mirror of
https://github.com/versity/versitygw.git
synced 2026-09-26 01:44:49 +00:00
niksis02
ebdda06633
Closes #1525 * Adds validation for the `Content-MD5` header. * If the header value is invalid, the gateway now returns an `InvalidDigest` error. * If the value is valid but does not match the payload, it returns a `BadDigest` error. * Adds integration test cases for `PutBucketCors` with `Content-MD5`.
69 lines
1.6 KiB
Go
69 lines
1.6 KiB
Go
// Copyright 2023 Versity Software
|
|
// This file is licensed under the Apache License, Version 2.0
|
|
// (the "License"); you may not use this file except in compliance
|
|
// with the License. You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing,
|
|
// software distributed under the License is distributed on an
|
|
// "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
|
// KIND, either express or implied. See the License for the
|
|
// specific language governing permissions and limitations
|
|
// under the License.
|
|
|
|
package middlewares
|
|
|
|
import (
|
|
"crypto/md5"
|
|
"encoding/base64"
|
|
"io"
|
|
|
|
"github.com/gofiber/fiber/v2"
|
|
"github.com/versity/versitygw/s3api/utils"
|
|
"github.com/versity/versitygw/s3err"
|
|
)
|
|
|
|
func VerifyMD5Body(streamBody bool) fiber.Handler {
|
|
return func(ctx *fiber.Ctx) error {
|
|
incomingSum := ctx.Get("Content-Md5")
|
|
if incomingSum == "" {
|
|
return nil
|
|
}
|
|
|
|
if !isValidMD5(incomingSum) {
|
|
return s3err.GetAPIError(s3err.ErrInvalidDigest)
|
|
}
|
|
|
|
if streamBody {
|
|
var err error
|
|
wrapBodyReader(ctx, func(r io.Reader) io.Reader {
|
|
r, err = utils.NewHashReader(r, incomingSum, utils.HashTypeMd5)
|
|
return r
|
|
})
|
|
if err != nil {
|
|
return err
|
|
}
|
|
return nil
|
|
}
|
|
|
|
sum := md5.Sum(ctx.Body())
|
|
calculatedSum := utils.Base64SumString(sum[:])
|
|
|
|
if incomingSum != calculatedSum {
|
|
return s3err.GetAPIError(s3err.ErrBadDigest)
|
|
}
|
|
|
|
return nil
|
|
}
|
|
}
|
|
|
|
func isValidMD5(s string) bool {
|
|
decoded, err := base64.StdEncoding.DecodeString(s)
|
|
if err != nil {
|
|
return false
|
|
}
|
|
|
|
return len(decoded) == 16
|
|
}
|