[
https://issues.apache.org/jira/browse/HDDS-15739?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Huang Kuan Hao updated HDDS-15739:
----------------------------------
Summary: Fix ListObjectsV2 continuation-token: wrong XML element name and
empty-token handling (was: Reject requests with missing/empty Authorization
header)
> Fix ListObjectsV2 continuation-token: wrong XML element name and empty-token
> handling
> -------------------------------------------------------------------------------------
>
> Key: HDDS-15739
> URL: https://issues.apache.org/jira/browse/HDDS-15739
> Project: Apache Ozone
> Issue Type: Sub-task
> Reporter: Huang Kuan Hao
> Assignee: Huang Kuan Hao
> Priority: Major
>
> The S3 Gateway accepts PutObject / CreateBucket when the Authorization header
> is removed or empty, instead of rejecting with AccessDenied (403) /
> InvalidRequest (400). Fix in AuthorizationFilter to reject absent/empty
> credentials.
> Failing tests: test_bucket_create_bad_authorization_none,
> test_bucket_create_bad_authorization_empty,
> test_object_create_bad_authorization_none,
> test_object_create_bad_authorization_empty
> Ref: [https://ozone.s3.peterxcli.dev/]
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
