|
|
|
|
@@ -30,8 +30,8 @@ type S3ApiRouter struct {
|
|
|
|
|
WithAdmSrv bool
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMService, logger s3log.AuditLogger, aLogger s3log.AuditLogger, evs s3event.S3EventSender, mm metrics.Manager, debug bool, readonly bool, region string, root middlewares.RootUserConfig) {
|
|
|
|
|
ctrl := controllers.New(be, iam, logger, evs, mm, debug, readonly)
|
|
|
|
|
func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMService, logger s3log.AuditLogger, aLogger s3log.AuditLogger, evs s3event.S3EventSender, mm metrics.Manager, readonly bool, region string, root middlewares.RootUserConfig) {
|
|
|
|
|
ctrl := controllers.New(be, iam, logger, evs, mm, readonly)
|
|
|
|
|
adminServices := &controllers.Services{
|
|
|
|
|
Logger: aLogger,
|
|
|
|
|
}
|
|
|
|
|
@@ -42,42 +42,42 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
// CreateUser admin api
|
|
|
|
|
app.Patch("/create-user",
|
|
|
|
|
controllers.ProcessHandlers(adminController.CreateUser, metrics.ActionAdminCreateUser, adminServices,
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.IsAdmin(metrics.ActionAdminCreateUser),
|
|
|
|
|
))
|
|
|
|
|
|
|
|
|
|
// DeleteUsers admin api
|
|
|
|
|
app.Patch("/delete-user",
|
|
|
|
|
controllers.ProcessHandlers(adminController.DeleteUser, metrics.ActionAdminDeleteUser, adminServices,
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.IsAdmin(metrics.ActionAdminDeleteUser),
|
|
|
|
|
))
|
|
|
|
|
|
|
|
|
|
// UpdateUser admin api
|
|
|
|
|
app.Patch("/update-user",
|
|
|
|
|
controllers.ProcessHandlers(adminController.UpdateUser, metrics.ActionAdminUpdateUser, adminServices,
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.IsAdmin(metrics.ActionAdminUpdateUser),
|
|
|
|
|
))
|
|
|
|
|
|
|
|
|
|
// ListUsers admin api
|
|
|
|
|
app.Patch("/list-users",
|
|
|
|
|
controllers.ProcessHandlers(adminController.ListUsers, metrics.ActionAdminListUsers, adminServices,
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.IsAdmin(metrics.ActionAdminListUsers),
|
|
|
|
|
))
|
|
|
|
|
|
|
|
|
|
// ChangeBucketOwner admin api
|
|
|
|
|
app.Patch("/change-bucket-owner",
|
|
|
|
|
controllers.ProcessHandlers(adminController.ChangeBucketOwner, metrics.ActionAdminChangeBucketOwner, adminServices,
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.IsAdmin(metrics.ActionAdminChangeBucketOwner),
|
|
|
|
|
))
|
|
|
|
|
|
|
|
|
|
// ListBucketsAndOwners admin api
|
|
|
|
|
app.Patch("/list-buckets",
|
|
|
|
|
controllers.ProcessHandlers(adminController.ListBuckets, metrics.ActionAdminListBuckets, adminServices,
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.IsAdmin(metrics.ActionAdminListBuckets),
|
|
|
|
|
))
|
|
|
|
|
}
|
|
|
|
|
@@ -95,8 +95,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
metrics.ActionListAllMyBuckets,
|
|
|
|
|
services,
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionListAllMyBuckets, "", auth.PermissionRead),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
))
|
|
|
|
|
|
|
|
|
|
@@ -112,8 +112,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutBucketTagging, auth.PutBucketTaggingAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
@@ -126,8 +126,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutBucketOwnershipControls, auth.PutBucketOwnershipControlsAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -140,8 +140,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutBucketVersioning, auth.PutBucketVersioningAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -154,8 +154,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutObjectLockConfiguration, auth.PutBucketObjectLockConfigurationAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -168,8 +168,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutBucketCors, auth.PutBucketCorsAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -182,8 +182,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutBucketPolicy, auth.PutBucketPolicyAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -196,8 +196,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutBucketAcl, auth.PutBucketAclAction, auth.PermissionWriteAcp),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -210,8 +210,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutBucketAnalyticsConfiguration, auth.PutAnalyticsConfigurationAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
),
|
|
|
|
|
@@ -224,8 +224,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutBucketEncryption, auth.PutEncryptionConfigurationAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
),
|
|
|
|
|
@@ -238,8 +238,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutBucketIntelligentTieringConfiguration, auth.PutIntelligentTieringConfigurationAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
),
|
|
|
|
|
@@ -252,8 +252,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutBucketInventoryConfiguration, auth.PutInventoryConfigurationAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
),
|
|
|
|
|
@@ -266,8 +266,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutBucketLifecycleConfiguration, auth.PutLifecycleConfigurationAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
),
|
|
|
|
|
@@ -280,8 +280,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutBucketLogging, auth.PutBucketLoggingAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
),
|
|
|
|
|
@@ -294,8 +294,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutBucketRequestPayment, auth.PutBucketRequestPaymentAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
),
|
|
|
|
|
@@ -308,8 +308,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutBucketMetricsConfiguration, auth.PutMetricsConfigurationAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
),
|
|
|
|
|
@@ -322,8 +322,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutBucketReplication, auth.PutReplicationConfigurationAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
),
|
|
|
|
|
@@ -336,8 +336,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutPublicAccessBlock, auth.PutBucketPublicAccessBlockAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
),
|
|
|
|
|
@@ -350,8 +350,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutBucketNotificationConfiguration, auth.PutBucketNotificationAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
),
|
|
|
|
|
@@ -364,8 +364,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutBucketAccelerateConfiguration, auth.PutAccelerateConfigurationAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
),
|
|
|
|
|
@@ -378,8 +378,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutBucketWebsite, auth.PutBucketWebsiteAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
),
|
|
|
|
|
@@ -391,8 +391,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionCreateBucket, auth.CreateBucketAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
