2.7.0.beta1 ( ae114a6ee8 ) I assume it has something to do with secure media because the upload of an image as group flair still works (it has the X-amz credentials) but after a refresh the display of said image gives a 403, access denied (the X-amz credentials are missing). Groups flair Icons work fine, and otherwise uploads, avatars, category logos, also fine. It seems quite similar to this one Secure Media Uploads breaks Category Logos - #2 by martin , but I’m almost sure I has worked between the fix of Martin and now (worked with 2.6.0 beta5 if I’m not mistaken).

[image] Benjamin_D: group_flair You are right, I am making a fix for this here, which will include a migration to fix incorrectly marked secure group flair uploads FIX: Do not mark group_flair images as secure on upload by martin-brennan · Pull Request #12081 · discourse/discourse · GitHub

I still can’t make it work ( 2.7.0.beta3 ( 7fe5368718 ) ) :pleading_face: I wonder if group_flair shouldn’t be a public type ? lib/upload_security.rb 7fe536871 PUBLIC_TYPES = %w[ avatar custom_emoji profile_background card_background category_logo category_background ]

[image] and it’s working :smile: :+1:

Secure Media Uploads breaks Group flair image

Product Support

Benjamin_D (Benjamin Decotte) February 16, 2021, 12:29pm 10

and it’s working

Topic		Replies	Views
Warning that flair will make group visible for everyone doesn't work for image uploads Bug group-flair	8	361	November 28, 2025
Secure Media Uploads breaks Category Logos Bug	3	1313	August 24, 2020
Group flairs don't show Bug	24	2297	August 10, 2021
Group Avatar flair image disappeared after update Bug	4	729	August 9, 2021
Public posts contain secure upload urls for non-secure uploads Bug	4	504	April 26, 2023

Secure Media Uploads breaks Group flair image

Related topics