mirror of
https://github.com/versity/versitygw.git
synced 2025-12-23 05:05:16 +00:00
9f54a25519
Fixes #1597 S3 returns a specific error when calling an object GET operation (e.g., `bucket/object/key?uploads`) with the `?uploads` query parameter. It’s not the standard `MethodNotAllowed` error. This PR adds support for handling this specific error route.
1333 lines
57 KiB
Go
1333 lines
57 KiB
Go
// Copyright 2023 Versity Software
|
|
// This file is licensed under the Apache License, Version 2.0
|
|
// (the "License"); you may not use this file except in compliance
|
|
// with the License. You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing,
|
|
// software distributed under the License is distributed on an
|
|
// "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
|
// KIND, either express or implied. See the License for the
|
|
// specific language governing permissions and limitations
|
|
// under the License.
|
|
|
|
package s3api
|
|
|
|
import (
|
|
"github.com/gofiber/fiber/v2"
|
|
"github.com/versity/versitygw/auth"
|
|
"github.com/versity/versitygw/backend"
|
|
"github.com/versity/versitygw/metrics"
|
|
"github.com/versity/versitygw/s3api/controllers"
|
|
"github.com/versity/versitygw/s3api/middlewares"
|
|
"github.com/versity/versitygw/s3err"
|
|
"github.com/versity/versitygw/s3event"
|
|
"github.com/versity/versitygw/s3log"
|
|
)
|
|
|
|
type S3ApiRouter struct {
|
|
WithAdmSrv bool
|
|
}
|
|
|
|
func (sa *S3ApiRouter) Init(app *fiber.App, be backend.Backend, iam auth.IAMService, logger s3log.AuditLogger, aLogger s3log.AuditLogger, evs s3event.S3EventSender, mm metrics.Manager, readonly bool, region string, root middlewares.RootUserConfig) {
|
|
ctrl := controllers.New(be, iam, logger, evs, mm, readonly)
|
|
adminServices := &controllers.Services{
|
|
Logger: aLogger,
|
|
}
|
|
|
|
if sa.WithAdmSrv {
|
|
adminController := controllers.NewAdminController(iam, be, aLogger)
|
|
|
|
// CreateUser admin api
|
|
app.Patch("/create-user",
|
|
controllers.ProcessHandlers(adminController.CreateUser, metrics.ActionAdminCreateUser, adminServices,
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.IsAdmin(metrics.ActionAdminCreateUser),
|
|
))
|
|
|
|
// DeleteUsers admin api
|
|
app.Patch("/delete-user",
|
|
controllers.ProcessHandlers(adminController.DeleteUser, metrics.ActionAdminDeleteUser, adminServices,
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.IsAdmin(metrics.ActionAdminDeleteUser),
|
|
))
|
|
|
|
// UpdateUser admin api
|
|
app.Patch("/update-user",
|
|
controllers.ProcessHandlers(adminController.UpdateUser, metrics.ActionAdminUpdateUser, adminServices,
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.IsAdmin(metrics.ActionAdminUpdateUser),
|
|
))
|
|
|
|
// ListUsers admin api
|
|
app.Patch("/list-users",
|
|
controllers.ProcessHandlers(adminController.ListUsers, metrics.ActionAdminListUsers, adminServices,
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.IsAdmin(metrics.ActionAdminListUsers),
|
|
))
|
|
|
|
// ChangeBucketOwner admin api
|
|
app.Patch("/change-bucket-owner",
|
|
controllers.ProcessHandlers(adminController.ChangeBucketOwner, metrics.ActionAdminChangeBucketOwner, adminServices,
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.IsAdmin(metrics.ActionAdminChangeBucketOwner),
|
|
))
|
|
|
|
// ListBucketsAndOwners admin api
|
|
app.Patch("/list-buckets",
|
|
controllers.ProcessHandlers(adminController.ListBuckets, metrics.ActionAdminListBuckets, adminServices,
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.IsAdmin(metrics.ActionAdminListBuckets),
|
|
))
|
|
}
|
|
|
|
services := &controllers.Services{
|
|
Logger: logger,
|
|
EventSender: evs,
|
|
MetricsManager: mm,
|
|
}
|
|
|
|
// ListBuckets action
|
|
app.Get("/",
|
|
controllers.ProcessHandlers(
|
|
ctrl.ListBuckets,
|
|
metrics.ActionListAllMyBuckets,
|
|
services,
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionListAllMyBuckets, "", auth.PermissionRead, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
))
|
|
|
|
bucketRouter := app.Group("/:bucket")
|
|
objectRouter := app.Group("/:bucket/*")
|
|
|
|
// PUT bucket operations
|
|
bucketRouter.Put("",
|
|
middlewares.MatchQueryArgs("tagging"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.PutBucketTagging,
|
|
metrics.ActionPutBucketTagging,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutBucketTagging, auth.PutBucketTaggingAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.VerifyChecksums(false, true, true),
|
|
middlewares.ParseAcl(be),
|
|
middlewares.ApplyBucketCORS(be),
|
|
))
|
|
bucketRouter.Put("",
|
|
middlewares.MatchQueryArgs("ownershipControls"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.PutBucketOwnershipControls,
|
|
