From a9465ce778a7c19f88d8e87a1b0aed88e0f3ee90 Mon Sep 17 00:00:00 2001 From: Adam Daley Date: Tue, 10 Nov 2026 06:12:30 +0000 Subject: [PATCH 1/2] Bypass caches for authenticated B2 storage requests --- src/lib/adapters/b2/package-store.ts | 2 ++ test/services/extensions/v2/b2-store.node.test.ts | 1 + 2 files changed, 3 insertions(+) diff --git a/src/lib/adapters/b2/package-store.ts b/src/lib/adapters/b2/package-store.ts index 12e88c4f..eba8a97e 100644 --- a/src/lib/adapters/b2/package-store.ts +++ b/src/lib/adapters/b2/package-store.ts @@ -81,6 +81,8 @@ export function b2ObjectStore( { ...init, redirect: "manual", + // Read current origin state; public image caching belongs to the CDN. + cache: "no-store", signal: AbortSignal.timeout(15000) }, credentials diff --git a/test/services/extensions/v2/b2-store.node.test.ts b/test/services/extensions/v2/b2-store.node.test.ts index 90aedd2f..930df85a 100644 --- a/test/services/extensions/v2/b2-store.node.test.ts +++ b/test/services/extensions/v2/b2-store.node.test.ts @@ -98,6 +98,7 @@ describe("B2 object storage", () => { expect(request.headers.get("Authorization")).toContain( "AWS4-HMAC-SHA256" ); + expect(request.cache).toBe("no-store"); } expect(requests[0].headers.get("Content-Type")).toBe( format === "svg" ? "image/svg+xml" : `image/${format}` From d5fb5ed74a4745cf2e8b5bd696e6acd9991f7b94 Mon Sep 17 00:00:00 2001 From: Adam Daley Date: Tue, 10 Nov 2026 06:19:02 +0000 Subject: [PATCH 2/2] Check ZIP storage requests bypass caches --- test/services/extensions/v2/b2-store.node.test.ts | 1 + 1 file changed, 1 insertion(+) diff --git a/test/services/extensions/v2/b2-store.node.test.ts b/test/services/extensions/v2/b2-store.node.test.ts index 930df85a..3dafd7f7 100644 --- a/test/services/extensions/v2/b2-store.node.test.ts +++ b/test/services/extensions/v2/b2-store.node.test.ts @@ -52,6 +52,7 @@ describe("B2 object storage", () => { /^AWS4-HMAC-SHA256 / ); expect(request.redirect).toBe("manual"); + expect(request.cache).toBe("no-store"); } expect(requests[0].headers.get("Cache-Control")).toBe("private, no-store"); expect(requests[0].headers.get("x-amz-content-sha256")).toBe(checksum);