gian/seaweedfs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
admin-warn-missing-datadir
seaweedfs/weed/s3api
History
7y-9 25f36cd13d
fix(s3api): require space in v2 auth prefix (#9852) 
* fix(s3api): require space in v2 auth prefix

Problem: Signature V2 Authorization headers with a malformed algorithm token such as AWSX... are accepted as if they were AWS ... headers.

Root cause: validateV2AuthHeader checks HasPrefix("AWS") but then slices past an assumed trailing space, so an extra character after AWS is skipped and the rest is parsed as credentials.

Fix: Require the Authorization header to start with the exact AWS plus space prefix before parsing fields.

Reproduction: go test ./weed/s3api -run 'TestValidateV2AuthHeader/algorithm_prefix_without_space|TestDoesSignV2Match/malformed_auth_-_no_space_after_AWS' -count=1 fails before the fix because AWSXAKIA... is accepted.

Validation: go test ./weed/s3api -run 'TestValidateV2AuthHeader/algorithm_prefix_without_space|TestDoesSignV2Match/malformed_auth_-_no_space_after_AWS' -count=1; go test ./weed/s3api -count=1; git diff --check; git diff --cached --check

* Update weed/s3api/auth_signature_v2.go

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>

---------

Co-authored-by: Chris Lu <chrislusf@users.noreply.github.com>
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2026-06-07 11:52:09 -07:00
..
cors go fmt 2026-01-28 14:34:07 -08:00
iceberg fix(s3tables/iceberg): make metadata spec-compliant and accept real-world manifest names (#9703) 2026-05-27 13:05:41 -07:00
lifecycle_xml refactor(s3api): move Lifecycle XML structs to leaf package lifecycle_xml (#9360) 2026-05-07 18:54:06 -07:00
policy chore(weed/s3api/policy): prune unused test functions (#9150) 2026-04-20 12:04:41 -07:00
policy_engine fix(s3): s3:PutObject bucket policy now implicitly allows multipart uploads (#8968) 2026-04-07 11:13:29 -07:00
s3_constants s3: make lifecycle TTL fast path per-bucket opt-in (#9825) 2026-06-06 11:20:15 -07:00
s3_objectlock mount: make metadata cache rebuilds snapshot-consistent (#8531) 2026-03-07 09:19:40 -08:00
s3bucket s3: reject reserved bucket name "filemeta" (#9760) 2026-05-31 11:15:05 -07:00
s3err s3: return NoSuchVersion (not NoSuchKey) for a missing versionId (#9749) 2026-05-30 21:09:53 -07:00
s3lifecycle wdclient, dailyrun: add equal jitter to retry backoff (#9737) 2026-05-29 20:54:54 -07:00
s3tables fix(s3tables/iceberg): make metadata spec-compliant and accept real-world manifest names (#9703) 2026-05-27 13:05:41 -07:00
AmazonS3.xsd add s3test for sql (#5718) 2024-07-04 11:00:41 -07:00
auth_copy_source_test.go s3api: verify source permission on CopyObject and UploadPartCopy (#9555) 2026-05-18 21:35:53 -07:00
auth_credentials_policy_sync_test.go fix(s3): sync IAM policies to advanced IAM Manager policy engine (#9577) 2026-05-21 00:39:42 -07:00
auth_credentials_static_config_test.go s3: keep dynamic IAM live when -iam.config is set (#9817) 2026-06-03 23:28:25 -07:00
auth_credentials_subscribe_test.go go fmt 2026-02-20 18:40:47 -08:00
auth_credentials_subscribe.go feat(s3api): apply lifecycle TTL at write time (#9377) 2026-05-08 21:35:27 -07:00