metrics.ActionPutBucketOwnershipControls,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutBucketOwnershipControls, auth.PutBucketOwnershipControlsAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.VerifyChecksums(false, true, false),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
bucketRouter.Put("",
|
|
middlewares.MatchQueryArgs("versioning"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.PutBucketVersioning,
|
|
metrics.ActionPutBucketVersioning,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutBucketVersioning, auth.PutBucketVersioningAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.VerifyChecksums(false, true, false),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
bucketRouter.Put("",
|
|
middlewares.MatchQueryArgs("object-lock"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.PutObjectLockConfiguration,
|
|
metrics.ActionPutObjectLockConfiguration,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutObjectLockConfiguration, auth.PutBucketObjectLockConfigurationAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.VerifyChecksums(false, true, true),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
bucketRouter.Put("",
|
|
middlewares.MatchQueryArgs("cors"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.PutBucketCors,
|
|
metrics.ActionPutBucketCors,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutBucketCors, auth.PutBucketCorsAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.VerifyChecksums(false, true, true),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
bucketRouter.Put("",
|
|
middlewares.MatchQueryArgs("policy"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.PutBucketPolicy,
|
|
metrics.ActionPutBucketPolicy,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutBucketPolicy, auth.PutBucketPolicyAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.VerifyChecksums(false, false, false),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
bucketRouter.Put("",
|
|
middlewares.MatchQueryArgs("acl"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.PutBucketAcl,
|
|
metrics.ActionPutBucketAcl,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutBucketAcl, auth.PutBucketAclAction, auth.PermissionWriteAcp, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.VerifyChecksums(false, false, false),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
bucketRouter.Put("",
|
|
middlewares.MatchQueryArgs("analytics"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrNotImplemented)),
|
|
metrics.ActionPutBucketAnalyticsConfiguration,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutBucketAnalyticsConfiguration, auth.PutAnalyticsConfigurationAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Put("",
|
|
middlewares.MatchQueryArgs("encryption"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrNotImplemented)),
|
|
metrics.ActionPutBucketEncryption,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutBucketEncryption, auth.PutEncryptionConfigurationAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Put("",
|
|
middlewares.MatchQueryArgs("intelligent-tiering"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrNotImplemented)),
|
|
metrics.ActionPutBucketIntelligentTieringConfiguration,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutBucketIntelligentTieringConfiguration, auth.PutIntelligentTieringConfigurationAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Put("",
|
|
middlewares.MatchQueryArgs("inventory"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrNotImplemented)),
|
|
metrics.ActionPutBucketInventoryConfiguration,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutBucketInventoryConfiguration, auth.PutInventoryConfigurationAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Put("",
|
|
middlewares.MatchQueryArgs("lifecycle"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrNotImplemented)),
|
|
metrics.ActionPutBucketLifecycleConfiguration,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutBucketLifecycleConfiguration, auth.PutLifecycleConfigurationAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Put("",
|
|
middlewares.MatchQueryArgs("logging"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrNotImplemented)),
|
|
metrics.ActionPutBucketLogging,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutBucketLogging, auth.PutBucketLoggingAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Put("",
|
|
middlewares.MatchQueryArgs("requestPayment"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrNotImplemented)),
|
|
metrics.ActionPutBucketRequestPayment,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutBucketRequestPayment, auth.PutBucketRequestPaymentAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Put("",
|
|
middlewares.MatchQueryArgs("metrics"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrNotImplemented)),
