# Why can't my Qiniu Cloud S3 attachments load in the forum after successful upload?
**URL:** https://meta.discourse.org/t/s3/393142
**Category:** Support
**Tags:** s3
**Created:** [January 10, 2026, 2:41pm UTC](https://meta.discourse.org/t/s3/393142 "2026-01-10T14:41:18Z")
**Posts on this page:** 8
**Page:** 1
Successfully uploaded to cloud storage vendor Qiniu Cloud, the loaded link is: [https://img.i4ta.com/original/1X/5be788f6a5e3d0efa278e1e87b6c6ca6be2ce4cf.mp4](https://img.i4ta.com/original/1X/5be788f6a5e3d0efa278e1e87b6c6ca6be2ce4cf.mp4), and the browser prompts:
```json
{
"error": "download token not specified"
}
```
The video loaded in the topic:
```html
```
Is it not using private bucket authentication? But I don’t know where to configure it. Are there any experts who know how to solve this?
---
have you read this topic?
> [@Configure an S3 compatible object storage provider for uploads](https://meta.discourse.org/t/configure-an-s3-compatible-object-storage-provider-for-uploads/148916):
>
> information_source This topic covers how to configure some common S3 compatible Object Storage providers (S3 clones). See [Set up file and image uploads to S3](https://meta.discourse.org/t/setting-up-file-and-image-uploads-to-s3/7229) for more details about Amazon AWS S3 configuration, which is officially supported and used internally by Discourse for our hosting services. Provider Service Name Works with Discourse? [Amazon AWS](#aws-s3-2) S3 Yes [Digital Ocean](#digital-ocean-spaces-3) Spaces Yes [Linode](#linode-object-storage-4) Object Storage Yes [Google Cloud](#google-cloud-platform-storage-5) Storage Yes [Scaleway](#scaleway-object-storage-6) Object Storage Yes [Vultr](#vultr-object-storage-7) Obj…
I don’t know anything about Qiniu Cloud or if their S3 storage is supported, but you will need an access key and token (I believe they are generated in your Qinui Cloud console). If it’s possible, your `app.yml` file settings should probably [look something like this example](https://meta.discourse.org/t/the-s3-cdn-url-setting-makes-no-effect/245078/7):
```plaintext
## S3 storage
DISCOURSE_USE_S3: true
DISCOURSE_S3_REGION: whatever
DISCOURSE_S3_ENDPOINT: http://s3-ap-southeast-1.qiniucs.com
DISCOURSE_S3_ACCESS_KEY_ID: *************
DISCOURSE_S3_SECRET_ACCESS_KEY: *****************
DISCOURSE_S3_CDN_URL: http://qiniu.pengfeima.cn
DISCOURSE_S3_BUCKET: qiniu-s3
DISCOURSE_S3_BACKUP_BUCKET: qiniu-s3/backups
DISCOURSE_BACKUP_LOCATION: s3
```
---
Indeed [https://img.i4ta.com/original/1X/5be788f6a5e3d0efa278e1e87b6c6ca6be2ce4cf.mp4](https://img.i4ta.com/original/1X/5be788f6a5e3d0efa278e1e87b6c6ca6be2ce4cf.mp4) gives that error. You’ll need to check somewhere that people know about your to configure i4ta. I’m pretty sure that it has to do whey the configuration there.
---
Yes, I installed it via docker-compose, and I have configured the AK and SK in the Discourse backend, and I can successfully upload files. The only issue is that I cannot view them. I have checked all possible configurations and haven’t found where to configure adding the token to the CDN link when accessing it. Since this storage is private, the token must be included. Are there any other places besides the configuration you mentioned above?
---
Here is my configuration, is it correct? Are there any other related configurations needed?
---
If your S3 bucket is private, you need to enable the Secure uploads option, otherwise Discourse will not attempt to sign attachment links.
After changing this setting, you must rebake the post for it to take effect.
> [@Secure Uploads](https://meta.discourse.org/t/secure-uploads/meta/140017):
>
> Added in the [Discourse 2.4 release](https://meta.discourse.org/t/discourse-version-2-4/108194) in February is the Secure Uploads feature, which provides a higher degree of security for ALL uploads (images, video, audio, text, pdfs, zips, and others) within a Discourse instance. Prerequisites You must have S3 uploads enabled on your site, which needs the following settings to be filled: S3 access key id S3 secret access key S3 region S3 upload bucket You also must be using an S3 bucket that does not have a Public bucket policy, and you need to make su…
---
> [@pangbo](#):
>
> Secure uploads
Thank you very much, it was indeed the effect of this setting, it has troubled me for a week, thank you very much for your help~
---