auth_credentials_trust.go Add AssumeRole and AssumeRoleWithLDAPIdentity STS actions (#8003) 2026-01-12 10:45:24 -08:00
auth_credentials.go s3: keep dynamic IAM live when -iam.config is set (#9817) 2026-06-03 23:28:25 -07:00
auth_jwt_streaming_unsigned_test.go fix(s3): authenticate JWT unsigned-streaming uploads (#9729) 2026-05-28 18:10:24 -07:00
auth_proxy_integration_test.go feat: drop table location mapping support (#8458) 2026-02-26 16:36:24 -08:00
auth_security_test.go fix(s3): allow anonymous unsigned-streaming PutObject (#9727) 2026-05-28 17:00:41 -07:00
auth_signature_v2_test.go fix(s3api): require space in v2 auth prefix (#9852) 2026-06-07 11:52:09 -07:00
auth_signature_v2.go fix(s3api): require space in v2 auth prefix (#9852) 2026-06-07 11:52:09 -07:00
auth_signature_v4_sts_test.go fix(s3): authenticate JWT unsigned-streaming uploads (#9729) 2026-05-28 18:10:24 -07:00
auth_signature_v4_test.go fix(s3): handle empty URL path in forwarded prefix signature verification (#8973) 2026-04-07 13:22:21 -07:00
auth_signature_v4_unsigned_headers_test.go security(s3api): reject unsigned x-amz-* headers in SigV4 requests (#9121) 2026-04-17 12:20:28 -07:00
auth_signature_v4.go security(s3api): reject unsigned x-amz-* headers in SigV4 requests (#9121) 2026-04-17 12:20:28 -07:00
auth_sts_identity_test.go S3: Implement IAM defaults and STS signing key fallback (#8348) 2026-02-16 13:59:13 -08:00
auth_sts_v4_test.go fix(s3): strip client-supplied X-SeaweedFS-Principal/Session-Token in AuthSignatureOnly (#9120) 2026-04-17 12:23:21 -07:00
auto_signature_v4_test.go fix(s3): allow anonymous ListBuckets with prefix-scoped List action (#9073) 2026-04-14 10:52:00 -07:00
bucket_metadata_test.go chore: execute goimports to format the code (#7983) 2026-01-07 13:06:08 -08:00
bucket_metadata.go chore: remove ~50k lines of unreachable dead code (#8913) 2026-04-03 16:04:27 -07:00
bucket_paths.go feat: drop table location mapping support (#8458) 2026-02-26 16:36:24 -08:00
bucket_size_metrics_test.go fix(s3/shell): factor EC volumes into bucket size metrics and collection.list (#9182) 2026-04-21 20:17:42 -07:00
bucket_size_metrics.go s3: auto-enforce bucket quota read-only both ways (#9774) 2026-06-01 13:11:18 -07:00
chunked_bug_reproduction_test.go S3 API: unsigned streaming (no cred) but chunks contain signatures (#7118) 2025-08-11 10:31:01 -07:00
chunked_reader_v4_test.go IAM: Add Service Account Support (#7744) (#7901) 2025-12-29 20:17:23 -08:00
chunked_reader_v4.go fix(s3): authenticate JWT unsigned-streaming uploads (#9729) 2026-05-28 18:10:24 -07:00
copy_source_decode_test.go s3: use url.PathUnescape for X-Amz-Copy-Source header (#8545) 2026-03-07 11:10:02 -08:00
credential_iam_errors.go fix(s3api,iamapi): avoid full SaveConfiguration when creating a single IAM user (#9261) 2026-05-01 01:14:15 -07:00
custom_types.go S3: Directly read write volume servers (#7481) 2025-11-18 23:18:35 -08:00
filer_multipart_etag_test.go fix(s3api): Fix multipart upload ETag compatibility with Hadoop S3A (#9772) 2026-06-01 13:03:46 -07:00
filer_multipart_sse_s3_test.go fix(s3api): backfill multipart SSE-S3 metadata at completion (#9224) 2026-04-25 23:06:37 -07:00