|
|
metrics.ActionPutBucketMetricsConfiguration,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutBucketMetricsConfiguration, auth.PutMetricsConfigurationAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Put("",
|
|
middlewares.MatchQueryArgs("replication"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrNotImplemented)),
|
|
metrics.ActionPutBucketReplication,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutBucketReplication, auth.PutReplicationConfigurationAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Put("",
|
|
middlewares.MatchQueryArgs("publicAccessBlock"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrNotImplemented)),
|
|
metrics.ActionPutPublicAccessBlock,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutPublicAccessBlock, auth.PutBucketPublicAccessBlockAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Put("",
|
|
middlewares.MatchQueryArgs("notification"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrNotImplemented)),
|
|
metrics.ActionPutBucketNotificationConfiguration,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutBucketNotificationConfiguration, auth.PutBucketNotificationAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Put("",
|
|
middlewares.MatchQueryArgs("accelerate"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrNotImplemented)),
|
|
metrics.ActionPutBucketAccelerateConfiguration,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutBucketAccelerateConfiguration, auth.PutAccelerateConfigurationAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Put("",
|
|
middlewares.MatchQueryArgs("website"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrNotImplemented)),
|
|
metrics.ActionPutBucketWebsite,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutBucketWebsite, auth.PutBucketWebsiteAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Put("",
|
|
controllers.ProcessHandlers(
|
|
ctrl.CreateBucket,
|
|
metrics.ActionCreateBucket,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionCreateBucket, auth.CreateBucketAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.VerifyChecksums(false, false, false),
|
|
middlewares.ApplyBucketCORS(be),
|
|
))
|
|
|
|
// HeadBucket action
|
|
bucketRouter.Head("",
|
|
controllers.ProcessHandlers(
|
|
ctrl.HeadBucket,
|
|
metrics.ActionHeadBucket,
|
|
services,
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionHeadBucket, auth.ListBucketAction, auth.PermissionRead, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, false),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
|
|
// DELETE bucket operations
|
|
bucketRouter.Delete("",
|
|
middlewares.MatchQueryArgs("tagging"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.DeleteBucketTagging,
|
|
metrics.ActionDeleteBucketTagging,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionDeleteBucketTagging, auth.PutBucketTaggingAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
bucketRouter.Delete("",
|
|
middlewares.MatchQueryArgs("ownershipControls"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.DeleteBucketOwnershipControls,
|
|
metrics.ActionDeleteBucketOwnershipControls,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionDeleteBucketOwnershipControls, auth.PutBucketOwnershipControlsAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
bucketRouter.Delete("",
|
|
middlewares.MatchQueryArgs("policy"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.DeleteBucketPolicy,
|
|
metrics.ActionDeleteBucketPolicy,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionDeleteBucketPolicy, auth.PutBucketPolicyAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
bucketRouter.Delete("",
|
|
middlewares.MatchQueryArgs("cors"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.DeleteBucketCors,
|
|
metrics.ActionDeleteBucketCors,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionDeleteBucketCors, auth.PutBucketCorsAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
bucketRouter.Delete("",
|
|
middlewares.MatchQueryArgs("analytics"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrNotImplemented)),
|
|
metrics.ActionDeleteBucketAnalyticsConfiguration,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionDeleteBucketAnalyticsConfiguration, auth.PutAnalyticsConfigurationAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Delete("",
|
|
middlewares.MatchQueryArgs("encryption"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrNotImplemented)),
|
|
metrics.ActionDeleteBucketEncryption,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionDeleteBucketEncryption, auth.PutEncryptionConfigurationAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Delete("",
|
|
middlewares.MatchQueryArgs("intelligent-tiering"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrNotImplemented)),
