[BUG] Anonymous can't see images in Fedora that use Image Styles. about documentation

[ajstanley]

When testing this you'll need a fresh install. Anonymous viewers can already see the thumbnail images if anyone with fedoraAdmin in their roles has been there first.

[alxp]

There looks like there's a need for potentially a separate stream wrapper for image derivatives in Drupal core.

Apparently S3FS does a lot of acrobatics to avoid this issue by having PHP generate the image until it gets into the remote file system and then it is served from there.

Related Drupal.org issue:

https://www.drupal.org/project/drupal/issues/3354207#content

There's well-founded concerns about potential bandwidth waste if the same image is triggered to be generated on multiple edge servers.

The above issue has good discussion on the problem, but was closed as a duplicate of:

https://www.drupal.org/project/drupal/issues/2670404

This is an actively-developed feature currently against Drupal 11.x branch to add public-cache:// and private-cache:// stream wrappers for derivative files.

[rosiel]

Though the PR was merged, there are enough good ideas in here for better solving the problem that I propose leaving this ticket open as a potential improvement.