The documentation for File.getSignedUrl https://cloud.google.com/nodejs/docs/reference/storage/2.5.x/File#getSignedUrl

incorrectly says contentType is optional. It is not, after an hour of debugging I realized from stackoverflow, that you must set the content type when making the url, or the upload fails with a 403 every time.