Chris LuandGitHub f5f1dcbd8c s3: keep verifying the request host when externalUrl is set (#10970) ...

* s3: keep verifying the request host when externalUrl is set

externalUrl was the only host candidate once set, so a client that dialed
the gateway directly instead of through the proxy always got
SignatureDoesNotMatch. Make it lead the candidate walk instead: every
candidate still needs a valid signature, and the request-derived hosts are
already trusted when the flag is unset, so a mixed proxy plus in-cluster
topology can now advertise a public endpoint and verify both planes.

* s3: cover virtual-hosted addressing behind externalUrl

The old pin also rejected an external client that signed
bucket.api.example.com, since only the bare externalUrl host was ever
tried. The candidate walk covers it; pin the case down.

2026-08-26 10:09:05 -07:00

..

scaffold

admin: accept a list of collections in the task collection filter (#10953)

2026-08-25 15:13:06 -07:00

admin.go

admin: show a copyable S3 object URL in the bucket file browser (#10933)

2026-08-24 19:29:01 -07:00

autocomplete.go

chore: execute goimports to format the code (#7983)

2026-01-07 13:06:08 -08:00

backends.go

storage: register tier backends at the binary composition root (#9989)

2026-06-16 11:47:32 -07:00

backup.go

fix(balance): don't move remote-tiered volumes; don't fatal on missing .idx (#9335)

2026-05-06 15:19:43 -07:00

benchmark.go

Add codespell support with configuration and typo fixes (#10393)

2026-07-22 14:38:06 -07:00

command.go

filer: add filer.meta.scan to audit one directory's change history (#10645)

2026-08-08 09:24:58 -07:00

compact.go

refactor(command): expand "~" in all path-style CLI flags (#9306)

2026-05-03 21:46:21 -07:00

download.go

refactor(command): expand "~" in all path-style CLI flags (#9306)

2026-05-03 21:46:21 -07:00

export.go

refactor(command): expand "~" in all path-style CLI flags (#9306)

2026-05-03 21:46:21 -07:00

filer_backup_offset_test.go

filer.backup, filer.sync: stop sharing resume checkpoints across destinations (#10934)

2026-08-24 19:30:20 -07:00

filer_backup_test.go

filer.backup, filer.sync: stop sharing resume checkpoints across destinations (#10934)

2026-08-24 19:30:20 -07:00

filer_backup.go

filer.backup, filer.sync: stop sharing resume checkpoints across destinations (#10934)

2026-08-24 19:30:20 -07:00

filer_cat.go

refactor(command): expand "~" in all path-style CLI flags (#9306)

2026-05-03 21:46:21 -07:00

filer_copy.go

refactor: centralize genUploadUrl in UploadOption (#10164)

2026-06-30 20:45:43 -07:00

filer_meta_backup.go

fix: handle meta backup offset errors safely (#9818)

2026-06-04 10:53:23 -07:00

filer_meta_scan_test.go

filer: add filer.meta.scan to audit one directory's change history (#10645)

2026-08-08 09:24:58 -07:00

filer_meta_scan.go

filer: add filer.meta.scan to audit one directory's change history (#10645)

2026-08-08 09:24:58 -07:00

filer_meta_tail_elastic.go

fix(filer.meta.tail): include extended metadata in Elasticsearch docs (#9200)

2026-04-23 11:54:08 -07:00

filer_meta_tail_non_elastic.go

fix(filer.meta.tail): fail fast when -es is used without elastic build tag (#9191)

2026-04-22 09:44:43 -07:00

filer_meta_tail.go

chore: execute goimports to format the code (#7983)

2026-01-07 13:06:08 -08:00

filer_remote_gateway_buckets.go

Adjust rename events metadata format (#8854)

2026-03-30 18:25:11 -07:00

filer_remote_gateway.go

Add codespell support with configuration and typo fixes (#10393)

2026-07-22 14:38:06 -07:00

filer_remote_sync_dir_test.go

fix(remote_gateway): prevent double-versioning when syncing to versioned central bucket (#8710)

