seaweedfs

Github-Mirror/seaweedfs

0 Fork 0

mirror of https://github.com/seaweedfs/seaweedfs.git synced 2026-11-12 23:09:33 +01:00

Files

T

History

Chris LuandClaude Opus 5.5 6c1eec8703 s3: store the POST Object acl on the uploaded object (#12567 )

* s3api: split upload ACL assembly out of preparePutObjectACL

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* s3api: store POST Object acl and grant fields on the object

The form acl and x-amz-grant-* fields were authorized but never assembled,
so the object kept no ACL: acl=private on a public-read bucket stayed
anonymously readable and invalid values were accepted. Build them with the
same rules as PutObject, which also covers the Block Public Access check.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* s3api: test POST Object stores its upload ACL

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* s3api: take the POST Object ACL from the signed form only

ACL request headers are not covered by the POST policy, so a holder of a
signed form could add one and have it stored with the upload.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* s3api: reject a POST acl field the policy does not cover

The acl form field now sets the stored object ACL, so like the x-amz-*
fields it needs a policy condition, as AWS requires.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* s3api: test unsigned ACL headers and uncovered acl fields on POST

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* s3api: evaluate POST upload policies on the canonical ACL

Policy conditions on the grant headers saw the raw form value, so an
equivalent spelling of a denied grantee passed. Use the PutObject request
shape that the PUT path evaluates.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* s3api: check bucket policy for POST ACLs with auth disabled

PutObject applies the bucket policy to an explicit upload ACL when IAM is
off; POST now does the same before storing it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* s3api: reject differing acl and x-amz-acl POST fields

Both promote to the canned ACL header, so map order picked the stored ACL.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* s3api: test POST grant canonicalization, auth-off ACL policy, acl conflicts

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* s3api: check the auth-off POST ACL policy after loading the bucket

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* s3api: reject an empty acl or x-amz-acl POST field beside a differing one

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* s3api: test the auth-off POST ACL policy on a cold bucket cache and empty acl aliases

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* s3api: load the bucket before per-key object authorization

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* s3api: test the POST ACL policy on a cold bucket cache with auth on

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* s3api: stop per-key object authorization when the bucket fails to load

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* s3api: test the cold-bucket POST ACL allow path and a failed bucket load

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

2026-11-11 10:36:51 -08:00

cors

fix(s3): set Access-Control-Allow-Credentials on CORS responses (#11886 )

2026-10-21 13:10:49 -07:00

iceberg

s3tables, iceberg: give tables created without a location their own directory (#12475 )

2026-11-07 16:37:31 -08:00

lance

lance: deregister and re-register need UpdateTable (#12552 )

2026-11-11 10:35:00 -08:00

lifecycle_xml

admin: add bucket lifecycle rule editing (#10860 )

2026-08-21 23:42:26 -07:00

policy

s3: store the POST Object acl on the uploaded object (#12567 )

2026-11-11 10:36:51 -08:00

policy_engine

fix(s3tables): validate policy conditions and fail safe on unusable ones (#12389 )

2026-11-04 08:13:05 -08:00

s3_constants

s3: require their own actions to change a bucket's CORS or versioning (#12433 )

2026-11-06 09:12:00 -08:00

s3_objectlock

s3: check Object Lock on directory-marker keys before bucket deletion (#11096 )

2026-09-02 11:35:19 -07:00

s3bucket

mount, s3: clarify allowOthers requirement and bucket name error (#12197 )

2026-10-29 01:36:16 -07:00

s3err

s3vectors: integrate bucket metrics, audit events, and request limits (#12514 )

2026-11-09 11:37:06 -08:00

s3lifecycle

s3 lifecycle: walker deletes carry the listed identity and must target the latest version (#12452 )

2026-11-06 09:39:12 -08:00

s3tables

fix(s3tables): let a table renamed across namespaces keep committing (#12515 )

2026-11-10 21:15:48 -08:00

s3vectors

vector: bound request buffering before authentication and document installation (#12537 )

2026-11-10 04:21:56 -08:00

AmazonS3.xsd

s3: paginate ListBuckets and serve it from a bucket owner index (#10214 )

2026-07-02 21:11:41 -07:00

auth_access_key_attribution_test.go

s3, iceberg: record the access key a request was signed with (#11901 )

2026-10-21 20:33:08 -07:00

auth_access_key_post_policy_test.go

s3, iceberg: record the access key a request was signed with (#11901 )

2026-10-21 20:33:08 -07:00

auth_access_key_shapes_test.go

s3, iceberg: record the access key a request was signed with (#11901 )

2026-10-21 20:33:08 -07:00

auth_account_collapse_test.go

s3: allow bucket ownership controls when auth is off (#12121 )

2026-10-27 00:36:53 -07:00

auth_audit_requester_test.go

s3: record requester identity before the authz verdict (#11479 )

2026-09-27 07:03:01 +08:00

auth_config_default_deny_test.go

s3: deny anonymous access when the identity config loads no identities (#10954 )

