diff options
| author | Chris Lu <chrislusf@users.noreply.github.com> | 2022-01-02 01:07:30 -0800 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2022-01-02 01:07:30 -0800 |
| commit | 42c849e0df74610d38453db67670db715ceb80aa (patch) | |
| tree | 81912d857c0dcc0dba64661aa8f06ba81e68a40a /weed/s3api/s3api_server.go | |
| parent | 5c87fcc6d28b230154db35cbe7735a5f1b84024f (diff) | |
| parent | 9b941773805400c520558d83aed633adc821988c (diff) | |
| download | seaweedfs-42c849e0df74610d38453db67670db715ceb80aa.tar.xz seaweedfs-42c849e0df74610d38453db67670db715ceb80aa.zip | |
Merge branch 'master' into metadata_follow_with_client_id
Diffstat (limited to 'weed/s3api/s3api_server.go')
| -rw-r--r-- | weed/s3api/s3api_server.go | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/weed/s3api/s3api_server.go b/weed/s3api/s3api_server.go index af9cba260..c560fbea2 100644 --- a/weed/s3api/s3api_server.go +++ b/weed/s3api/s3api_server.go @@ -3,6 +3,7 @@ package s3api import ( "fmt" "github.com/chrislusf/seaweedfs/weed/pb" + "github.com/chrislusf/seaweedfs/weed/security" "github.com/chrislusf/seaweedfs/weed/util" "net/http" "strings" @@ -29,13 +30,24 @@ type S3ApiServer struct { option *S3ApiServerOption iam *IdentityAccessManagement randomClientId int32 + filerGuard *security.Guard } func NewS3ApiServer(router *mux.Router, option *S3ApiServerOption) (s3ApiServer *S3ApiServer, err error) { + v := util.GetViper() + signingKey := v.GetString("jwt.filer_signing.key") + v.SetDefault("jwt.filer_signing.expires_after_seconds", 10) + expiresAfterSec := v.GetInt("jwt.filer_signing.expires_after_seconds") + + readSigningKey := v.GetString("jwt.filer_signing.read.key") + v.SetDefault("jwt.filer_signing.read.expires_after_seconds", 60) + readExpiresAfterSec := v.GetInt("jwt.filer_signing.read.expires_after_seconds") + s3ApiServer = &S3ApiServer{ option: option, iam: NewIdentityAccessManagement(option), randomClientId: util.RandomInt32(), + filerGuard: security.NewGuard([]string{}, signingKey, expiresAfterSec, readSigningKey, readExpiresAfterSec), } s3ApiServer.registerRouter(router) |