2026-03-19 21:18:52 -07:00

filer_remote_sync_dir.go

mount: version open file handles by filer log position (#10403)

2026-07-23 17:44:02 -07:00

filer_remote_sync.go

chore: execute goimports to format the code (#7983)

2026-01-07 13:06:08 -08:00

filer_replication.go

Added loadSecurityConfigOnce (#5792)

2024-07-16 09:15:55 -07:00

filer_sync_jobs_test.go

filer sync: do not advance the sync offset past a failed event (#10424)

2026-07-24 10:32:14 -07:00

filer_sync_jobs.go

filer sync: do not advance the sync offset past a failed event (#10424)

2026-07-24 10:32:14 -07:00

filer_sync_offset_test.go

filer.backup, filer.sync: stop sharing resume checkpoints across destinations (#10934)

2026-08-24 19:30:20 -07:00

filer_sync_process_test.go

filer.backup, filer.sync: stop sharing resume checkpoints across destinations (#10934)

2026-08-24 19:30:20 -07:00

filer_sync_subscription_test.go

filer.sync: pipelined subscription with adaptive batching for faster catch-up (#8791)

2026-03-26 23:55:42 -07:00

filer_sync_verify_test.go

feat(filer.sync.verify): reclassify chunk-slice-order ETag diffs as CHUNK_REORDER (#10177)

2026-07-01 10:38:21 -07:00

filer_sync_verify.go

feat(filer.sync.verify): reclassify chunk-slice-order ETag diffs as CHUNK_REORDER (#10177)

2026-07-01 10:38:21 -07:00

filer_sync.go

filer.backup, filer.sync: stop sharing resume checkpoints across destinations (#10934)

2026-08-24 19:30:20 -07:00

filer.go

s3: keep verifying the request host when externalUrl is set (#10970)

2026-08-26 10:09:05 -07:00

fix_ecx_test.go

EC bitrot detection: per-shard checksum sidecars (#9761)

2026-05-31 18:52:44 -07:00

fix_test.go

fix(volume): stop flipping volumes read-only on a non-append-ordered .idx (#9726)

2026-05-28 18:04:31 -07:00

fix.go

EC decode: read shards with the encode-time block layout (#10385)

2026-07-21 08:59:14 -07:00

fuse_notsupported.go

go fix

2026-02-20 18:42:00 -08:00

fuse_std_test.go

fix(command): preserve fuse option after writers (#9972)

2026-06-15 13:11:35 -07:00

fuse_std.go

fix(command): preserve fuse option after writers (#9972)

2026-06-15 13:11:35 -07:00

fuse.go

Fix the issue where fuse command on a node cannot specify multiple configuration directory paths (#7874)

2025-12-25 11:36:38 -08:00

iam.go

Embed IAM API into S3 server (#7740)

2025-12-14 16:02:06 -08:00

imports.go

migrate IAM policies to multi-file storage (#8114)

2026-01-26 11:28:23 -08:00

maintenance_capabilities.go

Refactor plugin system and migrate worker runtime (#8369)

2026-02-18 13:42:41 -08:00

master_follower.go

fix: use consistent telemetryUrl default in master.follower (#7809)

2025-12-17 12:27:43 -08:00

master_test.go

master: align default volume size with EC rows (#10761)

2026-08-15 21:37:20 -07:00

master.go

master: never re-seed a raft cluster over committed state under -raftBootstrap (#10883)

2026-08-23 11:10:20 -07:00

metadata_event_scope_test.go

Adjust rename events metadata format (#8854)

2026-03-30 18:25:11 -07:00

metadata_event_scope.go

Adjust rename events metadata format (#8854)

2026-03-30 18:25:11 -07:00

mini_admin_auth_test.go

mini: resolve admin credentials from security.toml and env vars (#10021)

2026-06-19 13:04:04 -07:00

mini_bucket_test.go

mini: state the format of a -tableBucket, do not infer it (#10851)