2026-08-25 15:31:32 -07:00

auth_copy_source_test.go

s3: resolve versionId ACL and attributes requests to the version-scoped actions (#11916 )

2026-10-21 16:50:34 -07:00

auth_credentials_native_floor_test.go

s3: do not promote ?prefix into the object for non-List actions (#11494 )

2026-09-28 07:17:58 +08:00

auth_credentials_policy_document_test.go

s3api: load document-style policies from the advanced IAM config (#10481 )

2026-07-29 10:30:30 -07:00

auth_credentials_policy_document.go

s3api: load document-style policies from the advanced IAM config (#10481 )

2026-07-29 10:30:30 -07:00

auth_credentials_policy_sync_test.go

s3api: load document-style policies from the advanced IAM config (#10481 )

2026-07-29 10:30:30 -07:00

auth_credentials_static_config_test.go

s3api: revoke the identities a config reload no longer declares (#11679 )

2026-10-10 09:34:11 +08:00

auth_credentials_subscribe_test.go

fix(s3api/iam): avoid transient AccessDenied from full reloads on single IAM file changes (#11271 )

2026-09-11 10:42:19 -07:00

auth_credentials_subscribe.go

s3/iam: manage roles through the IAM API, with an opt-in persistent role store (#11522 )

2026-09-30 20:45:47 +08:00

auth_credentials_trust.go

Add AssumeRole and AssumeRoleWithLDAPIdentity STS actions (#8003 )

2026-01-12 10:45:24 -08:00

auth_credentials_upsert_test.go

s3: keep service account keys when a pushed identity replaces its parent (#12394 )

2026-11-04 05:26:07 -08:00

auth_credentials.go

s3: store the POST Object acl on the uploaded object (#12567 )

2026-11-11 10:36:51 -08:00

auth_invalid_bucket_name_test.go

s3: answer InvalidBucketName to a denied request on a malformed bucket name (#11893 )

2026-10-21 14:08:33 -07:00

auth_jwt_streaming_unsigned_test.go

fix(s3): authenticate JWT unsigned-streaming uploads (#9729 )

2026-05-28 18:10:24 -07:00

auth_presigned_semicolon_test.go

s3: accept raw semicolons in query strings (#10305 )

2026-07-10 12:17:35 -07:00

auth_proxy_integration_test.go

s3: verify SigV4 against each plausible reverse-proxy host (#10284 )

2026-07-09 02:34:13 -07:00

auth_prune_bucket_test.go

s3: embedded IAM inline policy honors prefix-scoped resources (#10192 )

2026-07-02 09:14:54 -07:00

auth_security_test.go

s3: do not promote ?prefix into the object for non-List actions (#11494 )

2026-09-28 07:17:58 +08:00

auth_signature_v2_test.go

fix(s3): verify SigV2 using percent-encoded path for Unicode object keys (#10022 )

2026-06-20 08:28:40 -07:00

auth_signature_v2.go

s3: end a catalog-vended session with the access key it was vended for (#11945 )

2026-10-23 03:58:06 -07:00

auth_signature_v4_sts_test.go

s3: give STS sessions a distinct owner account instead of admin (#9963 )

2026-06-14 13:55:11 -07:00

auth_signature_v4_test.go

fix(s3): verify SigV4 signature with decoded path behind X-Forwarded-Prefix (#12299 )

2026-11-01 16:27:45 -08:00

auth_signature_v4_unsigned_headers_test.go

s3api: align S3/IAM error responses with AWS (#11632 )

2026-10-07 21:02:38 +08:00

auth_signature_v4.go

s3api: let the vectors route, not the credential scope, raise the body limit (#12326 )

2026-11-02 01:15:42 -08:00

auth_static_session_token_test.go

s3api: tolerate session tokens on statically configured credentials (#11694 )

2026-10-10 10:11:24 +08:00

auth_sts_identity_test.go

S3: Implement IAM defaults and STS signing key fallback (#8348 )

2026-02-16 13:59:13 -08:00

auth_sts_session_token_test.go

s3: tighten STS session token handling (#11383 )

2026-09-17 23:50:16 -07:00

auth_sts_v4_test.go

s3: tighten STS session token handling (#11383 )

2026-09-17 23:50:16 -07:00

auto_signature_v4_test.go

s3api: let the vectors route, not the credential scope, raise the body limit (#12326 )

2026-11-02 01:15:42 -08:00

bucket_metadata_test.go

build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/storage/azblob from 1.8.0 to 1.8.2 (#11740 )

2026-10-15 21:53:16 -07:00

bucket_metadata.go

filer,pb,mount: keep per-chunk cipher keys out of logs (#12085 )

2026-10-26 11:52:56 -07:00

bucket_owner_identity_test.go

s3: honor a bucket owner recorded as an identity (#10567 )

2026-08-04 16:00:04 -07:00

bucket_paths.go

filer: apply filerGroup prefix to bucket default collection (#12499 )

2026-11-10 21:12:49 -08:00

bucket_size_metrics_test.go

s3: take bucket sizes from the master's summary (#10664 )