|
|
metrics.ActionDeleteBucketIntelligentTieringConfiguration,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionDeleteBucketIntelligentTieringConfiguration, auth.PutIntelligentTieringConfigurationAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Delete("",
|
|
middlewares.MatchQueryArgs("inventory"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrNotImplemented)),
|
|
metrics.ActionDeleteBucketInventoryConfiguration,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionDeleteBucketInventoryConfiguration, auth.PutInventoryConfigurationAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Delete("",
|
|
middlewares.MatchQueryArgs("lifecycle"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrNotImplemented)),
|
|
metrics.ActionDeleteBucketLifecycle,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionDeleteBucketLifecycle, auth.PutLifecycleConfigurationAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Delete("",
|
|
middlewares.MatchQueryArgs("metrics"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrNotImplemented)),
|
|
metrics.ActionDeleteBucketMetricsConfiguration,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionDeleteBucketMetricsConfiguration, auth.PutMetricsConfigurationAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Delete("",
|
|
middlewares.MatchQueryArgs("replication"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrNotImplemented)),
|
|
metrics.ActionDeleteBucketReplication,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionDeleteBucketReplication, auth.PutReplicationConfigurationAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Delete("",
|
|
middlewares.MatchQueryArgs("publicAccessBlock"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrNotImplemented)),
|
|
metrics.ActionDeletePublicAccessBlock,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionDeletePublicAccessBlock, auth.PutBucketPublicAccessBlockAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Delete("",
|
|
middlewares.MatchQueryArgs("website"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrNotImplemented)),
|
|
metrics.ActionDeleteBucketWebsite,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionDeleteBucketWebsite, auth.PutBucketWebsiteAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Delete("",
|
|
controllers.ProcessHandlers(
|
|
ctrl.DeleteBucket,
|
|
metrics.ActionDeleteBucket,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionDeleteBucket, auth.DeleteBucketAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
|
|
// GET bucket operations
|
|
bucketRouter.Get("",
|
|
middlewares.MatchQueryArgs("location"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.GetBucketLocation,
|
|
metrics.ActionGetBucketLocation,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketLocation, auth.GetBucketLocationAction, auth.PermissionRead, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Get("",
|
|
middlewares.MatchQueryArgs("tagging"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.GetBucketTagging,
|
|
metrics.ActionGetBucketTagging,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketTagging, auth.GetBucketTaggingAction, auth.PermissionRead, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
bucketRouter.Get("",
|
|
middlewares.MatchQueryArgs("ownershipControls"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.GetBucketOwnershipControls,
|
|
metrics.ActionGetBucketOwnershipControls,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketOwnershipControls, auth.GetBucketOwnershipControlsAction, auth.PermissionRead, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
bucketRouter.Get("",
|
|
middlewares.MatchQueryArgs("versioning"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.GetBucketVersioning,
|
|
metrics.ActionGetBucketVersioning,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketVersioning, auth.GetBucketVersioningAction, auth.PermissionRead, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
bucketRouter.Get("",
|
|
middlewares.MatchQueryArgs("policy"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.GetBucketPolicy,
|
|
metrics.ActionGetBucketPolicy,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketPolicy, auth.GetBucketPolicyAction, auth.PermissionRead, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
bucketRouter.Get("",
|
|
middlewares.MatchQueryArgs("cors"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.GetBucketCors,
|
|
metrics.ActionGetBucketCors,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketCors, auth.GetBucketCorsAction, auth.PermissionRead, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
bucketRouter.Get("",
|
|
middlewares.MatchQueryArgs("object-lock"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.GetObjectLockConfiguration,
|
|
