mirrors/seaweedfs
1
0
Fork 0
mirror of https://github.com/seaweedfs/seaweedfs.git synced 2026-09-21 07:24:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix variable scoping in verifyV4Signature for STS session token validation

Browse Source
This commit is contained in:
Chris Lu
2026-01-02 18:29:24 -08:00
parent 198ecdb141
commit 571338a474
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
weed/s3api/auth_signature_v4.go
+4 -1
View File
@@ -205,6 +205,8 @@ func (iam *IdentityAccessManagement) verifyV4Signature(r *http.Request, shouldCh
return nil, nil, "", nil, errCode
}
var cred *Credential
// 2. Check for STS session token
if sessionToken := r.Header.Get("X-Amz-Security-Token"); sessionToken != "" {
// Validate STS session token
@@ -214,7 +216,8 @@ func (iam *IdentityAccessManagement) verifyV4Signature(r *http.Request, shouldCh
}
} else {
// 3. Lookup user and credentials
identity, cred, found := iam.lookupByAccessKey(authInfo.AccessKey)
var found bool
identity, cred, found = iam.lookupByAccessKey(authInfo.AccessKey)
if !found {
// Log detailed error information for InvalidAccessKeyId
iam.m.RLock()