2026-08-09 00:00:19 -07:00

bucket_size_metrics.go

s3: take bucket sizes from the master's summary (#10664 )

2026-08-09 00:00:19 -07:00

chunked_bug_reproduction_test.go

S3 API: unsigned streaming (no cred) but chunks contain signatures (#7118 )

2025-08-11 10:31:01 -07:00

chunked_reader_trailer_split_test.go

s3api: copy the trailer checksum before reading the next trailer line (#11583 )

2026-10-04 01:14:15 +08:00

chunked_reader_v4_bucket_policy_test.go

s3api: do not re-run permission checks in the aws-chunked reader (#11655 )

2026-10-09 10:01:28 +08:00

chunked_reader_v4_test.go

fix: clone protobuf snapshots without copying internal locks (#11968 )

2026-10-22 18:38:33 -07:00

chunked_reader_v4.go

s3: accept signed streaming uploads when IAM is disabled (#11766 )

2026-10-16 21:10:38 -07:00

copy_source_decode_test.go

[s3] validate indirect filer path inputs (#9931 )

2026-06-11 21:56:16 -07:00

crc_combine_test.go

s3api: FULL_OBJECT checksums for CRC multipart uploads (#10236 )

2026-07-05 20:19:20 -07:00

crc_combine.go

s3api: FULL_OBJECT checksums for CRC multipart uploads (#10236 )

2026-07-05 20:19:20 -07:00

credential_iam_errors.go

fix(s3api,iamapi): avoid full SaveConfiguration when creating a single IAM user (#9261 )

2026-05-01 01:14:15 -07:00

custom_types.go

s3: answer GET and HEAD of a delete marker as S3 does (#12051 )

2026-10-25 12:02:19 -07:00

direct_read_fixture_test.go

s3api: known-answer fixture generator for SSE-S3 and filer-encrypted chunks (#12355 )

2026-11-03 04:53:57 -08:00

filer_multipart_abort_test.go

shell: s3.clean.uploads frees an open upload under the object write lock (#12558 )

2026-11-11 10:16:20 -08:00

filer_multipart_checksum_test.go

s3: accept bare composite checksum on CompleteMultipartUpload (#12194 )

2026-10-28 23:01:48 -07:00

filer_multipart_commit_test.go

s3api: answer success when a failed completion already committed (#12416 )

2026-11-05 03:38:52 -08:00

filer_multipart_etag_test.go

mount: version open file handles by filer log position (#10403 )

2026-07-23 17:44:02 -07:00

filer_multipart_initiate_acl_test.go

s3api: per-bucket Block Public Access (BlockPublicAcls, IgnorePublicAcls) (#12381 )

2026-11-03 14:52:20 -08:00

filer_multipart_list_encoding_test.go

s3: take list markers as raw keys under encoding-type=url (#12275 )

2026-10-31 05:15:47 -07:00

filer_multipart_list_test.go

s3: take list markers as raw keys under encoding-type=url (#12275 )

2026-10-31 05:15:47 -07:00

filer_multipart_sse_s3_test.go

mount: version open file handles by filer log position (#10403 )

2026-07-23 17:44:02 -07:00

filer_multipart.go

shell: s3.clean.uploads frees an open upload under the object write lock (#12558 )

2026-11-11 10:16:20 -08:00

filer_util_delete_test.go

s3: replay a delete whose reply the transport dropped (#11022 )

2026-08-28 14:30:21 -07:00

filer_util_list_retry_test.go

Classify a filer error before a user-controlled path is wrapped into it (#11004 )

2026-08-27 22:30:53 -07:00

filer_util_tags.go

s3: route regular copy source reads to the write owner (#12173 )

2026-10-28 14:35:39 -07:00

filer_util.go

s3: bound ListMultipartUploads memory to the page size (#11971 )

2026-10-23 00:46:10 -07:00

iam_batch_delete_test.go

s3: add the RenameObject endpoint (#10659 )

2026-08-08 21:24:30 -07:00

iam_defaults_test.go

s3/iam: manage roles through the IAM API, with an opt-in persistent role store (#11522 )

2026-09-30 20:45:47 +08:00

iam_list_prefix_regression_test.go

s3: keep a listing's start position inside the requested prefix (#11493 )

2026-09-28 06:58:44 +08:00

iam_optional_test.go

fix(s3): keep anonymous access working with EnableIam default (fixes #9557 ) (#9567 )

2026-05-19 13:03:30 -07:00

identity_reflection_test.go

Enforce IAM for S3 Tables bucket creation (#8388 )

2026-02-19 22:52:05 -08:00

kms_azure.go

s3api: register the azurekms KMS provider under its build tag (#11691 )

2026-10-10 23:44:09 +08:00

object_lock_utils.go

fix(s3api): clear stale object lock years (#9890 )

2026-06-09 00:48:38 -07:00

README.txt

add s3test for sql (#5718 )

2024-07-04 11:00:41 -07:00

request_body_test.go

s3: drain request body before error response (#11334 )

