Chris Lu 249c29a470 fix(iam): resolve STS policy bypass for admin sessions ...

- Fixed IsActionAllowed in iam_manager.go to correctly identify and validate internal STS tokens, ensuring session policies are enforced.
- Refactored VerifyActionPermission in auth_credentials.go to properly handle session tokens and avoid legacy authorization short-circuits.
- Added debug logging for better tracing of policy evaluation and session validation.

2026-02-14 21:41:15 -08:00

..

admin

fix(iam): ensure access key status is persisted and defaulted to Active (#8341)

2026-02-13 20:28:41 -08:00

cluster

go fmt

2026-01-28 14:34:07 -08:00

command

Switch empty-folder cleanup to bucket policy (#8292)

2026-02-10 18:38:38 -08:00

credential

Fix: filer not yet available in s3.configure (#8198)

2026-02-03 17:43:58 -08:00

filer

Switch empty-folder cleanup to bucket policy (#8292)

2026-02-10 18:38:38 -08:00

filer_client

Clean up logs and deprecated functions (#7339)

2025-10-17 22:11:50 -07:00

glog

chore: execute goimports to format the code (#7983)

2026-01-07 13:06:08 -08:00

iam

fix(iam): resolve STS policy bypass for admin sessions

2026-02-14 21:41:15 -08:00

iamapi

Add UpdateAccessKey support to IAM API (#8342)

2026-02-13 21:11:07 -08:00

images

chore: execute goimports to format the code (#7983)

2026-01-07 13:06:08 -08:00

kms

S3 API: Add integration with KMS providers (#7152)

2025-08-22 22:10:30 -07:00

mount

FUSE mount: fix failed git clone (#8344)

2026-02-14 00:28:20 -08:00

mq

cast i to int64 first, ensuring the calculation happens in 64-bit space

2026-01-22 14:05:45 -08:00

notification

chore: execute goimports to format the code (#7983)

2026-01-07 13:06:08 -08:00

operation

Fix filer.sync retry on stale chunk (#8298)

2026-02-10 19:06:35 -08:00

pb

fix(iam): ensure access key status is persisted and defaulted to Active (#8341)

2026-02-13 20:28:41 -08:00

query

fix: comprehensive go vet error fixes and add CI enforcement (#7861)

2025-12-23 14:48:50 -08:00

remote_storage

Explicitly disable signing for public buckets. (#8263)

2026-02-09 11:28:07 -08:00

replication

filer.sync: support manifest chunks (#8299)

2026-02-10 20:18:35 -08:00

s3api

fix(iam): resolve STS policy bypass for admin sessions

2026-02-14 21:41:15 -08:00

security

feat: Optional path-prefix and method scoping for Filer HTTP JWT (#8014)

2026-01-12 13:21:48 -08:00

sequence

chore: execute goimports to format the code (#7983)

2026-01-07 13:06:08 -08:00

server

Implement full scrubbing for regular volumes (#8254)

2026-02-13 15:47:29 -08:00

sftpd

SFTP: support reloading user store on HUP signal (#7651)

2025-12-08 01:24:42 -08:00

shell

fix(iam): ensure access key status is persisted and defaulted to Active (#8341)

2026-02-13 20:28:41 -08:00

static

Fix Broken Links (#5287)

2024-02-14 08:26:38 -08:00

stats

chore: execute goimports to format the code (#7983)

2026-01-07 13:06:08 -08:00

storage

Implement full scrubbing for regular volumes (#8254)

2026-02-13 15:47:29 -08:00

telemetry

Prevent split-brain: Persistent ClusterID and Join Validation (#8022)

2026-01-18 14:02:34 -08:00

topology

Fix master leader election startup issue (#8340)

2026-02-13 15:39:39 -08:00

util

pb: fix IPv6 double brackets in ServerAddress formatting (#8329)

2026-02-12 18:11:03 -08:00

wdclient

Fix S3 Gateway Read Failover #8076 (#8087)

2026-01-22 14:07:24 -08:00

worker

logging and debugging

2026-02-04 12:44:52 -08:00

Makefile

Update README and weed/Makefile (#7571)

2025-11-29 11:36:22 -08:00

weed.go

Fix the issue where fuse command on a node cannot specify multiple configuration directory paths (#7874)

2025-12-25 11:36:38 -08:00