[Bug]: Agent images frequently broken when using S3 CDN

[rmichela]

What happened?

I'm using the S3 CDN. When I upload an agent image, the generated signed S3 URL is broken in some parts of the UI.

Version Information

0.8.0-RC4

Steps to Reproduce

Config.yaml

fileStrategy: "s3"

Env Vars

AWS_REGION=us-east-1
AWS_BUCKET_NAME=librechat-cdn-bucket

1. Upload an agent image
2. Wait a little while
3. Reload the page

Expected: Agent images render in the model dropdown and the model chat.
Actual: Agent images are broken due to expired signed S3 image hrefs. Manually refreshing the page a few times fixes the issue for a short while.

What browsers are you seeing the problem on?

Chrome

Relevant log output

Broken S3 link

https://librechat-cdn-bucket.s3.us-east-1.amazonaws.com/images/68ed5ea215f7372617bcdf60/agent-agent_V3h3M4ZXXhXogyMSht_f7-avatar-1760536776704.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Credential=[REDACTED]&X-Amz-Date=20251015T160408Z&X-Amz-Expires=120&X-Amz-Security-Token=[REDACTED]&X-Amz-Signature=fc873fe1137727886ca3ea62c19adc17c884bda5a14dbdb5ee1518723b0b7c5d&X-Amz-SignedHeaders=host&x-amz-checksum-mode=ENABLED&x-id=GetObject


S3 response for the broken bucket

<Error>
   <Code>AccessDenied</Code>
   <Message>Request has expired</Message>
   <X-Amz-Expires>120</X-Amz-Expires>
   <Expires>2025-10-15T16:06:08Z</Expires>
   <ServerTime>2025-10-16T13:35:45Z</ServerTime>
   <RequestId>N7BXY5XZE0J71FT3</RequestId>
   <HostId>fEoCX+uGa1KteWLfCJnWqXyQos+BJvXrZ9QJiU2UrTY5ryJ9oM7l6DKkGyAYNfICzFNUytLLyBE=.</HostId>
</Error>

Screenshots

Code of Conduct

• I agree to follow this project's Code of Conduct

[georgenmatthew]

We also experienced this and have reverted back to using local storage.

It seems that the presigned S3 URLs expire and LibreChat does not consistently update/regenerate them.

I found that sometimes by modifying and re-saving an agent that LibreChat would regenerate the presigned URL.

[rmichela]

What's interesting is that the agent image in the agent editor always renders correctly.

When I inspected the S3 URLs of the agent image in the editor, it is different than the broken image links. Librechat can create updated image hrefs in some places.

[rmichela]

Repeatedly refreshing the browser temporarily fixes the problem.

[aron-muon]

You could set the env variable S3_URL_EXPIRY_SECONDS: "604800" # 1 week (this is the max amount of time allowed for pre-signed URLs)

But agreed there is something fundamentally wrong with how image URLs are refreshed.

[georgenmatthew]

Hi @rubentalstra , I was wondering if you may have any input on how we may be able to resolve this?