2026-09-15 13:09:07 -07:00

request_body.go

s3: drain request body before error response (#11334 )

2026-09-15 13:09:07 -07:00

s3_action_resolver_test.go

s3: authorize an empty versionId as the current-object action (#12566 )

2026-11-11 10:21:28 -08:00

s3_action_resolver.go

s3: authorize an empty versionId as the current-object action (#12566 )

2026-11-11 10:21:28 -08:00

s3_bucket_encryption_test.go

s3: answer NoSuchBucket for encryption and policy writes to a missing bucket (#12133 )

2026-10-27 13:07:05 -07:00

s3_bucket_encryption.go

s3vectors: encrypt the objects of a vector bucket declared AES256 (#12324 )

2026-11-01 23:57:40 -08:00

s3_content_encoding_test.go

s3api: do not store aws-chunked in an object's Content-Encoding (#11528 )

2026-10-01 01:10:38 +08:00

s3_encodepath_test.go

s3api: optimize encodePath memory allocations (#10252 )

2026-07-07 12:36:47 -07:00

s3_end_to_end_test.go

s3: tighten STS session token handling (#11383 )

2026-09-17 23:50:16 -07:00

s3_error_utils.go

s3: keep transient object-entry errors out of ErrObjectNotFound (#12083 )

2026-10-26 11:52:15 -07:00

s3_existing_object_tag_test.go

s3: resolve versionId ACL and attributes requests to the version-scoped actions (#11916 )

2026-10-21 16:50:34 -07:00

s3_granular_action_security_test.go

S3: add context aware action resolution (#7479 )

2025-11-13 16:10:46 -08:00

s3_iam_bearer_trust_policy_test.go

s3tables: scope OIDC-derived account IDs to the token issuer (#11774 )

2026-10-16 19:48:32 -07:00

s3_iam_group_role_abac_test.go

s3: tighten STS session token handling (#11383 )

2026-09-17 23:50:16 -07:00

s3_iam_middleware.go

vector: integrate engine health, admin management, and local deployment (#12517 )

2026-11-10 04:21:18 -08:00

s3_iam_role_selection_test.go

S3 API: Advanced IAM System (#7160 )

2025-08-30 11:15:48 -07:00

s3_jwt_auth_test.go

s3: tighten STS session token handling (#11383 )

2026-09-17 23:50:16 -07:00

s3_list_parts_action_test.go

S3: add context aware action resolution (#7479 )

2025-11-13 16:10:46 -08:00

s3_metadata_util.go

fix(s3api): reject an invalid storage class before uploading the body (#12354 )

2026-11-02 22:08:21 -08:00

s3_sse_c.go

chore: remove ~50k lines of unreachable dead code (#8913 )

2026-04-03 16:04:27 -07:00

s3_sse_ctr_test.go

S3: Directly read write volume servers (#7481 )

2025-11-18 23:18:35 -08:00

s3_sse_kms_utils.go

fix(s3): add HMAC-SHA256 key commitment to SSE-S3 and SSE-KMS (#8879 )

2026-05-04 19:14:41 -07:00

s3_sse_kms.go

s3api: resolve volume data encryption in CopyObject SSE flows (#11646 ) (#11683 )

2026-10-10 10:59:36 +08:00

s3_sse_metadata.go

fix(s3api): cross-SSE copy operations and bring them back into CI (#9281 ) (#9282 )

2026-04-29 10:06:51 -07:00

s3_sse_s3_integration_test.go

fix(s3api): stream multipart-SSE chunks lazily to avoid truncated GETs (#8908 ) (#9228 )

2026-04-26 16:31:42 -07:00

s3_sse_s3_kek_passphrase_test.go

s3api: known-answer fixture generator for SSE-S3 and filer-encrypted chunks (#12355 )

2026-11-03 04:53:57 -08:00

s3_sse_s3_multipart_test.go

S3: Directly read write volume servers (#7481 )

2025-11-18 23:18:35 -08:00

s3_sse_s3.go

s3vectors: encrypt the objects of a vector bucket declared AES256 (#12324 )

2026-11-01 23:57:40 -08:00

s3_sse_test_utils_test.go

S3 API: Fix SSE-S3 decryption on object download (#7366 )

2025-10-23 20:10:12 -07:00

s3_sse_utils.go

S3: Directly read write volume servers (#7481 )

2025-11-18 23:18:35 -08:00

s3_token_differentiation_test.go

fix: comprehensive go vet error fixes and add CI enforcement (#7861 )

2025-12-23 14:48:50 -08:00

s3_validation_utils_require_test.go

fix(s3): add HMAC-SHA256 key commitment to SSE-S3 and SSE-KMS (#8879 )

2026-05-04 19:14:41 -07:00

s3_validation_utils.go

fix(s3): add HMAC-SHA256 key commitment to SSE-S3 and SSE-KMS (#8879 )

2026-05-04 19:14:41 -07:00

s3api_acl_header_parser_test.go

s3api: persist ACLs on PutObject uploads (#11592 )

