Chris Lu 0647bc24d5 s3api: fix authentication bypass and potential SIGSEGV (Issue #7912) (#7954) ...

* s3api: fix authentication bypass and potential SIGSEGV

* s3api: improve security tests with positive cases and nil identity guards

* s3api: fix secondary authentication bypass in AuthSignatureOnly

* s3api: refactor account loading and refine security tests based on review feedback

* s3api: refine security tests with realistic signature failures

* Update weed/s3api/auth_security_test.go

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

2026-01-03 22:08:34 -08:00

..

admin

Refine Bucket Size Metrics: Logical and Physical Size (#7943)

2026-01-02 18:28:00 -08:00

cluster

Make lock_manager.RenewInterval configurable in LiveLock (#7830)

2025-12-20 15:25:47 -08:00

command

fix: correcting S3 nil cipher dereference in filer init (#7952)

2026-01-03 18:53:38 -08:00

credential

fix: Admin UI user creation fails before filer discovery (#7624) (#7625)

2025-12-05 12:19:06 -08:00

filer

fix: include DiskType in metadata log volume assignment (#7918)

2025-12-30 17:32:33 -08:00

filer_client

Clean up logs and deprecated functions (#7339)

2025-10-17 22:11:50 -07:00

glog

Add Kafka Gateway (#7231)

2025-10-13 18:05:17 -07:00

iam

Support AWS standard IAM role ARN formats (issue #7946) (#7948)

2026-01-03 19:00:04 -08:00

iamapi

IAM: Add Service Account Support (#7744) (#7901)

2025-12-29 20:17:23 -08:00

images

Migrates from disintegration/imaging c2019 to cognusion/imaging c2024. (#5533)

2024-04-24 23:16:04 -07:00

kms

S3 API: Add integration with KMS providers (#7152)

2025-08-22 22:10:30 -07:00

mount

classify grpc errors

2025-12-31 13:40:14 -08:00

mq

fix: comprehensive go vet error fixes and add CI enforcement (#7861)

2025-12-23 14:48:50 -08:00

notification

Fix webhook duplicate deliveries and POST to GET conversion (#7668)

2025-12-08 15:39:35 -08:00

operation

Add S3 volume encryption support with -s3.encryptVolumeData flag (#7890)

2025-12-27 00:09:14 -08:00

pb

Fix: Add -admin.grpc flag to worker for explicit gRPC port (#7926) (#7927)

2025-12-31 11:55:09 -08:00

query

fix: comprehensive go vet error fixes and add CI enforcement (#7861)

2025-12-23 14:48:50 -08:00

remote_storage

Filer: Fixed critical bugs in the Azure SDK migration (PR #7310) (#7401)

2025-10-28 22:16:21 -07:00

replication

fix(gcs): resolve credential conflict and improve backup logging (#7951)

2026-01-03 14:41:25 -08:00

s3api

s3api: fix authentication bypass and potential SIGSEGV (Issue #7912) (#7954)

2026-01-03 22:08:34 -08:00

security

remove spoof-able request header (#7103)

2025-08-06 10:08:30 -07:00

sequence

remove unused function

2024-06-25 09:18:11 -07:00

server

Fix reporting of EC shard sizes from nodes to masters. (#7835)

2025-12-28 19:30:42 -08:00

sftpd

SFTP: support reloading user store on HUP signal (#7651)

2025-12-08 01:24:42 -08:00

shell

Have volume.list account for EC shards when computing disk usage. (#7909)

2025-12-30 17:27:11 -08:00

static

Fix Broken Links (#5287)

2024-02-14 08:26:38 -08:00

stats

feat: add S3 bucket size and object count metrics (#7776)

2025-12-15 19:23:25 -08:00

storage

refactoring

2026-01-01 19:20:59 -08:00

telemetry

convert error fromating to %w everywhere (#6995)

2025-07-16 23:39:27 -07:00

topology

Fix reporting of EC shard sizes from nodes to masters. (#7835)

2025-12-28 19:30:42 -08:00

util

4.05

2026-01-01 20:39:22 -08:00

wdclient

Fix worker reconnection race condition causing context canceled errors (#7825)

2025-12-19 19:02:56 -08:00

worker

Fix: Add -admin.grpc flag to worker for explicit gRPC port (#7926) (#7927)

2025-12-31 11:55:09 -08:00

Makefile

Update README and weed/Makefile (#7571)

2025-11-29 11:36:22 -08:00

weed.go

Fix the issue where fuse command on a node cannot specify multiple configuration directory paths (#7874)

2025-12-25 11:36:38 -08:00