With new auth config changes, restructure the API code to use the new style

pkg/server/api/generic-handlers.go

@@ -142,11 +142,14 @@ func (h validateAuthHandler) ServeHTTP(w http.ResponseWriter, r *http.Request) {
 			return
 		}
 		// Access key not found
-		if _, ok := authConfig.Users[accessKeyID]; !ok {
+		for _, user := range authConfig.Users {
-			writeErrorResponse(w, r, InvalidAccessKeyID, acceptsContentType, r.URL.Path)
+			if user.AccessKeyID == accessKeyID {
+				h.handler.ServeHTTP(w, r)
 				return
 			}
-		h.handler.ServeHTTP(w, r)
+		}
+		writeErrorResponse(w, r, InvalidAccessKeyID, acceptsContentType, r.URL.Path)
+		return
 	default:
 		// control reaches here, we should just send the request up the stack - internally
 		// individual calls will validate themselves against un-authenticated requests

pkg/server/api/signature.go

@@ -79,14 +79,16 @@ func InitSignatureV4(req *http.Request) (*donut.Signature, *probe.Error) {
 	if err != nil {
 		return nil, err.Trace()
 	}
-	if _, ok := authConfig.Users[accessKeyID]; !ok {
+	for _, user := range authConfig.Users {
-		return nil, probe.NewError(errors.New("AccessID not found"))
+		if user.AccessKeyID == accessKeyID {
-	}
 			signature := &donut.Signature{
-		AccessKeyID:     authConfig.Users[accessKeyID].AccessKeyID,
+				AccessKeyID:     user.AccessKeyID,
-		SecretAccessKey: authConfig.Users[accessKeyID].SecretAccessKey,
+				SecretAccessKey: user.SecretAccessKey,
 				AuthHeader:      ah,
 				Request:         req,
 			}
 			return signature, nil
 		}
+	}
+	return nil, probe.NewError(errors.New("AccessID not found"))
+}