filer_multipart.go fix(s3api): Fix multipart upload ETag compatibility with Hadoop S3A (#9772) 2026-06-01 13:03:46 -07:00
filer_util_delete_test.go Fix S3 delete for non-empty directory markers (#8740) 2026-03-23 13:35:16 -07:00
filer_util_tags.go chore: execute goimports to format the code (#7983) 2026-01-07 13:06:08 -08:00
filer_util.go refactor(s3api): strip back-stamp from PutBucketLifecycleConfiguration (Phase 4) (#9367) 2026-05-08 11:03:03 -07:00
iam_batch_delete_test.go fix(s3api): authorize DeleteObjects per key so object-scoped policies match (#9793) 2026-06-02 14:45:05 -07:00
iam_defaults_test.go Fix IAM defaults and S3Tables IAM regression (#8374) 2026-02-18 18:20:03 -08:00
iam_list_prefix_regression_test.go fix(s3api): keep ListBucket resource ARN at bucket level (#9792) 2026-06-02 14:45:45 -07:00
iam_optional_test.go fix(s3): keep anonymous access working with EnableIam default (fixes #9557) (#9567) 2026-05-19 13:03:30 -07:00
identity_reflection_test.go Enforce IAM for S3 Tables bucket creation (#8388) 2026-02-19 22:52:05 -08:00
object_lock_utils.go chore: remove ~50k lines of unreachable dead code (#8913) 2026-04-03 16:04:27 -07:00
README.txt add s3test for sql (#5718) 2024-07-04 11:00:41 -07:00
s3_action_resolver_test.go feat(s3): add STS GetFederationToken support (#8891) 2026-04-02 17:37:05 -07:00
s3_action_resolver.go feat(s3): add STS GetFederationToken support (#8891) 2026-04-02 17:37:05 -07:00
s3_bucket_encryption.go chore: remove ~50k lines of unreachable dead code (#8913) 2026-04-03 16:04:27 -07:00
s3_content_encoding_test.go S3: Fix Content-Encoding header not preserved (#7894) (#7895) 2025-12-27 12:25:33 -08:00
s3_end_to_end_test.go fix(s3): keep anonymous access working with EnableIam default (fixes #9557) (#9567) 2026-05-19 13:03:30 -07:00
s3_error_utils.go Prune Unused Functions from weed/s3api (#8815) 2026-03-28 13:24:11 -07:00
s3_existing_object_tag_test.go chore: execute goimports to format the code (#7983) 2026-01-07 13:06:08 -08:00
s3_granular_action_security_test.go S3: add context aware action resolution (#7479) 2025-11-13 16:10:46 -08:00
s3_iam_middleware.go fix(s3): populate s3:prefix from query param for ListObjects policy conditions (#8971) 2026-04-07 13:21:30 -07:00
s3_iam_role_selection_test.go S3 API: Advanced IAM System (#7160) 2025-08-30 11:15:48 -07:00
s3_jwt_auth_test.go fix(s3): strip client-supplied X-SeaweedFS-Principal/Session-Token in AuthSignatureOnly (#9120) 2026-04-17 12:23:21 -07:00
s3_list_parts_action_test.go S3: add context aware action resolution (#7479) 2025-11-13 16:10:46 -08:00
s3_metadata_util.go s3: do not persist multi part "Response-Content-Disposition" in request header (#7887) 2025-12-26 13:21:15 -08:00
s3_sse_c.go chore: remove ~50k lines of unreachable dead code (#8913) 2026-04-03 16:04:27 -07:00
s3_sse_ctr_test.go S3: Directly read write volume servers (#7481) 2025-11-18 23:18:35 -08:00
s3_sse_kms_utils.go fix(s3): add HMAC-SHA256 key commitment to SSE-S3 and SSE-KMS (#8879) 2026-05-04 19:14:41 -07:00
s3_sse_kms.go fix(s3): add HMAC-SHA256 key commitment to SSE-S3 and SSE-KMS (#8879) 2026-05-04 19:14:41 -07:00
s3_sse_metadata.go fix(s3api): cross-SSE copy operations and bring them back into CI (#9281) (#9282) 2026-04-29 10:06:51 -07:00
