fyrchik/frostfs-s3-gw
1
0
Fork 0
forked from TrueCloudLab/frostfs-s3-gw
Code Issues Pull requests 2 Projects Releases Packages Wiki Activity

Get back checking severe auth errors

Browse source
This commit is contained in:
Pavel Korotkov 2020-07-21 13:07:09 +03:00
parent 24b19152c4
commit c6b6076544
1 changed files with 2 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
auth/center.go
View file

@ -153,9 +153,7 @@ func (center *Center) AuthenticationPassed(request *http.Request) (*service.Bear
accessKeyID := sms1["access_key_id"] accessKeyID := sms1["access_key_id"]
bearerToken, secretAccessKey, err := center.unpackBearerToken(accessKeyID) bearerToken, secretAccessKey, err := center.unpackBearerToken(accessKeyID)
if err != nil { if err != nil {
// FIXME: Should be `return nil, errors.Wrap(err, "failed to unpack bearer token")` return nil, errors.Wrap(err, "failed to unpack bearer token")
center.log.Warn("Failed to unpack bearer token", zap.Error(err))
return nil, nil
} }
otherRequest := request.Clone(context.TODO()) otherRequest := request.Clone(context.TODO())
otherRequest.Header = map[string][]string{} otherRequest.Header = map[string][]string{}
@ -178,9 +176,7 @@ func (center *Center) AuthenticationPassed(request *http.Request) (*service.Bear
} }
sms2 := center.submatcher.getSubmatches(otherRequest.Header.Get("Authorization")) sms2 := center.submatcher.getSubmatches(otherRequest.Header.Get("Authorization"))
if sms1["v4_signature"] != sms2["v4_signature"] { if sms1["v4_signature"] != sms2["v4_signature"] {
// FIXME: Should be `return nil, errors.Wrap(err, "failed to pass authentication procedure")` return nil, errors.Wrap(err, "failed to pass authentication procedure")
center.log.Warn("Failed to pass authentication procedure")
return nil, nil
} }
return bearerToken, nil return bearerToken, nil
} }