|
|
|
@ -100,7 +100,7 @@ func (s3iam *S3IAMIntegration) AuthenticateJWT(ctx context.Context, r *http.Requ |
|
|
|
// Validate the JWT token directly using STS service (avoid circular dependency)
|
|
|
|
// Note: We don't call IsActionAllowed here because that would create a circular dependency
|
|
|
|
// Authentication should only validate the token, authorization happens later
|
|
|
|
sessionInfo, err := s3iam.stsService.ValidateSessionToken(ctx, sessionToken) |
|
|
|
_, err = s3iam.stsService.ValidateSessionToken(ctx, sessionToken) |
|
|
|
if err != nil { |
|
|
|
glog.V(3).Infof("STS session validation failed: %v", err) |
|
|
|
return nil, s3err.ErrAccessDenied |
|
|
|
|