2026-10-05 09:13:19 +08:00

s3api_acl_helper.go

s3api: persist ACLs on PutObject uploads (#11592 )

2026-10-05 09:13:19 +08:00

s3api_acp.go

s3: allow PutBucketAcl when auth is off (#12180 )

2026-10-28 14:45:23 -07:00

s3api_ambiguous_subresource_test.go

s3: close seaweedfs-quota policy-confusion gap (#11409 )

2026-09-20 23:34:57 -07:00

s3api_auth.go

Fix critical authentication bypass vulnerability (#7912 ) (#7915 )

2025-12-30 12:40:59 -08:00

s3api_bucket_config_stubs_test.go

s3: lazy, bounded, entry-free per-bucket caches (#10213 )

2026-07-02 21:11:34 -07:00

s3api_bucket_config_stubs.go

feat(s3): stub bucket configuration list endpoints (#9571 )

2026-05-19 17:34:51 -07:00

s3api_bucket_config_update_test.go

s3: lazy, bounded, entry-free per-bucket caches (#10213 )

2026-07-02 21:11:34 -07:00

s3api_bucket_config.go

s3api: per-bucket Block Public Access (BlockPublicAcls, IgnorePublicAcls) (#12381 )

2026-11-03 14:52:20 -08:00

s3api_bucket_cors_handlers.go

S3: add fallback for CORS (#7404 )

2025-10-29 13:43:27 -07:00

s3api_bucket_cors_proto_test.go

s3: keep an unset CORS MaxAgeSeconds unset (#12272 )

2026-10-31 05:11:42 -07:00

s3api_bucket_default_encryption_test.go

s3vectors: encrypt the objects of a vector bucket declared AES256 (#12324 )

2026-11-01 23:57:40 -08:00

s3api_bucket_delete_test.go

s3: count stored versions as bucket contents on delete (#11775 )

2026-10-17 15:25:56 -07:00

s3api_bucket_handlers_list_test.go

s3: list every bucket when auth is off (#12077 )

2026-10-26 13:38:36 -07:00

s3api_bucket_handlers_misc_test.go

s3: let bucket-scoped Admin grants auto-create matching buckets (#12268 )

2026-10-31 05:04:56 -07:00

s3api_bucket_handlers_misc.go

s3api: align S3/IAM error responses with AWS (#11632 )

2026-10-07 21:02:38 +08:00

s3api_bucket_handlers_object_lock_config.go

Add table operations test (#8241 )

2026-02-07 13:27:47 -08:00

s3api_bucket_handlers.go

s3api: per-bucket Block Public Access (BlockPublicAcls, IgnorePublicAcls) (#12381 )

2026-11-03 14:52:20 -08:00

s3api_bucket_lifecycle_config.go

admin: add bucket lifecycle rule editing (#10860 )

2026-08-21 23:42:26 -07:00

s3api_bucket_lifecycle_fastpath_warn_test.go

s3: warn when a lifecycle change leaves fast-path-stamped objects on their old TTL (#11184 )

2026-09-05 12:13:37 -07:00

s3api_bucket_lifecycle_fastpath_warn.go

s3: warn when a lifecycle change leaves fast-path-stamped objects on their old TTL (#11184 )

2026-09-05 12:13:37 -07:00

s3api_bucket_lifecycle_response_test.go

s3: lazy, bounded, entry-free per-bucket caches (#10213 )

2026-07-02 21:11:34 -07:00

s3api_bucket_metadata_test.go

S3 API: Add SSE-KMS (#7144 )

2025-08-21 08:28:07 -07:00

s3api_bucket_missing_error_code_test.go

s3: answer NoSuchBucket for encryption and policy writes to a missing bucket (#12133 )

2026-10-27 13:07:05 -07:00

s3api_bucket_owner_index_test.go

s3: paginate ListBuckets and serve it from a bucket owner index (#10214 )

2026-07-02 21:11:41 -07:00

s3api_bucket_owner_index.go

weed filer.remote.sync: ignore .system directory under buckets (#11966 ) (#11969 )

2026-10-22 18:40:30 -07:00

s3api_bucket_policy_arn_test.go

s3api: fix AccessDenied by correctly propagating principal ARN in vended tokens (#8330 )

2026-02-12 23:11:41 -08:00

s3api_bucket_policy_authz_test.go

s3: require a bucket-policy action to write a bucket policy (#10444 )

2026-07-26 00:52:22 -07:00

s3api_bucket_policy_engine.go

s3api: persist ACLs on PutObject uploads (#11592 )

2026-10-05 09:13:19 +08:00

s3api_bucket_policy_handlers.go

s3api: per-bucket Block Public Access (BlockPublicAcls, IgnorePublicAcls) (#12381 )

2026-11-03 14:52:20 -08:00

s3api_bucket_policy_identity_deny_test.go

s3: evaluate tag conditions on copy-source and tagging subresources (#11771 )

2026-10-16 19:50:36 -07:00

s3api_bucket_policy_mirror_test.go

Fixes from the review of the admin bucket policy UI (#10907 )