s3_sse_s3_integration_test.go fix(s3api): stream multipart-SSE chunks lazily to avoid truncated GETs (#8908) (#9228) 2026-04-26 16:31:42 -07:00
s3_sse_s3_kek_passphrase_test.go fix(s3): encrypt SSE-S3 KEK at rest with AES-GCM wrapping (#8880) 2026-05-04 19:21:41 -07:00
s3_sse_s3_multipart_test.go S3: Directly read write volume servers (#7481) 2025-11-18 23:18:35 -08:00
s3_sse_s3.go fix(s3): encrypt SSE-S3 KEK at rest with AES-GCM wrapping (#8880) 2026-05-04 19:21:41 -07:00
s3_sse_test_utils_test.go S3 API: Fix SSE-S3 decryption on object download (#7366) 2025-10-23 20:10:12 -07:00
s3_sse_utils.go S3: Directly read write volume servers (#7481) 2025-11-18 23:18:35 -08:00
s3_token_differentiation_test.go fix: comprehensive go vet error fixes and add CI enforcement (#7861) 2025-12-23 14:48:50 -08:00
s3_validation_utils_require_test.go fix(s3): add HMAC-SHA256 key commitment to SSE-S3 and SSE-KMS (#8879) 2026-05-04 19:14:41 -07:00
s3_validation_utils.go fix(s3): add HMAC-SHA256 key commitment to SSE-S3 and SSE-KMS (#8879) 2026-05-04 19:14:41 -07:00
s3api_acl_helper.go s3: return BucketAlreadyOwnedByYou when recreating your own bucket (#9822) 2026-06-04 15:33:03 -07:00
s3api_acp.go chore: execute goimports to format the code (#7983) 2026-01-07 13:06:08 -08:00
s3api_auth.go Fix critical authentication bypass vulnerability (#7912) (#7915) 2025-12-30 12:40:59 -08:00
s3api_bucket_config_stubs_test.go feat(s3): stub bucket configuration list endpoints (#9571) 2026-05-19 17:34:51 -07:00
s3api_bucket_config_stubs.go feat(s3): stub bucket configuration list endpoints (#9571) 2026-05-19 17:34:51 -07:00
s3api_bucket_config_update_test.go s3api: preserve lifecycle config responses for Terraform (#8805) 2026-03-27 22:50:02 -07:00
s3api_bucket_config.go s3: make lifecycle TTL fast path per-bucket opt-in (#9825) 2026-06-06 11:20:15 -07:00
s3api_bucket_cors_handlers.go S3: add fallback for CORS (#7404) 2025-10-29 13:43:27 -07:00
s3api_bucket_handlers_misc_test.go s3: return BucketAlreadyOwnedByYou when recreating your own bucket (#9822) 2026-06-04 15:33:03 -07:00
s3api_bucket_handlers_misc.go feat(s3): add four bucket configuration handlers (#9570) 2026-05-19 17:35:08 -07:00
s3api_bucket_handlers_object_lock_config.go Add table operations test (#8241) 2026-02-07 13:27:47 -08:00
s3api_bucket_handlers.go s3: return BucketAlreadyOwnedByYou when recreating your own bucket (#9822) 2026-06-04 15:33:03 -07:00
s3api_bucket_lifecycle_config.go s3api: preserve lifecycle config responses for Terraform (#8805) 2026-03-27 22:50:02 -07:00
s3api_bucket_lifecycle_response_test.go refactor(s3api): drop filer.conf TTL routing from PUT lifecycle (#9379) 2026-05-08 21:54:39 -07:00
s3api_bucket_metadata_test.go S3 API: Add SSE-KMS (#7144) 2025-08-21 08:28:07 -07:00
s3api_bucket_policy_arn_test.go s3api: fix AccessDenied by correctly propagating principal ARN in vended tokens (#8330) 2026-02-12 23:11:41 -08:00
s3api_bucket_policy_engine.go s3: support s3:x-amz-server-side-encryption policy condition (#8806) 2026-03-27 23:15:01 -07:00
s3api_bucket_policy_handlers.go fix(s3): omit NotResource:null from bucket policy JSON response (#8658) 2026-03-16 12:58:26 -07:00
