From ae74f4ae51e971777a52ea5468cc923ddf7ef404 Mon Sep 17 00:00:00 2001
From: fengmk2 <fengmk2@gmail.com>
Date: Wed, 9 Jul 2025 16:12:16 +0800
Subject: [PATCH] fix(server): should use signed url first (#13109)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

#### PR Dependency Tree


* **PR #13109** 👈

This tree was auto-generated by
[Charcoal](https://github.com/danerwilliams/charcoal)

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **Refactor**
* Updated internal handling of comment attachments to improve processing
logic. No visible changes to end-user features or workflows.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
---
 packages/backend/server/src/core/workspaces/controller.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/backend/server/src/core/workspaces/controller.ts b/packages/backend/server/src/core/workspaces/controller.ts
index 9c6c0a944b..51e2e18591 100644
--- a/packages/backend/server/src/core/workspaces/controller.ts
+++ b/packages/backend/server/src/core/workspaces/controller.ts
@@ -195,7 +195,7 @@ export class WorkspacesController {
     await this.ac.user(user.id).doc(workspaceId, docId).assert('Doc.Read');
 
     const { body, metadata, redirectUrl } =
-      await this.commentAttachmentStorage.get(workspaceId, docId, key);
+      await this.commentAttachmentStorage.get(workspaceId, docId, key, true);
 
     if (redirectUrl) {
       return res.redirect(redirectUrl);