metrics.ActionGetObjectLockConfiguration,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetObjectLockConfiguration, auth.GetBucketObjectLockConfigurationAction, auth.PermissionRead, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
bucketRouter.Get("",
|
|
middlewares.MatchQueryArgs("acl"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.GetBucketAcl,
|
|
metrics.ActionGetBucketAcl,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketAcl, auth.GetBucketAclAction, auth.PermissionReadAcp, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, false),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
bucketRouter.Get("",
|
|
middlewares.MatchQueryArgs("uploads"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.ListMultipartUploads,
|
|
metrics.ActionListMultipartUploads,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionListMultipartUploads, auth.ListBucketMultipartUploadsAction, auth.PermissionRead, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
bucketRouter.Get("",
|
|
middlewares.MatchQueryArgs("versions"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.ListObjectVersions,
|
|
metrics.ActionListObjectVersions,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionListObjectVersions, auth.ListBucketVersionsAction, auth.PermissionRead, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
bucketRouter.Get("",
|
|
middlewares.MatchQueryArgs("policyStatus"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.GetBucketPolicyStatus,
|
|
metrics.ActionGetBucketPolicyStatus,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketPolicyStatus, auth.GetBucketPolicyStatusAction, auth.PermissionRead, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
bucketRouter.Get("",
|
|
middlewares.MatchQueryArgs("analytics", "id"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrNotImplemented)),
|
|
metrics.ActionGetBucketAnalyticsConfiguration,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketAnalyticsConfiguration, auth.GetAnalyticsConfigurationAction, auth.PermissionRead, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Get("",
|
|
middlewares.MatchQueryArgs("analytics"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrNotImplemented)),
|
|
metrics.ActionListBucketAnalyticsConfigurations,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionListBucketAnalyticsConfigurations, auth.GetAnalyticsConfigurationAction, auth.PermissionRead, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Get("",
|
|
middlewares.MatchQueryArgs("encryption"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrNotImplemented)),
|
|
metrics.ActionGetBucketEncryption,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketEncryption, auth.GetEncryptionConfigurationAction, auth.PermissionRead, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Get("",
|
|
middlewares.MatchQueryArgs("intelligent-tiering", "id"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrNotImplemented)),
|
|
metrics.ActionGetBucketIntelligentTieringConfiguration,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketIntelligentTieringConfiguration, auth.GetIntelligentTieringConfigurationAction, auth.PermissionRead, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Get("",
|
|
middlewares.MatchQueryArgs("intelligent-tiering"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrNotImplemented)),
|
|
metrics.ActionListBucketIntelligentTieringConfigurations,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionListBucketIntelligentTieringConfigurations, auth.GetIntelligentTieringConfigurationAction, auth.PermissionRead, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Get("",
|
|
middlewares.MatchQueryArgs("inventory", "id"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrNotImplemented)),
|
|
metrics.ActionGetBucketInventoryConfiguration,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketInventoryConfiguration, auth.GetInventoryConfigurationAction, auth.PermissionRead, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Get("",
|
|
middlewares.MatchQueryArgs("inventory"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrNotImplemented)),
|
|
metrics.ActionListBucketInventoryConfigurations,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionListBucketInventoryConfigurations, auth.GetInventoryConfigurationAction, auth.PermissionRead, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Get("",
|
|
middlewares.MatchQueryArgs("lifecycle"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrNotImplemented)),
|
|
metrics.ActionGetBucketLifecycleConfiguration,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketLifecycleConfiguration, auth.GetLifecycleConfigurationAction, auth.PermissionRead, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Get("",
|
|
middlewares.MatchQueryArgs("logging"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrNotImplemented)),