s3api_bucket_tagging_handlers.go S3 API: Add SSE-KMS (#7144) 2025-08-21 08:28:07 -07:00
s3api_circuit_breaker_test.go chore: execute goimports to format the code (#7983) 2026-01-07 13:06:08 -08:00
s3api_circuit_breaker.go s3api: fix static IAM policy enforcement after reload (#8532) 2026-03-06 12:35:08 -08:00
s3api_copy_size_calculation.go chore: remove ~50k lines of unreachable dead code (#8913) 2026-04-03 16:04:27 -07:00
s3api_copy_validation.go S3 API: Add SSE-KMS (#7144) 2025-08-21 08:28:07 -07:00
s3api_domain_test.go fix: Use a mixed of virtual and path styles within a single subdomain (#7357) 2025-10-24 01:45:22 -07:00
s3api_embedded_iam_oidc.go feat(iam): OIDC provider mutations + multi-client + TLS thumbprints (Phase 2b) (#9320) 2026-05-05 11:26:08 -07:00
s3api_embedded_iam_test.go fix(iam): return a valid user ARN from CreateUser and GetUser (#9794) 2026-06-02 22:01:57 -07:00
s3api_embedded_iam_user_tags_test.go feat(s3): add TagUser, UntagUser, ListUserTags IAM actions (#9572) 2026-05-19 17:35:44 -07:00
s3api_embedded_iam.go fix(iam): return a valid user ARN from CreateUser and GetUser (#9794) 2026-06-02 22:01:57 -07:00
s3api_encrypted_volume_copy_test.go chore: execute goimports to format the code (#7983) 2026-01-07 13:06:08 -08:00
s3api_governance_permissions_test.go s3: enforce authentication and JSON error format for Iceberg REST Catalog (#8192) 2026-02-03 11:55:12 -08:00
s3api_handlers.go s3: defer a recently-unreachable owner that is also the current filer (#9808) 2026-06-03 00:28:56 -07:00
s3api_iam_oidc_test.go feat(iam): OIDC provider mutations + multi-client + TLS thumbprints (Phase 2b) (#9320) 2026-05-05 11:26:08 -07:00
s3api_implicit_directory_test.go Add table operations test (#8241) 2026-02-07 13:27:47 -08:00
s3api_inline_policy_condition_test.go s3api: support group inline policies + Condition enforcement (#9569) 2026-05-19 16:03:45 -07:00
s3api_internal_lifecycle_test.go refactor(s3/lifecycle): extract entryUsesMetadataOnlyDelete predicate (#9417) 2026-05-10 09:39:05 -07:00
s3api_internal_lifecycle.go feat(s3/versioning): grep-able heal logs + scan-anomaly diagnostics + audit cmd (#9468) 2026-05-13 10:48:58 -07:00
s3api_list_normalization_test.go chore: execute goimports to format the code (#7983) 2026-01-07 13:06:08 -08:00
s3api_multipart_ssekms_test.go fix(s3api): stream multipart-SSE chunks lazily to avoid truncated GETs (#8908) (#9228) 2026-04-26 16:31:42 -07:00
s3api_nextmarker_test.go fix: S3 listing NextMarker missing intermediate directory component (#8089) 2026-01-22 16:56:35 -08:00
s3api_object_handlers_acl.go s3: return BucketAlreadyOwnedByYou when recreating your own bucket (#9822) 2026-06-04 15:33:03 -07:00
s3api_object_handlers_attributes.go s3api: add GetObjectAttributes API support (#8504) 2026-03-04 12:52:09 -08:00
s3api_object_handlers_copy_alloc_test.go fix(s3api): cap copy-chunk receive buffer to avoid append-grow blowup (#9420) 2026-05-10 12:08:06 -07:00
s3api_object_handlers_copy_bench_test.go feat(s3api): full-chunk gzip pass-through skips volume-side decompress (#9427) 2026-05-10 14:55:59 -07:00
