[#334] Add auth doc #336
No reviewers
alexvanin
TrueCloudLab/storage-services-developers
Labels
No Label
P0
P1
P2
P3
good first issue
Infrastructure
blocked
bug
config
discussion
documentation
duplicate
enhancement
go
help wanted
internal
invalid
kludge
observability
perfomance
question
refactoring
wontfix
No Milestone
No project
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: TrueCloudLab/frostfs-s3-gw#336
Loading…
Reference in New Issue
There is no content yet.
Delete Branch "dkirillov/frostfs-s3-gw:feature/334-add_auth_doc"
Deleting a branch is permanent. Although the deleted branch may exist for a short time before cleaning up, in most cases it CANNOT be undone. Continue?
close #334
f0a5358139to58326b540658326b5406to5f5eb72605@ -0,0 +267,4 @@* If no rules were matched return `deny` status.To local and contract policies `deny first` scheme is applied. This means that if several rules were matched forreqeust (with both statuses `allow` and `deny`) the resulting status be `deny`.Add a little more details about the way S3 Gateway creates request context to pass it to APE.
@ -0,0 +88,4 @@content to FrostFS S3 directly from the browser. For information about authenticating POST requests,see [Browser-Based Uploads Using POST (AWS Signature Version 4)](https://docs.aws.amazon.com/AmazonS3/latest/API/sigv4-UsingHTTPPOST.html).#### Introduction to Signing RequestsThis part is focused on the way how request is signed. It is useful for the client, but we want to emphasize here how Gateway validates this signature.
Can we be a bit more explicit down there and in
AccessBoxsection, how gateway uses accessbox fields to re-create signature from the request and compare it. Let's focus more on this process.@ -0,0 +119,4 @@##### Signature Calculations for the Authorization Headero calculate a signature, you first need a string to sign. You then calculate a HMAC-SHA256 hash of the string to sign byTo calculate...5f5eb72605to94bd1dfe28