52d8f564bf
sigv2: Unespace canonicalized resources values ( #4034 )
...
Values of canonicalized query resources should be unescaped before calculating
the signature. This bug is not noticed before because partNumber and uploadID
values in Minio doesn't have characters that need to be escaped.
7 years ago
1c97dcb10a
Add UTCNow() function. ( #3931 )
...
This patch adds UTCNow() function which returns current UTC time.
This is equivalent of UTCNow() == time.Now().UTC()
8 years ago
5f7565762e
api: postPolicy cleanup. Simplify the code and re-use. ( #3890 )
...
This change is cleanup of the postPolicyHandler code
primarily to address the flow and also converting
certain critical parts into self contained functions.
8 years ago
8489f22fe2
signature-v2: Use request.RequestURI for signature calculation. ( #3616 )
...
* signature-v2: Use request.RequestURI for signature calculation.
* Use splitStr instead of strings.Split
8 years ago
e1f64141a2
presign-v2: Compute signature on encoded URL path ( #3612 )
...
Encode the path of the passed presigned url before calculating the signature. This fixes
presigning objects whose names contain characters that are found encoded in urls.
8 years ago
95d9e47353
Presign V2: Unescape non-std queries in urls ( #3549 )
...
A client sends escaped characters in values of some query parameters in a presign url.
This commit properly unescapes queires to fix signature calculation.
8 years ago
e8ce3b64ed
Generate and use access/secret keys properly ( #3498 )
8 years ago
0db484c8f6
signv2: Do not use path encoding for query values. ( #3458 )
...
Use query unescape before comparing signature.
8 years ago
5c10f4adf0
presign v2: include resp headers in signature calc ( #3428 )
...
Include response headers when presigning an url using signature v2 algorithm
8 years ago
b8f0d9352f
signature-v2: encode path and query strings when calculating signature ( #3253 )
8 years ago
e51be73ac7
PresignedPost: Support for Signature V2 presigned POST Policy. ( #3043 )
...
fixes #2993
8 years ago
17e49a9ed2
signature-v2 fix. ( #2918 )
...
- Return errors similar to V4 Sign processsing.
- Return ErrMissing fields when Auth Header fields are missing.
- Return InvalidAccessID when accessID doesn't match.
* tests: Adding V2 signature tests for bucket handler API's.
8 years ago
95f544657a
Signature-V2: use raw resource/query from the request for signature calculation. ( #2833 )
8 years ago
6a9013b97c
misspell fixes. ( #2835 )
8 years ago
db3da97a50
signature/v2: Fix presigned requests.
8 years ago
5885ffc8ae
signature: Add legacy signature v2 support transparently. ( #2811 )
...
Add new tests as well.
8 years ago
Anis Elleuch