2026-08-24 00:52:01 -07:00

s3api_bucket_quota_handlers_test.go

feat(s3api): add bucket quota S3 extension via ?seaweedfs-quota (#11279 )

2026-09-11 22:17:30 -07:00

s3api_bucket_quota_handlers.go

s3: drain request body before error response (#11334 )

2026-09-15 13:09:07 -07:00

s3api_bucket_subresource_routing_test.go

s3: allow-unordered is a listing parameter, not an unimplemented subresource (#10846 )

2026-08-19 20:09:23 -07:00

s3api_bucket_tagging_handlers_test.go

s3: allow up to 50 tags in a bucket tag set (#12030 )

2026-10-24 07:04:01 -07:00

s3api_bucket_tagging_handlers.go

s3: answer NoSuchBucket for encryption and policy writes to a missing bucket (#12133 )

2026-10-27 13:07:05 -07:00

s3api_chunk_manifest_test.go

filer: pack SSE chunks into manifests (#11175 )

2026-09-05 10:16:17 -07:00

s3api_chunk_manifest.go

filer: guard FoundationDB 100KB value limit and pack earlier (#11161 )

2026-09-04 23:12:27 -07:00

s3api_circuit_breaker_test.go

s3, filer: bound the wait for an upload slot (#12559 )

2026-11-11 10:17:18 -08:00

s3api_circuit_breaker.go

s3, filer: bound the wait for an upload slot (#12559 )

2026-11-11 10:17:18 -08:00

s3api_copy_size_calculation.go

chore: remove ~50k lines of unreachable dead code (#8913 )

2026-04-03 16:04:27 -07:00

s3api_copy_source_classify_test.go

s3: route regular copy source reads to the write owner (#12173 )

2026-10-28 14:35:39 -07:00

s3api_copy_validation_test.go

s3api: reject SSE headers PutObject cannot honor, as CopyObject does (#11642 )

2026-10-09 12:43:04 +08:00

s3api_copy_validation.go

s3api: reject SSE headers PutObject cannot honor, as CopyObject does (#11642 )

2026-10-09 12:43:04 +08:00

s3api_directory_marker.go

s3: route regular copy source reads to the write owner (#12173 )

2026-10-28 14:35:39 -07:00

s3api_domain_test.go

fix: Use a mixed of virtual and path styles within a single subdomain (#7357 )

2025-10-24 01:45:22 -07:00

s3api_embedded_iam_authz_test.go

iam: optionally require an iam: grant for self-service access-key actions (#11937 )

2026-10-21 20:06:30 -07:00

s3api_embedded_iam_oidc.go

s3/iam: persist IAM-managed OIDC providers in the filer, and trust them after a restart (#11510 )

2026-09-29 11:51:39 +08:00

s3api_embedded_iam_role.go

s3/iam: manage roles through the IAM API, with an opt-in persistent role store (#11522 )

2026-09-30 20:45:47 +08:00

s3api_embedded_iam_targeted_test.go

iam: targeted writes for single-user IAM actions (#11877 )

2026-10-20 17:41:37 -07:00

s3api_embedded_iam_test.go

s3vectors: accept bodies up to the 32 MiB limit, report larger ones as a size error, log engine failures (#12320 )

2026-11-02 00:18:44 -08:00

s3api_embedded_iam_user_tags_test.go

s3api: align S3/IAM error responses with AWS (#11632 )

2026-10-07 21:02:38 +08:00

s3api_embedded_iam.go

vector: integrate engine health, admin management, and local deployment (#12517 )

2026-11-10 04:21:18 -08:00

s3api_encrypted_volume_copy_test.go

s3api: resolve volume data encryption in CopyObject SSE flows (#11646 ) (#11683 )

2026-10-10 10:59:36 +08:00

s3api_governance_permissions_test.go

s3: enforce dedicated Object Lock actions (#11362 )

2026-09-16 20:34:06 -07:00

s3api_handlers_failover_test.go

master, filer, s3api: bound the collection deletes that strand a caller (#11026 )

2026-08-28 16:32:30 -07:00

s3api_handlers.go

s3api: speed up recursive listing of branched directory trees (#12438 )

2026-11-06 09:28:41 -08:00

s3api_head_bucket_test.go

s3: answer NoSuchBucket for encryption and policy writes to a missing bucket (#12133 )

2026-10-27 13:07:05 -07:00

s3api_iam_oidc_test.go

s3api: align S3/IAM error responses with AWS (#11632 )

2026-10-07 21:02:38 +08:00

s3api_iam_role_test.go

s3/iam: manage roles through the IAM API, with an opt-in persistent role store (#11522 )

2026-09-30 20:45:47 +08:00

s3api_iceberg_credentials_test.go

s3, iceberg: record the access key a request was signed with (#11901 )

2026-10-21 20:33:08 -07:00

s3api_iceberg_credentials.go

s3: end a catalog-vended session with the access key it was vended for (#11945 )