|
|
metrics.ActionGetBucketLogging,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketLogging, auth.GetBucketLoggingAction, auth.PermissionRead, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Get("",
|
|
middlewares.MatchQueryArgs("requestPayment"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrNotImplemented)),
|
|
metrics.ActionGetBucketRequestPayment,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketRequestPayment, auth.GetBucketRequestPaymentAction, auth.PermissionRead, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Get("",
|
|
middlewares.MatchQueryArgs("metrics", "id"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrNotImplemented)),
|
|
metrics.ActionGetBucketMetricsConfiguration,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketMetricsConfiguration, auth.GetMetricsConfigurationAction, auth.PermissionRead, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Get("",
|
|
middlewares.MatchQueryArgs("metrics"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrNotImplemented)),
|
|
metrics.ActionListBucketMetricsConfigurations,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionListBucketMetricsConfigurations, auth.GetMetricsConfigurationAction, auth.PermissionRead, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Get("",
|
|
middlewares.MatchQueryArgs("replication"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrNotImplemented)),
|
|
metrics.ActionGetBucketReplication,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketReplication, auth.GetReplicationConfigurationAction, auth.PermissionRead, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Get("",
|
|
middlewares.MatchQueryArgs("publicAccessBlock"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrNotImplemented)),
|
|
metrics.ActionGetPublicAccessBlock,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetPublicAccessBlock, auth.GetBucketPublicAccessBlockAction, auth.PermissionRead, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Get("",
|
|
middlewares.MatchQueryArgs("notification"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrNotImplemented)),
|
|
metrics.ActionGetBucketNotificationConfiguration,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketNotificationConfiguration, auth.GetBucketNotificationAction, auth.PermissionRead, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Get("",
|
|
middlewares.MatchQueryArgs("accelerate"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrNotImplemented)),
|
|
metrics.ActionGetBucketAccelerateConfiguration,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketAccelerateConfiguration, auth.GetAccelerateConfigurationAction, auth.PermissionRead, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Get("",
|
|
middlewares.MatchQueryArgs("website"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrNotImplemented)),
|
|
metrics.ActionGetBucketWebsite,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetBucketWebsite, auth.GetBucketWebsiteAction, auth.PermissionRead, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ParseAcl(be),
|
|
),
|
|
)
|
|
bucketRouter.Get("",
|
|
middlewares.MatchQueryArgWithValue("list-type", "2"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.ListObjectsV2,
|
|
metrics.ActionListObjectsV2,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionListObjectsV2, auth.ListBucketAction, auth.PermissionRead, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
bucketRouter.Get("",
|
|
controllers.ProcessHandlers(
|
|
ctrl.ListObjects,
|
|
metrics.ActionListObjects,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionListObjects, auth.ListBucketAction, auth.PermissionRead, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
|
|
// DeleteObjects action
|
|
bucketRouter.Post("",
|
|
middlewares.MatchQueryArgs("delete"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.DeleteObjects,
|
|
metrics.ActionDeleteObjects,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionDeleteObjects, auth.DeleteObjectAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.VerifyChecksums(false, true, true),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
|
|
// HeadObject
|
|
objectRouter.Head("",
|
|
controllers.ProcessHandlers(
|
|
ctrl.HeadObject,
|
|
metrics.ActionHeadObject,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionHeadObject, auth.GetObjectAction, auth.PermissionRead, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, false),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
|
|
// GET object operations
|
|
|
|
// object operation with '?uploads' is rejected with a specific error
|
|
objectRouter.Get("",
|
|
middlewares.MatchQueryArgs("uploads"),
|
|
controllers.ProcessHandlers(ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrGetUploadsWithKey)), metrics.ActionUndetected, services),
