EliChin/frostfs-api-go
1
0
Fork 0
forked from TrueCloudLab/frostfs-api-go
Code Issues Pull requests Projects Releases Packages Wiki Activity

[#199] sdk/client: Verify header signature in GetObjectHeader method

Browse source 
Signed-off-by: Leonard Lyubich <leonard@nspcc.ru>
This commit is contained in:
Leonard Lyubich 2020-11-16 17:33:04 +03:00 committed by Alex Vanin
parent c6884f9823
commit 3097059f85
1 changed files with 13 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
pkg/client/object.go
View file

@ -569,7 +569,19 @@ func (c *Client) getObjectHeaderV2(ctx context.Context, p *ObjectHeaderParams, o
return nil, errors.New("got nil instead of header with signature") return nil, errors.New("got nil instead of header with signature")
} }
hdr = hdrWithSig.GetHeader() hdr = hdrWithSig.GetHeader()
// todo: check signature there
if err := signer.VerifyDataWithSource(
signature.StableMarshalerWrapper{
SM: hdrWithSig.GetHeader(),
},
func() (key, sig []byte) {
s := hdrWithSig.GetSignature()
return s.GetKey(), s.GetSign()
},
); err != nil {
return nil, errors.Wrap(err, "incorrect object header signature")
}
default: default:
panic(fmt.Sprintf("unexpected Head object type %T", v)) panic(fmt.Sprintf("unexpected Head object type %T", v))
} }