Paperclip Extension that provides `cloudfront_signed_url` method. The extension supports all options and styles that can be passed to `url` method of paperclip.

cloudfront_signed_url_extension.rb

# frozen_string_literal: true

# lib/paperclip/cloudfront_signed_url_extension
module Paperclip
  module CloudfrontSignedUrlExtension
    include UriValidationHelper

    def cloudfront_signed_url(time = nil, style_name = default_style, options = {})
      return url(style_name, options) unless valid_url?(url(style_name))

      options_h =
        if time.present?
          { expires: Time.zone.now + time }
        else
          {}
        end

      options_h.merge(options)
      begin
        Aws::CF::Signer.sign_url(url(style_name), options_h)
      rescue => e
        Rails.logger.error("cloudfront_signed_url raised: #{e.message}")
        url(style_name)
      end
    end
  end
end

uri_validation_helper.rb

# frozen_string_literal: true

# lib/uri_validation_helper.rb
module UriValidationHelper
  def valid_url?(url)
    return false if url.blank?
    begin
      parsed_uri = URI.parse(url)
      parsed_uri.is_a?(URI::HTTP) || parsed_uri.is_a?(URI::HTTPS)
    rescue URI::Error
      return false
    end
  end

  def valid_cloudfront_url?(url)
    return false if url.blank?
    begin
      parsed_uri = URI.parse(url)
      (parsed_uri.is_a?(URI::HTTP) || parsed_uri.is_a?(URI::HTTPS)) && parsed_uri.host.include?('cloudfront.net')
    rescue URI::Error
      return false
    end
  end
end