s3api_object_handlers_copy_chunk_upload_test.go fix: cap pool retention so chunk-copy buffers don't hoard memory (#9422) 2026-05-10 13:34:25 -07:00
s3api_object_handlers_copy_collection_test.go fix(s3): keep server-side copy data in the bucket collection (#9607) 2026-05-21 09:35:42 -07:00
s3api_object_handlers_copy_etag_test.go fix(s3api): standardize ETag calculation in copy handlers (#9829) 2026-06-05 12:41:18 -07:00
s3api_object_handlers_copy_mime_test.go fix(s3): honor MetadataDirective=REPLACE for system metadata on CopyObject (#9721) 2026-05-28 12:55:08 -07:00
s3api_object_handlers_copy_part_sse.go s3: route single-entry object writes to the owner filer, off the DLM (#9629) 2026-05-24 02:10:32 -07:00
s3api_object_handlers_copy_stream.go feat(s3api): full-chunk gzip pass-through skips volume-side decompress (#9427) 2026-05-10 14:55:59 -07:00
s3api_object_handlers_copy_unified.go fix(s3): keep server-side copy data in the bucket collection (#9607) 2026-05-21 09:35:42 -07:00
s3api_object_handlers_copy.go fix(s3api): standardize ETag calculation in copy handlers (#9829) 2026-06-05 12:41:18 -07:00
s3api_object_handlers_delete_test.go feat(s3/lifecycle): metadata-only delete when entry TtlSec > 0 (Phase 2b) (#9390) 2026-05-09 18:38:38 -07:00
s3api_object_handlers_delete.go s3: collapse suspended-versioning deletes onto one null marker (#9845) 2026-06-06 20:49:38 -07:00
s3api_object_handlers_legal_hold.go adjust logs 2026-01-17 18:40:48 -08:00
s3api_object_handlers_list_directory_test.go fix(s3): list empty directories as directory markers (#9615) 2026-05-21 14:05:16 -07:00
s3api_object_handlers_list_test.go fix(s3api): ListObjects with trailing-slash prefix matches sibling directories (#8599) 2026-03-11 02:28:34 -07:00
s3api_object_handlers_list_versioned_test.go fix(s3): skip directories before marker in ListObjectVersions pagination (#8890) 2026-04-02 15:59:52 -07:00
s3api_object_handlers_list.go fix(s3api/list): cancel ListEntries stream in hasChildren (#9617) 2026-05-21 15:48:47 -07:00
s3api_object_handlers_multipart.go s3: route single-entry object writes to the owner filer, off the DLM (#9629) 2026-05-24 02:10:32 -07:00
s3api_object_handlers_postpolicy_test.go fix(s3): propagate validated POST form fields to upload headers (#9123) 2026-04-17 14:55:06 -07:00
s3api_object_handlers_postpolicy.go s3: route single-entry object writes to the owner filer, off the DLM (#9629) 2026-05-24 02:10:32 -07:00
s3api_object_handlers_put_checksum_test.go fix(s3): honor ChecksumAlgorithm on presigned URL uploads (#9076) 2026-04-14 21:52:49 -07:00
s3api_object_handlers_put.go s3: commit a versioned PutObject and its latest pointer in one transaction (#9756) 2026-05-31 00:13:36 -07:00
s3api_object_handlers_retention.go refactor (#6999) 2025-07-19 00:49:56 -07:00
s3api_object_handlers_tagging.go Add Iceberg admin UI (#8246) 2026-02-08 20:06:32 -08:00
s3api_object_handlers.go s3: route object reads to the key's owner filer (#9806) 2026-06-03 00:12:28 -07:00
s3api_object_lifecycle_ttl_test.go s3: make lifecycle TTL fast path per-bucket opt-in (#9825) 2026-06-06 11:20:15 -07:00
s3api_object_lifecycle_ttl.go feat(s3api): apply lifecycle TTL at write time (#9377) 2026-05-08 21:35:27 -07:00