))
|
|
|
|
|
@@ -406,8 +406,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionHeadBucket, auth.ListBucketAction, auth.PermissionRead),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -422,8 +422,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionDeleteBucketTagging, auth.PutBucketTaggingAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -436,8 +436,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionDeleteBucketOwnershipControls, auth.PutBucketOwnershipControlsAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -450,8 +450,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionDeleteBucketPolicy, auth.PutBucketPolicyAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -464,8 +464,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionDeleteBucketCors, auth.PutBucketCorsAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -478,8 +478,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionDeleteBucketAnalyticsConfiguration, auth.PutAnalyticsConfigurationAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
),
|
|
|
|
|
@@ -492,8 +492,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionDeleteBucketEncryption, auth.PutEncryptionConfigurationAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
),
|
|
|
|
|
@@ -506,8 +506,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionDeleteBucketIntelligentTieringConfiguration, auth.PutIntelligentTieringConfigurationAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
),
|
|
|
|
|
@@ -520,8 +520,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionDeleteBucketInventoryConfiguration, auth.PutInventoryConfigurationAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
),
|
|
|
|
|
@@ -534,8 +534,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionDeleteBucketLifecycle, auth.PutLifecycleConfigurationAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
),
|
|
|
|
|
@@ -548,8 +548,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionDeleteBucketMetricsConfiguration, auth.PutMetricsConfigurationAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
),
|
|
|
|
|
@@ -562,8 +562,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionDeleteBucketReplication, auth.PutReplicationConfigurationAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
),
|
|
|
|
|
@@ -576,8 +576,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionDeletePublicAccessBlock, auth.PutBucketPublicAccessBlockAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
),
|
|
|
|
|
@@ -590,8 +590,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionDeleteBucketWebsite, auth.PutBucketWebsiteAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
),
|
|
|
|
|
@@ -603,8 +603,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionDeleteBucket, auth.DeleteBucketAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -619,8 +619,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketLocation, auth.GetBucketLocationAction, auth.PermissionRead),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -634,8 +634,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketTagging, auth.GetBucketTaggingAction, auth.PermissionRead),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -648,8 +648,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketOwnershipControls, auth.GetBucketOwnershipControlsAction, auth.PermissionRead),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -662,8 +662,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketVersioning, auth.GetBucketVersioningAction, auth.PermissionRead),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -676,8 +676,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketPolicy, auth.GetBucketPolicyAction, auth.PermissionRead),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -690,8 +690,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketCors, auth.GetBucketCorsAction, auth.PermissionRead),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -704,8 +704,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetObjectLockConfiguration, auth.GetBucketObjectLockConfigurationAction, auth.PermissionRead),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -718,8 +718,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketAcl, auth.GetBucketAclAction, auth.PermissionReadAcp),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -732,8 +732,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionListMultipartUploads, auth.ListBucketMultipartUploadsAction, auth.PermissionRead),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -746,8 +746,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionListObjectVersions, auth.ListBucketVersionsAction, auth.PermissionRead),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -760,8 +760,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketPolicyStatus, auth.GetBucketPolicyStatusAction, auth.PermissionRead),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -774,8 +774,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketAnalyticsConfiguration, auth.GetAnalyticsConfigurationAction, auth.PermissionRead),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
),
|
|
|
|
|
@@ -788,8 +788,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionListBucketAnalyticsConfigurations, auth.GetAnalyticsConfigurationAction, auth.PermissionRead),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
),
|
|
|
|
|
@@ -802,8 +802,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketEncryption, auth.GetEncryptionConfigurationAction, auth.PermissionRead),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
),
|
|
|
|
|
@@ -816,8 +816,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketIntelligentTieringConfiguration, auth.GetIntelligentTieringConfigurationAction, auth.PermissionRead),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
),
|
|
|
|
|
@@ -830,8 +830,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionListBucketIntelligentTieringConfigurations, auth.GetIntelligentTieringConfigurationAction, auth.PermissionRead),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
),
|
|
|
|
|
@@ -844,8 +844,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketInventoryConfiguration, auth.GetInventoryConfigurationAction, auth.PermissionRead),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
),
|
|
|
|
|
@@ -858,8 +858,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionListBucketInventoryConfigurations, auth.GetInventoryConfigurationAction, auth.PermissionRead),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
),
|
|
|
|
|
@@ -872,8 +872,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketLifecycleConfiguration, auth.GetLifecycleConfigurationAction, auth.PermissionRead),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
),
|
|
|
|
|
