TrueCloudLab/frostfs-s3-gw
17
3
Fork 19
Code Issues 30 Pull requests 7 Projects Releases 18 Packages Activity Actions

Get back checking severe auth errors

Browse source
This commit is contained in:
Pavel Korotkov 2020-07-21 13:07:09 +03:00
parent 24b19152c4
commit c6b6076544
1 changed files with 2 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
auth/center.go
View file

@ -153,9 +153,7 @@ func (center *Center) AuthenticationPassed(request *http.Request) (*service.Bear
accessKeyID := sms1["access_key_id"]
bearerToken, secretAccessKey, err := center.unpackBearerToken(accessKeyID)
if err != nil {
// FIXME: Should be `return nil, errors.Wrap(err, "failed to unpack bearer token")`
center.log.Warn("Failed to unpack bearer token", zap.Error(err))
return nil, nil
return nil, errors.Wrap(err, "failed to unpack bearer token")
}
otherRequest := request.Clone(context.TODO())
otherRequest.Header = map[string][]string{}
@ -178,9 +176,7 @@ func (center *Center) AuthenticationPassed(request *http.Request) (*service.Bear
}
sms2 := center.submatcher.getSubmatches(otherRequest.Header.Get("Authorization"))
if sms1["v4_signature"] != sms2["v4_signature"] {
// FIXME: Should be `return nil, errors.Wrap(err, "failed to pass authentication procedure")`
center.log.Warn("Failed to pass authentication procedure")
return nil, nil
return nil, errors.Wrap(err, "failed to pass authentication procedure")
}
return bearerToken, nil
}