|
|
)
|
|
|
|
objectRouter.Get("",
|
|
middlewares.MatchQueryArgs("tagging"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.GetObjectTagging,
|
|
metrics.ActionGetObjectTagging,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetObjectTagging, auth.GetObjectTaggingAction, auth.PermissionRead, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
objectRouter.Get("",
|
|
middlewares.MatchQueryArgs("retention"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.GetObjectRetention,
|
|
metrics.ActionGetObjectRetention,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetObjectRetention, auth.GetObjectRetentionAction, auth.PermissionRead, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
objectRouter.Get("",
|
|
middlewares.MatchQueryArgs("legal-hold"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.GetObjectLegalHold,
|
|
metrics.ActionGetObjectLegalHold,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetObjectLegalHold, auth.GetObjectLegalHoldAction, auth.PermissionRead, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
objectRouter.Get("",
|
|
middlewares.MatchQueryArgs("acl"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.GetObjectAcl,
|
|
metrics.ActionGetObjectAcl,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetObjectAcl, auth.GetObjectAclAction, auth.PermissionReadAcp, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
objectRouter.Get("",
|
|
middlewares.MatchQueryArgs("attributes"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.GetObjectAttributes,
|
|
metrics.ActionGetObjectAttributes,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetObjectAttributes, auth.GetObjectAttributesAction, auth.PermissionRead, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
objectRouter.Get("",
|
|
middlewares.MatchQueryArgs("uploadId"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.ListParts,
|
|
metrics.ActionListParts,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionListParts, auth.ListMultipartUploadPartsAction, auth.PermissionRead, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
objectRouter.Get("",
|
|
controllers.ProcessHandlers(
|
|
ctrl.GetObject,
|
|
metrics.ActionGetObject,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionGetObject, auth.GetObjectAction, auth.PermissionRead, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
|
|
// DELETE object operations
|
|
objectRouter.Delete("",
|
|
middlewares.MatchQueryArgs("tagging"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.DeleteObjectTagging,
|
|
metrics.ActionDeleteObjectTagging,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionDeleteObjectTagging, auth.DeleteObjectTaggingAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
objectRouter.Delete("",
|
|
middlewares.MatchQueryArgs("uploadId"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.AbortMultipartUpload,
|
|
metrics.ActionAbortMultipartUpload,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionAbortMultipartUpload, auth.AbortMultipartUploadAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
objectRouter.Delete("",
|
|
controllers.ProcessHandlers(
|
|
ctrl.DeleteObject,
|
|
metrics.ActionDeleteObject,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionDeleteObject, auth.DeleteObjectAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
|
|
objectRouter.Post("",
|
|
middlewares.MatchQueryArgs("restore"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.RestoreObject,
|
|
metrics.ActionRestoreObject,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionRestoreObject, auth.RestoreObjectAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.VerifyChecksums(false, false, false),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
objectRouter.Post("",
|
|
middlewares.MatchQueryArgs("select"),
|
|
middlewares.MatchQueryArgWithValue("select-type", "2"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.SelectObjectContent,
|
|
metrics.ActionSelectObjectContent,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionSelectObjectContent, auth.GetObjectAction, auth.PermissionRead, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.VerifyChecksums(false, false, false),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
objectRouter.Post("",
|
|
middlewares.MatchQueryArgs("uploadId"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.CompleteMultipartUpload,
|
|
metrics.ActionCompleteMultipartUpload,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionCompleteMultipartUpload, auth.PutObjectAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
objectRouter.Post("",
|
|
middlewares.MatchQueryArgs("uploads"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.CreateMultipartUpload,
|
|
