Huang Kuan Hao created HDDS-15739:
-------------------------------------
Summary: Reject requests with missing/empty Authorization header
Key: HDDS-15739
URL: https://issues.apache.org/jira/browse/HDDS-15739
Project: Apache Ozone
Issue Type: Sub-task
Reporter: Huang Kuan Hao
Assignee: Huang Kuan Hao
The S3 Gateway accepts PutObject / CreateBucket when the Authorization header
is removed or empty, instead of rejecting with AccessDenied (403) /
InvalidRequest (400). Fix in AuthorizationFilter to reject absent/empty
credentials.
Failing tests: test_bucket_create_bad_authorization_none,
test_bucket_create_bad_authorization_empty,
test_object_create_bad_authorization_none,
test_object_create_bad_authorization_empty
Ref: [https://ozone.s3.peterxcli.dev/]
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
