, { type: "not-found", error: url }.to_json ] }
+        end
+      end
+
+      expect { described_class.new(connection).remote_request(:put, url, {}, "part") }.to raise_error(Files::NotFoundError) { |error|
+        expect(error.http_status).to eq(404)
+        expect(error.full_message).not_to include(url, "private-part", "secret")
+      }
+      expect(output.string).not_to include(url, "private-part", "secret")
+    ensure
+      Files.logger = original_logger
+    end
+
+    it "keeps the URL out of normal logs and errors while retaining retries and debug details" do
+      url = "https://transfer.example.test/private-part?X-Amz-Credential=credential&X-Amz-Signature=signature"
+      original_logger = Files.logger
+      original_retries = Files.max_network_retries
+      original_delay = Files.initial_network_retry_delay
+      Files.max_network_retries = 1
+      Files.initial_network_retry_delay = 0
+
+      [ Logger::INFO, Logger::DEBUG ].each do |level|
+        output = StringIO.new
+        Files.logger = Logger.new(output, level: level)
+        attempts = 0
+        connection = Faraday.new do |builder|
+          builder.adapter :test do |stub|
+            stub.put(url) do
+              attempts += 1
+              raise Faraday::ConnectionFailed, "connection reset for #{url}"
+            end
+          end
+        end
+
+        expect { described_class.new(connection).remote_request(:put, url, {}, "part") }.to raise_error(Faraday::ConnectionFailed) { |error|
+          expect(error.full_message).not_to include(url, "private-part", "credential", "signature")
+        }
+        expect(attempts).to eq(2)
+        if level == Logger::INFO
+          expect(output.string).to include("Request", "Error")
+          expect(output.string).not_to include(url, "private-part", "credential", "signature")
+        else
+          expect(output.string).to include(url, "connection reset")
+        end
+      end
+    ensure
+      Files.logger = original_logger
+      Files.max_network_retries = original_retries
+      Files.initial_network_retry_delay = original_delay
+    end
+  end
+
   describe "#execute_request_with_rescues" do
     let(:context) { double('context', method: 'some method', path: 'some path') }
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: files.com
 version: !ruby/object:Gem::Version
-  version: 1.1.744
+  version: 1.1.746
 platform: ruby
 authors:
 - files.com
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2026-09-23 00:00:00.000000000 Z
+date: 2026-09-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: addressable