aboutsummaryrefslogtreecommitdiff
path: root/weed/s3api/auth_credentials.go
AgeCommit message (Collapse)AuthorFilesLines
2025-07-16convert error fromating to %w everywhere (#6995)Chris Lu1-2/+2
2025-07-13Add policy engine (#6970)Chris Lu1-11/+2
2025-07-02Add credential storage (#6938)Chris Lu1-13/+49
* add credential store interface * load credential.toml * lint * create credentialManager with explicit store type * add type name * InitializeCredentialManager * remove unused functions * fix missing import * fix import * fix nil configuration
2025-02-07add s3 signature tests and prepare implementation of ↵Tom Crasset1-0/+7
STREAMING-UNSIGNED-PAYLOAD-TRAILER (#6525) * add tests for s3 signature * add test for newSignV4ChunkedReader.Read() * add glog import
2025-01-17fix S3 per-user-directory Policy (#6443)Tom Crasset1-1/+20
* fix S3 per-user-directory Policy * Delete docker/config.json * add tests * remove logs * undo modifications of weed/shell/command_volume_balance.go * remove modifications of docker-compose * fix failing test --------- Co-authored-by: Chris Lu <chrislusf@users.noreply.github.com>
2025-01-15Bugfix s3 audit missing requester for PUT requests (#6434)ftong20201-3/+1
fix s3 audit missing requster for PUT
2024-05-17added s3 iam DeleteBucket permission management (#5599)Riccardo Bertossa1-0/+4
2023-09-25[s3acl] Step1: move s3account.AccountManager into to iam.S3ApiConfiguration ↵Konstantin Lebedev1-19/+118
(#4859) * move s3account.AccountManager into to iam.S3ApiConfiguration and switch to Interface https://github.com/seaweedfs/seaweedfs/issues/4519 * fix: test bucket acl default and adjust the variable names * fix: s3 api config test --------- Co-authored-by: Konstantin Lebedev <9497591+kmlebedev@users.noreply.github.co> Co-authored-by: Chris Lu <chrislusf@users.noreply.github.com>
2023-09-21[s3] optimization iam lookup for reducing algorithm complexity (#4857)Konstantin Lebedev1-28/+21
optimization iam lookup for reducing algorithm complexity https://github.com/seaweedfs/seaweedfs/issues/4519 Co-authored-by: Konstantin Lebedev <9497591+kmlebedev@users.noreply.github.co>
2023-09-05Clean up old signature hash poolsPatrick Schmidt1-2/+4
2023-09-05Improve S3 request signing performancePatrick Schmidt1-1/+5
This change is caching HMAC hashers for repeated use in subsequent requests and chunks, so they don't have to be initialized from scratch every time. On my local computer this gives me ~5-6 times faster signature calculation and ~5-6.5% more throughput in S3 requests. The smaller the payload the better the throughput gets.
2023-01-20grpc connection to filer add sw-client-id headerchrislu1-1/+1
2022-10-10change s3_account.go package to avoid cycle dependency (#3813)LHHDZ1-7/+8
2022-10-01add ownership rest apis (#3765)LHHDZ1-1/+32
2022-09-14refactor: `Directory` readability (#3665)Ryan Russell1-1/+1
2022-07-29move to https://github.com/seaweedfs/seaweedfschrislu1-7/+7
2022-07-13supplement check duplicate accesskeyguosj1-0/+5
2022-06-13fix: When there is no access permission configured before startup, the ↵shichanglin51-5/+5
authentication does not take effect after configuring the permission after startup
2022-05-30move s3 related constants from package http to s3_constantschrislu1-16/+15
2022-05-29s3: keep auth enabled in case identities are set to emptychrislu1-5/+7
fix https://github.com/chrislusf/seaweedfs/issues/3084
2022-05-15s3: add grpc server to accept configuration changeschrislu1-3/+3
2022-01-12https://github.com/chrislusf/seaweedfs/issues/2583Konstantin Lebedev1-0/+4
2022-01-03fix auth permission checkingchrislu1-1/+1
2022-01-03wildcard prefix to restrict access to directories in s3 bucketchrislu1-7/+5
https://github.com/chrislusf/seaweedfs/discussions/2551
2021-12-26use streaming mode for long poll grpc callschrislu1-1/+1
streaming mode would create separate grpc connections for each call. this is to ensure the long poll connections are properly closed.
2021-12-10audit log SignatureVersionkmlebedev1-0/+23
2021-12-07audit logKonstantin Lebedev1-1/+1
2021-11-11force overwrite s3-is-adminKonstantin Lebedev1-0/+2
https://github.com/chrislusf/seaweedfs/issues/2433
2021-11-09s3: add RWMutex to iam, use RLock for concurrent readingBl1tz231-5/+7
2021-11-09s3: fix potencial iam identities data raceBl1tz231-1/+7
2021-11-07adjust logsChris Lu1-1/+1
2021-11-07log unknown access keyChris Lu1-0/+2
2021-10-31refactoringChris Lu1-1/+1
2021-10-14refactor: move from io/ioutil to io and os packageEng Zer Jun1-4/+5
The io/ioutil package has been deprecated as of Go 1.16, see https://golang.org/doc/go1.16#ioutil. This commit replaces the existing io/ioutil functions with their new definitions in io and os packages. Signed-off-by: Eng Zer Jun <engzerjun@gmail.com>
2021-10-11AclHandlersKonstantin Lebedev1-0/+25
2021-07-09s3 config read via grpcChris Lu1-2/+8
2021-07-03loggingChris Lu1-1/+1
2021-06-10refactorChris Lu1-1/+1
2021-06-10refactoringChris Lu1-1/+1
2021-04-27auth use bucket wild cardsKonstantin Lebedev1-9/+19
2020-12-27s3: fix regressionChris Lu1-1/+30
fix https://github.com/chrislusf/seaweedfs/issues/1707
2020-12-25s3: support config action Admin:bucketChris Lu1-10/+23
2020-12-22go fmtChris Lu1-1/+0
2020-12-10s3: use static configuration by defaultChris Lu1-4/+5
So that users can still use the previous configuration files. If leave it empty, s3 will try to use the version from filer
2020-12-10save /etc/iam/identity.json inside filer storeChris Lu1-14/+9
2020-12-07break import cycleChris Lu1-8/+0
2020-12-07s3: subscribe to s3.configure changesChris Lu1-8/+10
2020-12-06refactoringChris Lu1-15/+12
2020-11-26new pkg s3iamKonstantin Lebedev1-5/+28
2020-11-19Merge branch 'upstream_master' into store_s3credKonstantin Lebedev1-16/+30
# Conflicts: # weed/s3api/filer_util.go
generated by cgit v1.2.3 (git 2.25.1) at 2025-12-25 07:36:56 +0000