fix: force file urls to https

server/media/oss/oss.go

@@ -254,7 +254,7 @@ func (oh *ossHandler) Headers(tenantID types.TenantID, method string, url *url.U
 
 	if redirURL != "" {
 		return http.Header{
-			"Location":      {redirURL},
+			"Location":      {normalizeSignedRedirectURL(redirURL)},
 			"ETag":          {`"` + fdef.ETag + `"`},
 			"Content-Type":  {"application/json; charset=utf-8"},
 			"Cache-Control": {oh.conf.CacheControl},
@@ -263,6 +263,15 @@ func (oh *ossHandler) Headers(tenantID types.TenantID, method string, url *url.U
 	return nil, 0, nil
 }
 
+func normalizeSignedRedirectURL(rawURL string) string {
+	parsed, err := url.Parse(strings.TrimSpace(rawURL))
+	if err != nil || parsed.Scheme != "http" || parsed.Host == "" {
+		return rawURL
+	}
+	parsed.Scheme = "https"
+	return parsed.String()
+}
+
 // Upload processes request for a file upload.
 func (oh *ossHandler) Upload(fdef *types.FileDef, file io.Reader) (string, int64, error) {
 	key, err := tenantObjectKey(fdef.TenantID, fdef.Uid().String32(), fdef.CreatedAt)

server/media/oss/oss_tenant_test.go

@@ -58,6 +58,17 @@ func TestIsOSSObjectNotFound(t *testing.T) {
 	}
 }
 
+func TestNormalizeSignedRedirectURL(t *testing.T) {
+	rawURL := "http://im-oss-t1.oss-cn-shenzhen.aliyuncs.com/tenants/1/avatar.jpg?Expires=1&OSSAccessKeyId=ak&Signature=sig"
+	want := "https://im-oss-t1.oss-cn-shenzhen.aliyuncs.com/tenants/1/avatar.jpg?Expires=1&OSSAccessKeyId=ak&Signature=sig"
+	if got := normalizeSignedRedirectURL(rawURL); got != want {
+		t.Fatalf("normalizeSignedRedirectURL()=%q, want %q", got, want)
+	}
+	if got := normalizeSignedRedirectURL("/v0/file/s/avatar.jpg"); got != "/v0/file/s/avatar.jpg" {
+		t.Fatalf("relative URL must be unchanged, got %q", got)
+	}
+}
+
 func TestLoadSysConfig(t *testing.T) {
 	original := store.ThirdPartyConfig
 	store.ThirdPartyConfig = fakeThirdPartyConfig{