Commit Graph

312 Commits

Author SHA1 Message Date
slasher
5c7898354f style(all): format all codes with golangci tools
closes #3371

@formatter:off

Signed-off-by: slasher <shenjie1@oppo.com>
2024-05-14 09:54:13 +08:00
tangdeyi
6ad04f6365 fix(object): listobjectv2 IsTruncated required
Signed-off-by: tangdeyi <tangdeyi@oppo.com>
2024-03-22 11:02:51 +08:00
yhjiango
f7e7235694 fix(object): fix request parts check in complete multipart
Signed-off-by: yhjiango <jiangyunhua@oppo.com>
2024-03-13 15:54:54 +08:00
yhjiango
611ef3263e fix(object): fix tagging valid verification
Signed-off-by: yhjiango <jiangyunhua@oppo.com>
2024-03-13 15:54:54 +08:00
yhjiango
234d30ec11 fix(object): partNumber must not be greater than 10000
Signed-off-by: yhjiango <jiangyunhua@oppo.com>
2024-03-06 15:42:27 +08:00
yhjiango
1f23b3f620 fix(object): adjust STS auth process
Signed-off-by: yhjiango <jiangyunhua@oppo.com>
2024-03-06 15:42:27 +08:00
slasher
1d84f74acd chore(format): format all code with gofumpt
Signed-off-by: slasher <shenjie1@oppo.com>
2024-01-12 14:21:16 +08:00
yhjiango
135da4ec9f refactor(object): add CubeFS's statement comment
Signed-off-by: yhjiango <jiangyunhua@oppo.com>
2024-01-10 14:58:30 +08:00
leonrayang
be0ed93edc enhance(httpserver):resolve Potential Slowloris attacks according to ostif security team
Signed-off-by: leonrayang <chl696@sina.com>
2023-12-11 10:09:36 +08:00
leonrayang
7a739d82cf fix(object): unmarshal may return nil althrough no error happend
Signed-off-by: leonrayang <chl696@sina.com>
2023-12-11 10:09:36 +08:00
zhaochenyang
4566e8810e feat(ci): add sast tools gosec and semgrep
Signed-off-by: zhaochenyang <zhaochenyang@oppo.com>
2023-12-06 17:05:54 +08:00
tangdeyi
9388fc02b3 feat(objectnode): disable createBucket by s3
Signed-off-by: tangdeyi <tangdeyi@oppo.com>
2023-12-06 14:10:49 +08:00
tangdeyi
0d8662cc9a feat(objectnode): listbucket add authed volumes
Signed-off-by: tangdeyi <tangdeyi@oppo.com>
2023-12-06 14:10:49 +08:00
lily-lee
a8620dc1e9 fix(code scan): fix code-scanning problems.
Signed-off-by: lily-lee <lilylee88756@gmail.com>
2023-11-28 12:32:15 +08:00
yhjiango
abdb0f2d9d enhance(object): add time-consuming tracking in object access
Signed-off-by: yhjiango <jiangyunhua@oppo.com>
2023-11-22 15:15:06 +08:00
yhjiango
f1cfca0be5 fix(object): partNumber of multipart must be greater than 0
Signed-off-by: yhjiango <jiangyunhua@oppo.com>
2023-11-15 15:18:47 +08:00
tangdeyi
af996a6299 fix(objectnode): s3api perm is compatible with fuse perm
Signed-off-by: tangdeyi <tangdeyi@oppo.com>
2023-11-13 15:12:30 +08:00
yhjiango
4860f6de65 fix(object): fixed original errorcode being modified
Signed-off-by: yhjiango <jiangyunhua@oppo.com>
2023-11-09 11:34:08 +08:00
yhjiango
e669e7b42f fix(object): xml tagging data in post object
Signed-off-by: yhjiango <jiangyunhua@oppo.com>
2023-11-09 11:34:08 +08:00
yhjiango
2493347023 enhance(object): remove '\n' of error response body to avoid line wrap in auditlog
Signed-off-by: yhjiango <jiangyunhua@oppo.com>
2023-11-09 11:34:08 +08:00
yhjiango
5574a77cfb fix(object): file size is not checked when content-length-range is not specified in the policy
Signed-off-by: yhjiango <jiangyunhua@oppo.com>
2023-11-09 11:34:08 +08:00
yhjiango
c8e92fb0f0 feat(objectnode): support local and external audit log
Signed-off-by: yhjiango <jiangyunhua@oppo.com>
2023-11-01 14:46:14 +08:00
tangdeyi
b8e3732fa8 fix(object): fix create bucket err
Signed-off-by: tangdeyi <tangdeyi@oppo.com>
2023-11-01 10:33:45 +08:00
tangdeyi
9b14adf492 fix(object): fix content length limit
Signed-off-by: tangdeyi <tangdeyi@oppo.com>
2023-10-31 19:21:10 +08:00
yhjiango
5f3c8e3a25 fix(objectnode): fix error response with object lock in postobject
Signed-off-by: yhjiango <jiangyunhua@oppo.com>
2023-10-31 18:56:31 +08:00
yhjiango
9eb43bb51c feat(objectnode): support post object
Signed-off-by: yhjiango <jiangyunhua@oppo.com>
2023-10-31 15:25:28 +08:00
yhjiango
26f6923afd feat(objectnode): support post object
Signed-off-by: yhjiango <jiangyunhua@oppo.com>
2023-10-31 11:03:49 +08:00
tangdeyi
831d9103fb fix(objectnode): fix delete object 5xx error
Signed-off-by: tangdeyi <tangdeyi@oppo.com>
2023-10-24 17:44:01 +08:00
tangdeyi
dd46c24873 fix(objectnode): fix read body entirely into memory and without an upper boundary
Signed-off-by: tangdeyi <tangdeyi@oppo.com>
2023-10-20 17:06:26 +08:00
NaturalSelect
1903deed73 feat(object): support full path audit log
Signed-off-by: NaturalSelect <2145973003@qq.com>
2023-10-18 14:51:09 +08:00
tangdeyi
fcdeaebb69 fix(objectnode): lifecycle skip locked object
Signed-off-by: tangdeyi <tangdeyi@oppo.com>
2023-10-13 15:30:37 +08:00
slasher
fdcc9d7a3a chore(object): request id is escaped before being put into the response
see: security/code-scanning/122

