7d26c8838f 
								
									
								
							
								 
							
						 
						
							
							
								
								S3: auth supports X-Forwarded-Host and X-Forwarded-Port ( #7398 )  
							
							
 
							
							
							* add fix and tests
* address comments
* idiomatic
* ipv6 
							
						 
						2 days ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								824dcac3bf 
								
									
								
							
								 
							
						 
						
							
							
								
								s3: combine all signature verification checks into a single function ( #7330 )  
							
							
								
 
							
							
						 
						6 days ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								3d25f206c8 
								
									
								
							
								 
							
						 
						
							
							
								
								S3: Signature verification should not check permissions ( #7335 )  
							
							
 
							
							
							* Signature verification should not check permissions - that's done later in authRequest
* test permissions during signature verfication
* fix s3 test path
* s3tests_boto3 => s3tests
* remove extra lines 
							
						 
						2 weeks ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								db12fe4cd1 
								
									
								
							
								 
							
						 
						
							
							
								
								S3: fix signature ( #7268 )  
							
							
 
							
							
							fix signature
fix https://github.com/seaweedfs/seaweedfs/issues/7223  
							
						 
						1 month ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								07dc552e1c 
								
									
								
							
								 
							
						 
						
							
							
								
								master: Fix raft url ( #7255 )  
							
							
 
							
							
							* fix signature
* fix url scheme 
							
						 
						1 month ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								6bf5a6871c 
								
							
								 
							
						 
						
							
							
								
								fix presigned signature  
							
							
								
 
							
							
						 
						3 months ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								c6d9756933 
								
									
								
							
								 
							
						 
						
							
							
								
								fix signature hashing for iam ( #7100 )  
							
							
 
							
							
							* fix signature hashing for iam
* add tests
* address comments
* Update weed/s3api/auto_signature_v4_test.go
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
* indention
* fix test
---------
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com> 
							
						 
						3 months ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								72176601c1 
								
									
								
							
								 
							
						 
						
							
							
								
								S3: Fix iam payload hash ( #7081 )  
							
							
 
							
							
							* fix iam payload hash
* streaming hash
* Update weed/s3api/auto_signature_v4_test.go
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
* Update weed/s3api/auto_signature_v4_test.go
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
* address comments
---------
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com> 
							
						 
						3 months ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								3d4e8409a5 
								
									
								
							
								 
							
						 
						
							
							
								
								Support X-Forwarded-Port ( #7070 )  
							
							
 
							
							
							* support for the X-Forwarded-Prefix header
* remove comments
* refactoring
* refactoring
* path.Clean
* support X-Forwarded-Port
* Update weed/s3api/auth_signature_v4.go
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
* Update weed/s3api/auto_signature_v4_test.go
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
* more tests
---------
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com> 
							
						 
						3 months ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								f1eb4dd427 
								
									
								
							
								 
							
						 
						
							
							
								
								S3: support for the X-Forwarded-Prefix header ( #7068 )  
							
							
 
							
							
							* support for the X-Forwarded-Prefix header
* remove comments
* refactoring
* refactoring
* path.Clean 
							
						 
						3 months ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								74f4e9ba5a 
								
									
								
							
								 
							
						 
						
							
							
								
								rewrite, simplify, avoid unused functions ( #6989 )  
							
							
 
							
							
							* adding cors support
* address some comments
* optimize matchesWildcard
* address comments
* fix for tests
* address comments
* address comments
* address comments
* path building
* refactor
* Update weed/s3api/s3api_bucket_config.go
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
* address comment
Service-level responses need both Access-Control-Allow-Methods and Access-Control-Allow-Headers. After setting Access-Control-Allow-Origin and Access-Control-Expose-Headers, also set Access-Control-Allow-Methods: * and Access-Control-Allow-Headers: * so service endpoints satisfy CORS preflight requirements.
* Update weed/s3api/s3api_bucket_config.go
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
* Update weed/s3api/s3api_object_handlers.go
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
* Update weed/s3api/s3api_object_handlers.go
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
* fix
* refactor
* Update weed/s3api/s3api_bucket_config.go
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
* Update weed/s3api/s3api_object_handlers.go
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
* Update weed/s3api/s3api_server.go
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
* simplify
* add cors tests
* fix tests
* fix tests
* remove unused functions
* fix tests
* simplify
* address comments
* fix
* Update weed/s3api/auth_signature_v4.go
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
* Apply suggestion from @Copilot 
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
* rename variable
* Revert "Apply suggestion from @Copilot"
This reverts commit fce2d4e57e 
							
						 
						4 months ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								c04b7b411c 
								
									
								
							
								 
							
						 
						
							
							
								
								refactor: Performance and readability improvement on isDefaultPort ( #6960 )  
							
							
								
 
							
							
						 
						4 months ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								29d1701c34 
								
									
								
							
								 
							
						 
						
							
							
								
								Fix url scheme using for forwarded request with changed proto ( #6884 )  
							
							
								
 
							
							
						 
						5 months ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								396a602f86 
								
									
								
							
								 
							
						 
						
							
							
								
								* Fix s3 auth failed with X-Forwarded-Host and X-Forwarded-Port ( #6698 )  
							
							
								
 
							
							
						 
						7 months ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								be2b389b81 
								
									
								
							
								 
							
						 
						
							
							
								
								add more logging for s3 signature ( #6652 )  
							
							
								
