mirror of
https://github.com/cubefs/cubefs.git
synced 2026-08-02 10:06:14 +00:00
65 lines
1.8 KiB
Go
65 lines
1.8 KiB
Go
// Copyright 2019 The CubeFS Authors.
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
|
|
// implied. See the License for the specific language governing
|
|
// permissions and limitations under the License.
|
|
|
|
package objectnode
|
|
|
|
import "net/http"
|
|
|
|
//https://docs.aws.amazon.com/AmazonS3/latest/dev/RESTAuthentication.html#ConstructingTheAuthenticationHeader
|
|
|
|
type AuthType string
|
|
|
|
const (
|
|
SignatrueV2 AuthType = "signature_v2"
|
|
SignatrueV4 = "signature_v4"
|
|
PresignedV2 = "presigned_v2"
|
|
PresignedV4 = "presigned_v4"
|
|
)
|
|
|
|
type RequestAuthInfo struct {
|
|
authType AuthType
|
|
accessKey string
|
|
}
|
|
|
|
func parseRequestAuthInfo(r *http.Request) *RequestAuthInfo {
|
|
auth := new(RequestAuthInfo)
|
|
if isHeaderUsingSignatureAlgorithmV2(r) {
|
|
auth.authType = SignatrueV2
|
|
ai, _ := parseRequestAuthInfoV2(r)
|
|
if ai != nil {
|
|
auth.accessKey = ai.accessKeyId
|
|
}
|
|
} else if isHeaderUsingSignatureAlgorithmV4(r) {
|
|
auth.authType = SignatrueV4
|
|
ai, _ := parseRequestV4(r)
|
|
if ai != nil {
|
|
auth.accessKey = ai.Credential.AccessKey
|
|
}
|
|
} else if isUrlUsingSignatureAlgorithmV2(r) {
|
|
auth.authType = PresignedV2
|
|
ai, _ := parsePresignedV2AuthInfo(r)
|
|
if ai != nil {
|
|
auth.accessKey = ai.accessKeyId
|
|
}
|
|
} else if isUrlUsingSignatureAlgorithmV4(r) {
|
|
auth.authType = PresignedV4
|
|
ai, _ := parseRequestV4(r)
|
|
if ai != nil {
|
|
auth.accessKey = ai.Credential.AccessKey
|
|
}
|
|
}
|
|
|
|
return auth
|
|
}
|