s3api_object_lock_fix_test.go Fix get object lock configuration handler (#6996) 2025-07-18 02:19:50 -07:00
s3api_object_lock_headers_test.go Test object lock and retention (#6997) 2025-07-18 22:25:58 -07:00
s3api_object_ownership_test.go s3: implement Bucket Owner Enforced for object ownership (#7913) 2025-12-29 23:54:00 -08:00
s3api_object_retention_test.go S3: S3 Object Retention API to include XML namespace support (#7517) 2025-11-20 11:42:22 -08:00
s3api_object_retention.go Prune Unused Functions from weed/s3api (#8815) 2026-03-28 13:24:11 -07:00
s3api_object_routed_read_test.go s3: route object reads to the key's owner filer (#9806) 2026-06-03 00:12:28 -07:00
s3api_object_routed_read.go s3: route object reads to the key's owner filer (#9806) 2026-06-03 00:12:28 -07:00
s3api_object_routed_write_test.go s3: route single-entry object writes to the owner filer, off the DLM (#9629) 2026-05-24 02:10:32 -07:00
s3api_object_routed_write.go s3: commit a versioned PutObject and its latest pointer in one transaction (#9756) 2026-05-31 00:13:36 -07:00
s3api_object_versioned_finalize.go s3: commit a versioned PutObject and its latest pointer in one transaction (#9756) 2026-05-31 00:13:36 -07:00
s3api_object_versioning_self_heal_test.go fix(s3): recover versioned reads when the .versions latest pointer is absent (#9782) 2026-06-01 20:01:30 -07:00
s3api_object_versioning.go s3: collapse suspended-versioning deletes onto one null marker (#9845) 2026-06-06 20:49:38 -07:00
s3api_path_validation_test.go s3,iceberg: reject .. in URL path vars (#9687) 2026-05-26 01:04:59 -07:00
s3api_path_validation.go s3,iceberg: reject .. in URL path vars (#9687) 2026-05-26 01:04:59 -07:00
s3api_put_handlers.go Prune Unused Functions from weed/s3api (#8815) 2026-03-28 13:24:11 -07:00
s3api_put_object_helper_test.go S3: Implement IAM defaults and STS signing key fallback (#8348) 2026-02-16 13:59:13 -08:00
s3api_put_object_helper.go s3api: remove redundant auth verification in getRequestDataReader (#7685) 2025-12-09 10:24:35 -08:00
s3api_remote_storage_test.go fix(s3): cache remote-only source before CopyObject (#9304) (#9305) 2026-05-03 18:52:45 -07:00
s3api_server_grpc.go iam: add IAM group management (#8560) 2026-03-09 11:54:32 -07:00
s3api_server_routing_test.go fix(s3): keep host-less bucket catch-all so reverse proxies work (#9540) 2026-05-18 19:44:19 -07:00
s3api_server.go admin: show S3 servers under Cluster (#9847) 2026-06-07 00:32:20 -07:00
s3api_sosapi.go chore: remove ~50k lines of unreachable dead code (#8913) 2026-04-03 16:04:27 -07:00
s3api_sse_decrypt_test.go fix(s3api): backfill multipart SSE-S3 metadata at completion (#9224) 2026-04-25 23:06:37 -07:00
s3api_sse_s3_upload_test.go S3: Directly read write volume servers (#7481) 2025-11-18 23:18:35 -08:00
s3api_status_handlers.go chore: execute goimports to format the code (#7983) 2026-01-07 13:06:08 -08:00
s3api_stream_error_test.go Client disconnects create context cancelled errors, 500x errors and Filer lookup failures (#8845) 2026-03-30 12:11:30 -07:00
s3api_sts_assume_role_dispatch_test.go fix(iam): four phase-3 follow-ups (provider scoping, public path wrapper, static mirror, claim-mode RoleArn) (#9333) 2026-05-05 19:14:44 -07:00