 
							
							
						 
						7 months ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								db759a1ad1 
								
									
								
							
								 
							
						 
						
							
							
								
								Fix s3 auth failed with X-Forwarded-Host and X-Forwarded-Port ( #6650 )  
							
							
								
 
							
							
						 
						7 months ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								cb33ee006e 
								
							
								 
							
						 
						
							
							
								
								skip headers when signing a request  
							
							
 
							
							
							fix https://github.com/seaweedfs/seaweedfs/issues/6576#issuecomment-2724577279  
							
						 
						8 months ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								9ca2b0b763 
								
									
								
							
								 
							
						 
						
							
							
								
								omit http and https ports when using X-Forwarded-Port ( #6527 )  
							
							
								
 
							
							
						 
						9 months ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								a7b964af96 
								
									
								
							
								 
							
						 
						
							
							
								
								add s3 signature tests and prepare implementation of STREAMING-UNSIGNED-PAYLOAD-TRAILER ( #6525 )  
							
							
 
							
							
							* add tests for s3 signature
* add test for newSignV4ChunkedReader.Read()
* add glog import 
							
						 
						9 months ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								a250699225 
								
									
								
							
								 
							
						 
						
							
							
								
								use X-Forwarded-Host and X-Forwarded-Port to determine correct host for AWS signature ( #6514 )  
							
							
								
 
							
							
						 
						9 months ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								88fa64a01a 
								
									
								
							
								 
							
						 
						
							
							
								
								change comment for expect header ( #6289 )  
							
							
 
							
							
							* remove case of expect
* Set the default value of the Expect header for compatibility. 
							
						 
						11 months ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								1c2b10303a 
								
							
								 
							
						 
						
							
							
								
								remove X-Forwarded-For  
							
							
 
							
							
							fix https://github.com/seaweedfs/seaweedfs/issues/6136  
							
						 
						1 year ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								a3a8f6217e 
								
							
								 
							
						 
						
							
							
								
								fix  
							
							
								
 
							
							
						 
						1 year ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								5644bc8f01 
								
									
								
							
								 
							
						 
						
							
							
								
								s3api: Fix signature v4 with reverse proxy at sub-path ( #6092 )  
							
							
								
 
							
							
						 
						1 year ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								f747767aa1 
								
							
								 
							
						 
						
							
							
								
								support load balancer in front of s3  
							
							
								
 
							
							
						 
						1 year ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								9e07a87fcb 
								
									
								
							
								 
							
						 
						
							
							
								
								chore: fix function names in comment ( #5478 )  
							
							
								
 
							
							
						 
						2 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								98dcec0ee2 
								
							
								 
							
						 
						
							
							
								
								Clean up old signature hash pools  
							
							
								
 
							
							
						 
						2 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								cdd817edf9 
								
							
								 
							
						 
						
							
							
								
								Improve S3 request signing performance  
							
							
 
							
							
							This change is caching HMAC hashers for repeated use in subsequent
requests and chunks, so they don't have to be initialized from
scratch every time.
On my local computer this gives me ~5-6 times faster signature
calculation and ~5-6.5% more throughput in S3 requests. The smaller
the payload the better the throughput gets. 
							
						 
						3 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								6f7ef8711a 
								
									
								
							
								 
							
						 
						
							
							
								
								docs(s3api): readability improvements ( #3696 )  
							
							
 
							
							
							Signed-off-by: Ryan Russell <git@ryanrussell.org>
Signed-off-by: Ryan Russell <git@ryanrussell.org> 
							
						 
						3 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								21c0587900 
								
							
								 
							
						 
						
							
							
								
								go fmt  
							
							
								
 
							
							
						 
						3 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								26dbc6c905 
								
							
								 
							
						 
						
							
							
								
								move to  https://github.com/seaweedfs/seaweedfs  
							
							
								
 
							
							
						 
						3 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								a23bcbb7ec 
								
									
								
							
								 
							
						 
						
							
							
								
								refactor: move from io/ioutil to io and os package  
							
							
 
							
							
							The io/ioutil package has been deprecated as of Go 1.16, see
https://golang.org/doc/go1.16#ioutil . This commit replaces the existing
io/ioutil functions with their new definitions in io and os packages.
Signed-off-by: Eng Zer Jun <engzerjun@gmail.com> 
							
						 
						4 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								ba175f81b5 
								
							
								 
							
						 
						
							
							
								
								add auth aws signV4  
							
							
								
 
							
							
						 
						5 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								62563a895a 
								
							
								 
							
						 
						
							
							
								
								refactoring  
							
							
								
 
							
							
						 
						5 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								29abe980df 
								
							
								 
							
						 
						
							
							
								
								s3: add support for PostPolicy  
							
							
 
							
							
							fix https://github.com/chrislusf/seaweedfs/issues/1426  
							
						 
						5 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								5b40a2690a 
								
							
								 
							
						 
						
							
							
								
								refactoring  
							
							
								
 
							
							
						 
						5 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								ed0acd1722 
								
							
								 
							
						 
						
							
							
								
								go fmt  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								b4abe3c081 
								
							
								 
							
						 
						
							
							
								
								unused  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								f3ce3166ad 
								
							
								 
							
						 
						
							
							
								
								add streaming v4  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								9ed364f053 
								
							
								 
							
						 
						
							
							
								
								support acl  
							
							
								
 
							
							
						 
						6 years ago