From d9eb9629698d54507da1e3bc003069f6548da0c7 Mon Sep 17 00:00:00 2001 From: Harshavardhana Date: Tue, 14 Sep 2021 13:55:24 -0700 Subject: [PATCH] allow admin API to support UNSIGNED-PAYLOAD (#13207) admin API requests do not support x-amz-content-sha256 set with UNSIGNED-PAYLOAD, keep this consistent and support it properly. --- cmd/auth-handler.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cmd/auth-handler.go b/cmd/auth-handler.go index 21b464839..26052c2c2 100644 --- a/cmd/auth-handler.go +++ b/cmd/auth-handler.go @@ -138,7 +138,7 @@ func validateAdminSignature(ctx context.Context, r *http.Request, region string) var owner bool s3Err := ErrAccessDenied if _, ok := r.Header[xhttp.AmzContentSha256]; ok && - getRequestAuthType(r) == authTypeSigned && !skipContentSha256Cksum(r) { + getRequestAuthType(r) == authTypeSigned { // We only support admin credentials to access admin APIs. cred, owner, s3Err = getReqAccessKeyV4(r, region, serviceS3) if s3Err != ErrNone {