metrics.ActionCreateMultipartUpload,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionCreateMultipartUpload, auth.PutObjectAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
|
|
// PUT object operations
|
|
objectRouter.Put("",
|
|
middlewares.MatchQueryArgs("tagging"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.PutObjectTagging,
|
|
metrics.ActionPutObjectTagging,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutObjectTagging, auth.PutObjectTaggingAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.VerifyChecksums(false, true, true),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
objectRouter.Put("",
|
|
middlewares.MatchQueryArgs("retention"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.PutObjectRetention,
|
|
metrics.ActionPutObjectRetention,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutObjectRetention, auth.PutObjectRetentionAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.VerifyChecksums(false, false, true),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
objectRouter.Put("",
|
|
middlewares.MatchQueryArgs("legal-hold"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.PutObjectLegalHold,
|
|
metrics.ActionPutObjectLegalHold,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutObjectLegalHold, auth.PutObjectLegalHoldAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.VerifyChecksums(false, false, true),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
objectRouter.Put("",
|
|
middlewares.MatchQueryArgs("acl"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.PutObjectAcl,
|
|
metrics.ActionPutObjectAcl,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutObjectAcl, auth.PutObjectAclAction, auth.PermissionWriteAcp, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.VerifyChecksums(false, false, false),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
objectRouter.Put("",
|
|
middlewares.MatchQueryArgs("uploadId", "partNumber"),
|
|
middlewares.MatchHeader("X-Amz-Copy-Source"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.UploadPartCopy,
|
|
metrics.ActionUploadPartCopy,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionUploadPartCopy, auth.PutObjectAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
objectRouter.Put("",
|
|
middlewares.MatchQueryArgs("uploadId", "partNumber"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.UploadPart,
|
|
metrics.ActionUploadPart,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionUploadPart, auth.PutObjectAction, auth.PermissionWrite, region, true),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, true),
|
|
middlewares.VerifyV4Signature(root, iam, region, true, true),
|
|
middlewares.VerifyChecksums(true, false, false),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
|
|
// return error if partNumber is used without uploadId
|
|
objectRouter.Put("",
|
|
middlewares.MatchQueryArgs("partNumber"),
|
|
controllers.ProcessHandlers(ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrMissingUploadId)), metrics.ActionUndetected, services))
|
|
|
|
// return 'MethodNotAllowed' if uploadId is provided without partNumber
|
|
// before the router reaches to 'PutObject'
|
|
objectRouter.Put("",
|
|
middlewares.MatchQueryArgs("uploadId"),
|
|
controllers.ProcessHandlers(ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrMethodNotAllowed)), metrics.ActionUndetected, services))
|
|
|
|
objectRouter.Put("",
|
|
middlewares.MatchHeader("X-Amz-Copy-Source"),
|
|
controllers.ProcessHandlers(
|
|
ctrl.CopyObject,
|
|
metrics.ActionCopyObject,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionCopyObject, auth.PutObjectAction, auth.PermissionWrite, region, false),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, false),
|
|
middlewares.VerifyV4Signature(root, iam, region, false, true),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
objectRouter.Put("",
|
|
controllers.ProcessHandlers(
|
|
ctrl.PutObject,
|
|
metrics.ActionPutObject,
|
|
services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.AuthorizePublicBucketAccess(be, metrics.ActionPutObject, auth.PutObjectAction, auth.PermissionWrite, region, true),
|
|
middlewares.VerifyPresignedV4Signature(root, iam, region, true),
|
|
middlewares.VerifyV4Signature(root, iam, region, true, true),
|
|
middlewares.VerifyChecksums(true, false, false),
|
|
middlewares.ApplyBucketCORS(be),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
|
|
app.Options("/:bucket/*", controllers.ProcessHandlers(ctrl.CORSOptions, metrics.ActionOptions, services,
|
|
middlewares.BucketObjectNameValidator(),
|
|
middlewares.ParseAcl(be),
|
|
))
|
|
|
|
// Return MethodNotAllowed for all the unmatched routes
|
|
app.All("*", controllers.ProcessHandlers(ctrl.HandleErrorRoute(s3err.GetAPIError(s3err.ErrMethodNotAllowed)), metrics.ActionUndetected, services))
|
|
}
|