2026-10-23 03:58:06 -07:00

s3api_iceberg_session_name_test.go

s3: end a catalog-vended session with the access key it was vended for (#11945 )

2026-10-23 03:58:06 -07:00

s3api_iceberg_vended_session_test.go

s3: end a catalog-vended session with the access key it was vended for (#11945 )

2026-10-23 03:58:06 -07:00

s3api_implicit_directory_test.go

Add table operations test (#8241 )

2026-02-07 13:27:47 -08:00

s3api_inline_policy_condition_test.go

fix(s3api): evaluate aws:SourceIp from the direct TCP peer, not forwarded headers (#11231 )

2026-09-08 15:09:31 -07:00

s3api_internal_lifecycle_test.go

s3 lifecycle: walker deletes carry the listed identity and must target the latest version (#12452 )

2026-11-06 09:39:12 -08:00

s3api_internal_lifecycle.go

s3 lifecycle: walker deletes carry the listed identity and must target the latest version (#12452 )

2026-11-06 09:39:12 -08:00

s3api_list_normalization_test.go

chore: execute goimports to format the code (#7983 )

2026-01-07 13:06:08 -08:00

s3api_list_parts_no_such_upload_test.go

s3api: exclude marker part in listObjectParts pagination (#11463 )

2026-09-26 11:58:23 +08:00

s3api_local_read_fallback_test.go

S3: commit GET status only after the first read succeeds (#10930 )

2026-08-24 16:14:52 -07:00

s3api_multipart_list_args_test.go

fix(s3): reject non-integer max-parts, part-number-marker and max-uploads (#12270 )

2026-10-31 05:10:50 -07:00

s3api_multipart_path_validation_test.go

[s3] validate indirect filer path inputs (#9931 )

2026-06-11 21:56:16 -07:00

s3api_multipart_ssekms_test.go

fix(s3api): stream multipart-SSE chunks lazily to avoid truncated GETs (#8908 ) (#9228 )

2026-04-26 16:31:42 -07:00

s3api_multipart_upload_entry_test.go

s3: an abort answered mid-part no longer leaves the upload completable (#11025 )

2026-08-28 16:12:09 -07:00

s3api_nextmarker_test.go

fix: S3 listing NextMarker missing intermediate directory component (#8089 )

2026-01-22 16:56:35 -08:00

s3api_object_acl_permissions_test.go

s3: allow PutObjectAcl when auth is off (#12155 )

2026-10-28 08:07:36 -07:00

s3api_object_ambiguous_route_test.go

s3api: make ambiguous routed-PUT recovery atomic and stop transaction replay (#11787 )

2026-10-17 21:36:39 -07:00

s3api_object_anonymous_cache_test.go

s3: keep '\' a literal object-key character behind -s3.allowBackslashInKey (#11911 )

2026-10-21 20:02:04 -07:00

s3api_object_anonymous_read_test.go

s3api: per-bucket Block Public Access (BlockPublicAcls, IgnorePublicAcls) (#12381 )

2026-11-03 14:52:20 -08:00

s3api_object_anonymous_read.go

s3api: per-bucket Block Public Access (BlockPublicAcls, IgnorePublicAcls) (#12381 )

2026-11-03 14:52:20 -08:00

s3api_object_delete_marker_response_test.go

s3: answer GET and HEAD of a delete marker as S3 does (#12051 )

2026-10-25 12:02:19 -07:00

s3api_object_handlers_acl_test.go

Fix object tagging writing back to the wrong object for nested keys (#10338 )

2026-07-15 02:31:51 -07:00

s3api_object_handlers_acl.go

s3api: per-bucket Block Public Access (BlockPublicAcls, IgnorePublicAcls) (#12381 )

2026-11-03 14:52:20 -08:00

s3api_object_handlers_attributes_test.go

s3api: report the stored checksum in GetObjectAttributes (#11529 )

2026-10-01 01:11:19 +08:00

s3api_object_handlers_attributes.go

s3: route regular copy source reads to the write owner (#12173 )

2026-10-28 14:35:39 -07:00

s3api_object_handlers_conditional_read_test.go

s3api: ignore response header overrides on anonymous requests

2026-10-12 02:49:55 -07:00

s3api_object_handlers_conditional_write_test.go

s3: answer a conditional write on a missing object with 404, not 412 (#11882 )

2026-10-20 23:43:30 -07:00

s3api_object_handlers_copy_acl_test.go

s3api: apply copy bucket-default SSE after the ACL re-auth (#12436 )

2026-11-06 09:08:44 -08:00

s3api_object_handlers_copy_alloc_test.go

fix(s3api): cap copy-chunk receive buffer to avoid append-grow blowup (#9420 )

2026-05-10 12:08:06 -07:00

s3api_object_handlers_copy_bench_test.go

s3: report the copied bytes' MD5 in UploadPartCopy ETags (#11884 )

2026-10-21 13:46:11 -07:00

s3api_object_handlers_copy_checksum_test.go

S3: quote ETag in CopyObject and UploadPartCopy XML responses (#11624 )