@@ -886,8 +886,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketLogging, auth.GetBucketLoggingAction, auth.PermissionRead),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
),
|
|
|
|
|
@@ -900,8 +900,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketRequestPayment, auth.GetBucketRequestPaymentAction, auth.PermissionRead),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
),
|
|
|
|
|
@@ -914,8 +914,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketMetricsConfiguration, auth.GetMetricsConfigurationAction, auth.PermissionRead),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
),
|
|
|
|
|
@@ -928,8 +928,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionListBucketMetricsConfigurations, auth.GetMetricsConfigurationAction, auth.PermissionRead),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
),
|
|
|
|
|
@@ -942,8 +942,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketReplication, auth.GetReplicationConfigurationAction, auth.PermissionRead),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
),
|
|
|
|
|
@@ -956,8 +956,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetPublicAccessBlock, auth.GetBucketPublicAccessBlockAction, auth.PermissionRead),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
),
|
|
|
|
|
@@ -970,8 +970,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketNotificationConfiguration, auth.GetBucketNotificationAction, auth.PermissionRead),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
),
|
|
|
|
|
@@ -984,8 +984,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketAccelerateConfiguration, auth.GetAccelerateConfigurationAction, auth.PermissionRead),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
),
|
|
|
|
|
@@ -998,8 +998,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketWebsite, auth.GetBucketWebsiteAction, auth.PermissionRead),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
),
|
|
|
|
|
@@ -1012,8 +1012,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionListObjectsV2, auth.ListBucketAction, auth.PermissionRead),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -1025,8 +1025,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionListObjects, auth.ListBucketAction, auth.PermissionRead),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -1041,8 +1041,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionDeleteObjects, auth.DeleteObjectAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -1056,8 +1056,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionHeadObject, auth.GetObjectAction, auth.PermissionRead),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -1072,8 +1072,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetObjectTagging, auth.GetObjectTaggingAction, auth.PermissionRead),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -1086,8 +1086,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetObjectRetention, auth.GetObjectRetentionAction, auth.PermissionRead),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -1100,8 +1100,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetObjectLegalHold, auth.GetObjectLegalHoldAction, auth.PermissionRead),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -1114,8 +1114,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetObjectAcl, auth.GetObjectAclAction, auth.PermissionReadAcp),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -1128,8 +1128,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetObjectAttributes, auth.GetObjectAttributesAction, auth.PermissionRead),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -1142,8 +1142,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionListParts, auth.ListMultipartUploadPartsAction, auth.PermissionRead),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -1155,8 +1155,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetObject, auth.GetObjectAction, auth.PermissionRead),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -1171,8 +1171,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionDeleteObjectTagging, auth.DeleteObjectTaggingAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -1185,8 +1185,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionAbortMultipartUpload, auth.AbortMultipartUploadAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -1198,8 +1198,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionDeleteObject, auth.DeleteObjectAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -1213,8 +1213,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionRestoreObject, auth.RestoreObjectAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -1228,8 +1228,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionSelectObjectContent, auth.GetObjectAction, auth.PermissionRead),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -1242,8 +1242,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionCompleteMultipartUpload, auth.PutObjectAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -1256,8 +1256,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionCreateMultipartUpload, auth.PutObjectAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -1272,8 +1272,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutObjectTagging, auth.PutObjectTaggingAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -1286,8 +1286,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutObjectRetention, auth.PutObjectRetentionAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -1300,8 +1300,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutObjectLegalHold, auth.PutObjectLegalHoldAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -1314,8 +1314,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutObjectAcl, auth.PutObjectAclAction, auth.PermissionWriteAcp),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -1329,8 +1329,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionUploadPartCopy, auth.PutObjectAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -1343,8 +1343,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionUploadPart, auth.PutObjectAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -1369,8 +1369,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionCopyObject, auth.PutObjectAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
@@ -1382,8 +1382,8 @@ func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMServ
|
|
|
|
|
services,
|
|
|
|
|
middlewares.BucketObjectNameValidator(),
|
|
|
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutObject, auth.PutObjectAction, auth.PermissionWrite),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region, debug),
|
|
|
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyV4Signature(root, iam, region),
|
|
|
|
|
middlewares.VerifyMD5Body(),
|
|
|
|
|
middlewares.ApplyBucketCORS(be),
|
|
|
|
|
middlewares.ParseAcl(be),
|
|
|
|
|
|