2026-08-20 23:46:32 -07:00

mini_plugin_test.go

refactor(s3api): strip back-stamp from PutBucketLifecycleConfiguration (Phase 4) (#9367)

2026-05-08 11:03:03 -07:00

mini.go

s3: keep verifying the request host when externalUrl is set (#10970)

2026-08-26 10:09:05 -07:00

mount_common_test.go

mount: name the disk after the mounted path (#10958)

2026-08-25 22:56:33 -07:00

mount_common.go

mount: name the disk after the mounted path (#10958)

2026-08-25 22:56:33 -07:00

mount_darwin.go

Make weed-fuse compatible with systemd-based mount (#6814)

2026-03-18 12:18:40 -07:00

mount_freebsd.go

Make weed-fuse compatible with systemd-based mount (#6814)

2026-03-18 12:18:40 -07:00

mount_linux.go

Make weed-fuse compatible with systemd-based mount (#6814)

2026-03-18 12:18:40 -07:00

mount_notsupported.go

mount: support mounting on Windows through WinFsp (#10536)

2026-08-03 21:20:26 -07:00

mount_std_test.go

go fix

2026-02-20 18:42:00 -08:00

mount_std.go

mount: name the disk after the mounted path (#10958)

2026-08-25 22:56:33 -07:00

mount_windows.go

mount: name the disk after the mounted path (#10958)

2026-08-25 22:56:33 -07:00

mount.go

mount: name the disk after the mounted path (#10958)

2026-08-25 22:56:33 -07:00

mq_agent.go

fix(weed/command) address unhandled errors (#9208)

2026-04-23 22:15:05 -07:00

mq_broker.go

refactor(command): expand "~" in all path-style CLI flags (#9306)

2026-05-03 21:46:21 -07:00

mq_kafka_gateway.go

Add Kafka Gateway (#7231)

2025-10-13 18:05:17 -07:00

plugin_worker_test.go

refactor(worker): co-locate plugin handlers with their task packages (#9301)

2026-05-02 18:03:13 -07:00

s3_iceberg_endpoint_test.go

fix(iceberg): route catalog clients to the right bucket and vend S3 endpoint (#9109)

2026-04-16 15:51:43 -07:00

s3.go

s3: keep verifying the request host when externalUrl is set (#10970)

2026-08-26 10:09:05 -07:00

scaffold_test.go

…

scaffold.go

admin: configure maintenance tasks via admin.toml (#9926)

2026-06-11 11:04:52 -07:00

server.go

s3: keep verifying the request host when externalUrl is set (#10970)

2026-08-26 10:09:05 -07:00

sftp.go

ip.bind: bind outbound connections to the configured address (#9834)

2026-06-05 12:44:21 -07:00

shell.go

go fmt

2026-04-10 17:31:14 -07:00

update_full.go

go fix

2026-02-20 18:42:00 -08:00

update.go

refactor(command): expand "~" in all path-style CLI flags (#9306)

2026-05-03 21:46:21 -07:00

upload.go

Add codespell support with configuration and typo fixes (#10393)

2026-07-22 14:38:06 -07:00

version.go

Refine enterprise edition feature blurb in version output and docs

2026-05-30 09:29:06 -07:00

volume_test.go

move to https://github.com/seaweedfs/seaweedfs

2022-07-29 00:17:28 -07:00

volume.go

volume: remove ec.bitrotChecksum and ec.bitrotBlockSizeMB flags (#10000)

2026-06-17 00:07:38 -07:00

webdav.go

ip.bind: bind outbound connections to the configured address (#9834)

2026-06-05 12:44:21 -07:00

worker_runtime.go

plugin worker: support job type categories (all, default, heavy) (#8547)

2026-03-07 18:30:58 -08:00

worker_test.go

fix(s3tests): wire lifecycle worker for expiration suite (#9374)

2026-05-08 17:29:47 -07:00

worker.go

refactor(command): expand "~" in all path-style CLI flags (#9306)

2026-05-03 21:46:21 -07:00