Generates an AWS Signature Version 4 presigned GET URL for B2's S3-compatible API.
This helper signs internally and does not pass the B2 application key to
runtime peer dependencies. Response override options are signed into the URL
and control headers served from the storage origin; do not populate them from
untrusted input without an allow-list. Presign success does not prove the URL
will be accepted later; keep URL-generating hosts clock-synchronized and
check clock skew when downstream use returns SigV4 403 errors.
Generates an AWS Signature Version 4 presigned GET URL for B2's S3-compatible API.
This helper signs internally and does not pass the B2 application key to runtime peer dependencies. Response override options are signed into the URL and control headers served from the storage origin; do not populate them from untrusted input without an allow-list. Presign success does not prove the URL will be accepted later; keep URL-generating hosts clock-synchronized and check clock skew when downstream use returns SigV4 403 errors.