diff options
| author | Henco Appel <hencoappel+github@gmail.com> | 2024-04-08 15:27:00 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2024-04-08 07:27:00 -0700 |
| commit | 5c8e6014baabe84cde25eea00ea75d0be5f0aa8f (patch) | |
| tree | 3904ad9e4d4cf2dd5b172d355a87f12d077cc087 /weed/server/filer_server.go | |
| parent | 9e07a87fcba5e6b0986cd2dad1fa3d644ff4edc7 (diff) | |
| download | seaweedfs-5c8e6014baabe84cde25eea00ea75d0be5f0aa8f.tar.xz seaweedfs-5c8e6014baabe84cde25eea00ea75d0be5f0aa8f.zip | |
fix: filer authenticate with with volume server (#5480)
Diffstat (limited to 'weed/server/filer_server.go')
| -rw-r--r-- | weed/server/filer_server.go | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/weed/server/filer_server.go b/weed/server/filer_server.go index 356761f30..9880afee0 100644 --- a/weed/server/filer_server.go +++ b/weed/server/filer_server.go @@ -91,6 +91,7 @@ type FilerServer struct { secret security.SigningKey filer *filer.Filer filerGuard *security.Guard + volumeGuard *security.Guard grpcDialOption grpc.DialOption // metrics read from the master @@ -113,6 +114,14 @@ func NewFilerServer(defaultMux, readonlyMux *http.ServeMux, option *FilerOption) v.SetDefault("jwt.filer_signing.read.expires_after_seconds", 60) readExpiresAfterSec := v.GetInt("jwt.filer_signing.read.expires_after_seconds") + volumeSigningKey := v.GetString("jwt.signing.key") + v.SetDefault("jwt.signing.expires_after_seconds", 10) + volumeExpiresAfterSec := v.GetInt("jwt.signing.expires_after_seconds") + + volumeReadSigningKey := v.GetString("jwt.signing.read.key") + v.SetDefault("jwt.signing.read.expires_after_seconds", 60) + volumeReadExpiresAfterSec := v.GetInt("jwt.signing.read.expires_after_seconds") + v.SetDefault("cors.allowed_origins.values", "*") allowedOrigins := v.GetString("cors.allowed_origins.values") @@ -145,6 +154,7 @@ func NewFilerServer(defaultMux, readonlyMux *http.ServeMux, option *FilerOption) fs.filer.Cipher = option.Cipher // we do not support IP whitelist right now fs.filerGuard = security.NewGuard([]string{}, signingKey, expiresAfterSec, readSigningKey, readExpiresAfterSec) + fs.volumeGuard = security.NewGuard([]string{}, volumeSigningKey, volumeExpiresAfterSec, volumeReadSigningKey, volumeReadExpiresAfterSec) fs.checkWithMaster() |