Chris Lu 8b5d31e5eb s3api/policy_engine: use forwarded client IP for aws:SourceIp (#8304) ...

* s3api: honor forwarded source IP for policy conditions

Prefer X-Forwarded-For/X-Real-Ip before RemoteAddr when populating aws:SourceIp in policy condition evaluation. Also avoid noisy parsing behavior for unix socket markers and add coverage for precedence/fallback paths.\n\nFixes #8301.

* s3api: simplify remote addr parsing

* s3api: guard aws:SourceIp against DNS hosts

* s3api: simplify remote addr fallback

* s3api: simplify remote addr parsing

* Update weed/s3api/policy_engine/engine.go

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Fix TestExtractConditionValuesFromRequestSourceIPPrecedence using trusted private IP

* Refactor extractSourceIP to use R-to-L XFF parsing and net.IP.IsPrivate

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

2026-02-11 12:47:03 -08:00

..

admin

admin: fix file browser items-per-page selector (#8291)

2026-02-10 12:56:34 -08:00

cluster

go fmt

2026-01-28 14:34:07 -08:00

command

Switch empty-folder cleanup to bucket policy (#8292)

2026-02-10 18:38:38 -08:00

credential

Fix: filer not yet available in s3.configure (#8198)

2026-02-03 17:43:58 -08:00

filer

Switch empty-folder cleanup to bucket policy (#8292)

2026-02-10 18:38:38 -08:00

filer_client

Clean up logs and deprecated functions (#7339)

2025-10-17 22:11:50 -07:00

glog

chore: execute goimports to format the code (#7983)

2026-01-07 13:06:08 -08:00

iam

iam: add ECDSA support for OIDC token validation (#8166)

2026-01-29 20:03:43 -08:00

iamapi

Refactor Admin UI to use unified IAM storage and add MultipleFileStore (#8101)

2026-01-23 20:12:59 -08:00

images

chore: execute goimports to format the code (#7983)

2026-01-07 13:06:08 -08:00

kms

S3 API: Add integration with KMS providers (#7152)

2025-08-22 22:10:30 -07:00

mount

mount: refresh and evict hot dir cache (#8174)

2026-01-31 13:46:37 -08:00

mq

cast i to int64 first, ensuring the calculation happens in 64-bit space

2026-01-22 14:05:45 -08:00

notification

chore: execute goimports to format the code (#7983)

2026-01-07 13:06:08 -08:00

operation

Fix filer.sync retry on stale chunk (#8298)

2026-02-10 19:06:35 -08:00

pb

Implement a VolumeEcStatus() RPC for volume servers. (#8006)

2026-02-09 11:52:08 -08:00

query

fix: comprehensive go vet error fixes and add CI enforcement (#7861)

2025-12-23 14:48:50 -08:00

remote_storage

Explicitly disable signing for public buckets. (#8263)

2026-02-09 11:28:07 -08:00

replication

filer.sync: support manifest chunks (#8299)

2026-02-10 20:18:35 -08:00

s3api

s3api/policy_engine: use forwarded client IP for aws:SourceIp (#8304)

2026-02-11 12:47:03 -08:00

security

feat: Optional path-prefix and method scoping for Filer HTTP JWT (#8014)

2026-01-12 13:21:48 -08:00

sequence

chore: execute goimports to format the code (#7983)

2026-01-07 13:06:08 -08:00

server

Implement local scrubbing for EC volumes. (#8283)

2026-02-11 11:04:08 -08:00

sftpd

SFTP: support reloading user store on HUP signal (#7651)

2025-12-08 01:24:42 -08:00

shell

Implement local scrubbing for EC volumes. (#8283)

2026-02-11 11:04:08 -08:00

static

Fix Broken Links (#5287)

2024-02-14 08:26:38 -08:00

stats

chore: execute goimports to format the code (#7983)

2026-01-07 13:06:08 -08:00

storage

Implement local scrubbing for EC volumes. (#8283)

2026-02-11 11:04:08 -08:00

telemetry

Prevent split-brain: Persistent ClusterID and Join Validation (#8022)

2026-01-18 14:02:34 -08:00

topology

Fix concurrent map access in EC shards info (#8222)

2026-02-05 10:24:18 -08:00

util

Switch empty-folder cleanup to bucket policy (#8292)

2026-02-10 18:38:38 -08:00

wdclient

Fix S3 Gateway Read Failover #8076 (#8087)

2026-01-22 14:07:24 -08:00

worker

logging and debugging

2026-02-04 12:44:52 -08:00

Makefile

Update README and weed/Makefile (#7571)

2025-11-29 11:36:22 -08:00

weed.go

Fix the issue where fuse command on a node cannot specify multiple configuration directory paths (#7874)

2025-12-25 11:36:38 -08:00