Directly writing user input (for example, an HTTP request parameter) to
an HTTP response without properly sanitizing the input first, allows for
a cross-site scripting vulnerability.

Signed-off-by: slasher <shenjie1@oppo.com>
2023-09-25 11:03:32 +08:00
tangdeyi
15703d2c09 refactor(objectnode): update ratelimit v1 lib
Signed-off-by: tangdeyi <tangdeyi@oppo.com>
2023-09-18 14:08:33 +08:00
tangdeyi
a7199600c6 fix(objectnode): temporary data security check for concurrent completeMultipart request
Signed-off-by: tangdeyi <tangdeyi@oppo.com>
2023-09-15 14:16:30 +08:00
tangdeyi
7507bbdc35 fix(objectnode): fix s3qos resource release
Signed-off-by: tangdeyi <tangdeyi@oppo.com>
2023-09-06 16:20:37 +08:00
tangdeyi
1b72e88cc8 feat(objectnode): fix s3 put api qos not work
Signed-off-by: tangdeyi <tangdeyi@oppo.com>
2023-09-05 18:56:32 +08:00
tangdeyi
f9c273ac4c feat(objectnode): add some s3qos log
Signed-off-by: tangdeyi <tangdeyi@oppo.com>
2023-09-05 10:28:40 +08:00
tangdeyi
210de3e28c fix(objectnode): fix s3qos zero nodenum
Signed-off-by: tangdeyi <tangdeyi@oppo.com>
2023-08-31 16:36:14 +08:00
tangdeyi
b24525a027 fix(objectnode): fix superfluous writeheader
Signed-off-by: tangdeyi <tangdeyi@oppo.com>
2023-08-31 16:36:14 +08:00
tangdeyi
14f0f67c73 feat(objnode): s3 api qos
Signed-off-by: tangdeyi <tangdeyi@oppo.com>
2023-08-31 16:36:14 +08:00
tangdeyi
abf607736d enhance(objectnode): metacache support background evict
Signed-off-by: tangdeyi <tangdeyi@oppo.com>
2023-08-30 20:05:32 +08:00
tangdeyi
adb37a02ee fix(objectnode): fix listobjectv1 err with delimiter
Signed-off-by: tangdeyi <tangdeyi@oppo.com>
2023-08-30 20:05:32 +08:00
tangdeyi
f8dbf7db3b fix(objectnode): dentry/attr cache code refactor and bugfix
Signed-off-by: tangdeyi <tangdeyi@oppo.com>
2023-08-30 20:05:32 +08:00
yhjiango
4401624f96 feat(objectnode): s3 sts and signature auth
1. sts federation token
2. signature auth code refactor

Signed-off-by: yhjiango <jiangyunhua@oppo.com>
2023-08-30 20:05:32 +08:00
tangdeyi
d11e9142a2 feat(objectnode): object lock
Signed-off-by: tangdeyi <tangdeyi@oppo.com>
2023-08-30 20:05:32 +08:00
zhaochenyang
a6d125f5ce feat(lcnode/master): lcnode support bucket lifecycle and vol snapshot delete
Signed-off-by: zhaochenyang <zhaochenyang@oppo.com>
2023-08-30 20:05:32 +08:00
Patrick Wu
29e3110a93 S3 lifecycle
Signed-off-by: Patrick Wu <wuchunhuan@gmail.com>
2023-08-30 20:05:32 +08:00
leonrayang
5ae500768b feature: support multi version snapshot
Signed-off-by: leonrayang <chl696@sina.com>
2023-08-30 20:05:32 +08:00
tangdeyi
50fc530c80 fix(objnode): file delete lock
Signed-off-by: tangdeyi <tangdeyi@oppo.com>
2023-08-11 16:39:13 +08:00
tangdeyi
e172d8b716 fix(objectnode): reduce fuse authentication check
Signed-off-by: tangdeyi <deyitang94@gmail.com>
2023-08-09 14:01:52 +08:00