s3api_sts_assume_role_empty_arn_test.go fix(iam): four phase-3 follow-ups (provider scoping, public path wrapper, static mirror, claim-mode RoleArn) (#9333) 2026-05-05 19:14:44 -07:00
s3api_sts_assume_role_test.go Embed role policies in AssumeRole STS tokens (#8421) 2026-02-23 22:59:53 -08:00
s3api_sts_get_caller_identity_test.go STS: add GetCallerIdentity support (#8893) 2026-04-02 15:59:09 -07:00
s3api_sts_get_federation_token_test.go feat(s3): add STS GetFederationToken support (#8891) 2026-04-02 17:37:05 -07:00
s3api_sts.go fix(iam): four phase-3 follow-ups (provider scoping, public path wrapper, static mirror, claim-mode RoleArn) (#9333) 2026-05-05 19:14:44 -07:00
s3api_tables_rest_validation_test.go s3api: return 400 for invalid namespace query in REST table routes (#8296) 2026-02-10 17:57:08 -08:00
s3api_tables_routing_test.go fix(s3): stop S3 Tables routes from swallowing buckets named "buckets" or "get-table" (#9566) 2026-05-19 14:24:25 -07:00
s3api_tables.go fix(s3): stop S3 Tables routes from swallowing buckets named "buckets" or "get-table" (#9566) 2026-05-19 14:24:25 -07:00
s3api_test.go chore: execute goimports to format the code (#7983) 2026-01-07 13:06:08 -08:00
s3api_version_id_test.go chore: execute goimports to format the code (#7983) 2026-01-07 13:06:08 -08:00
s3api_version_id.go Add table operations test (#8241) 2026-02-07 13:27:47 -08:00
s3api_versioning_heal_log_test.go feat(s3/versioning): grep-able heal logs + scan-anomaly diagnostics + audit cmd (#9468) 2026-05-13 10:48:58 -07:00
s3api_versioning_reconciler_test.go feat(s3/versioning): grep-able heal logs + scan-anomaly diagnostics + audit cmd (#9468) 2026-05-13 10:48:58 -07:00
s3api_versioning_reconciler.go feat(s3/versioning): grep-able heal logs + scan-anomaly diagnostics + audit cmd (#9468) 2026-05-13 10:48:58 -07:00
s3api_xsd_generated_helper.go add s3test for sql (#5718) 2024-07-04 11:00:41 -07:00
s3api_xsd_generated.go fix ListAllMyBucketsResult xmlns 2025-08-14 20:38:03 -07:00
sses3_multipart_repro_test.go fix(s3api): stream multipart-SSE chunks lazily to avoid truncated GETs (#8908) (#9228) 2026-04-26 16:31:42 -07:00
stats_test.go fix(s3/audit): emit audit log for successful GET/HEAD (#9467) 2026-05-13 09:24:59 -07:00
stats.go fix(s3/audit): populate requester for GET/HEAD/IAM operations (#9581) 2026-05-20 10:13:33 -07:00
sts_packed_policy_test.go feat(iam): STS web-identity AWS-fidelity polish (Phase 1) (#9318) 2026-05-04 22:10:49 -07:00
sts_params_test.go s3/iam: reuse one request id per request (#8538) 2026-03-06 15:22:39 -08:00
sts_session_name_test.go feat(iam): STS web-identity AWS-fidelity polish (Phase 1) (#9318) 2026-05-04 22:10:49 -07:00
tags_test.go tag parsing decode url encoded 2025-07-28 02:49:43 -07:00
tags.go Add s3tables shell and admin UI (#8172) 2026-01-30 22:57:05 -08:00

README.txt 

see https://blog.aqwari.net/xml-schema-go/

1. go get aqwari.net/xml/cmd/xsdgen
2. Add EncodingType element for ListBucketResult in AmazonS3.xsd
3. xsdgen -o s3api_xsd_generated.go -pkg s3api AmazonS3.xsd
4. Remove empty Grantee struct in s3api_xsd_generated.go
5. Remove xmlns: sed s'/http:\/\/s3.amazonaws.com\/doc\/2006-03-01\/\ //' s3api_xsd_generated.go