2026-10-06 18:05:15 +08:00

s3api_object_handlers_copy_chunk_upload_test.go

fix: cap pool retention so chunk-copy buffers don't hoard memory (#9422 )

2026-05-10 13:34:25 -07:00

s3api_object_handlers_copy_collection_test.go

filer: apply filerGroup prefix to bucket default collection (#12499 )

2026-11-10 21:12:49 -08:00

s3api_object_handlers_copy_default_encryption_test.go

s3api: resolve volume data encryption in CopyObject SSE flows (#11646 ) (#11683 )

2026-10-10 10:59:36 +08:00

s3api_object_handlers_copy_etag_test.go

s3api: cover the inline-content UploadPartCopy route at handler level (#11914 )

2026-10-21 14:15:04 -07:00

s3api_object_handlers_copy_mime_test.go

fix(s3api): preserve requested AES256 copy encryption (#10049 )

2026-06-22 22:19:24 -07:00

s3api_object_handlers_copy_part_sse.go

s3: keep multipart part encryption on the initiate-time decision (#12134 )

2026-10-27 09:13:04 -07:00

s3api_object_handlers_copy_self_reuse_test.go

s3: give a versioned metadata-only copy its own chunks (#10594 )

2026-08-05 20:29:28 -07:00

s3api_object_handlers_copy_storage_class_test.go

s3: accept a self-copy that changes the storage class (#12031 )

2026-10-24 07:06:20 -07:00

s3api_object_handlers_copy_stream_test.go

s3: honor assignment fsync in streaming copies (#12277 )

2026-10-31 05:28:54 -07:00

s3api_object_handlers_copy_stream.go

s3: honor assignment fsync in streaming copies (#12277 )

2026-10-31 05:28:54 -07:00

s3api_object_handlers_copy_unified.go

s3api: resolve volume data encryption in CopyObject SSE flows (#11646 ) (#11683 )

2026-10-10 10:59:36 +08:00

s3api_object_handlers_copy_version_header_test.go

s3: return x-amz-copy-source-version-id from CopyObject and UploadPartCopy (#12181 )

2026-10-28 15:49:37 -07:00

s3api_object_handlers_copy.go

filer: apply filerGroup prefix to bucket default collection (#12499 )

2026-11-10 21:12:49 -08:00

s3api_object_handlers_delete_test.go

s3: commit the delete marker in the owner's finalize transaction (#12432 )

2026-11-06 09:10:10 -08:00

s3api_object_handlers_delete.go

s3: route regular copy source reads to the write owner (#12173 )

2026-10-28 14:35:39 -07:00

s3api_object_handlers_dir_test.go

s3api: reject SSE headers PutObject cannot honor, as CopyObject does (#11642 )

2026-10-09 12:43:04 +08:00

s3api_object_handlers_extract_test.go

s3: extract zip members on PutObject (#11786 )

2026-10-16 21:07:05 -07:00

s3api_object_handlers_extract.go

s3: route regular copy source reads to the write owner (#12173 )

2026-10-28 14:35:39 -07:00

s3api_object_handlers_legal_hold.go

s3api: evaluate object-tag policy conditions on delete, ACL and lock operations (#11807 )

2026-10-17 22:30:32 -07:00

s3api_object_handlers_list_deleted_prefix_test.go

s3: give each prefix its own hidden-prefix probe budget (#11626 )

2026-10-07 20:53:39 +08:00

s3api_object_handlers_list_directory_marker_test.go

s3: list the size of a directory marker that has a body (#11830 )

2026-10-19 04:35:23 -07:00

s3api_object_handlers_list_directory_test.go

s3: no empty-directory marker in a "<dir>/" self-prefix listing (#11906 )

2026-10-21 14:03:02 -07:00

s3api_object_handlers_list_marker_before_prefix_test.go

s3: keep a listing's start position inside the requested prefix (#11493 )

2026-09-28 06:58:44 +08:00

s3api_object_handlers_list_prefetch.go

s3api: speed up recursive listing of branched directory trees (#12438 )

2026-11-06 09:28:41 -08:00

s3api_object_handlers_list_regression_test.go

s3: fix prefix filtering and delimiter pagination (#11962 )

2026-10-22 09:31:20 -07:00

s3api_object_handlers_list_test.go

weed/s3api: avoid truncated marker rescan in ListObjects (#12540 ) (#12541 )

2026-11-10 09:58:45 -08:00

s3api_object_handlers_list_token_test.go

weed/s3api: avoid truncated marker rescan in ListObjects (#12540 ) (#12541 )

2026-11-10 09:58:45 -08:00

s3api_object_handlers_list_traversal_test.go

s3api: speed up recursive listing of branched directory trees (#12438 )

2026-11-06 09:28:41 -08:00

s3api_object_handlers_list_versioned_test.go

s3api: validate ListObjectVersions max-keys and honor max-keys=0 (#11703 )

2026-10-10 22:36:43 +08:00

s3api_object_handlers_list.go

weed/s3api: avoid truncated marker rescan in ListObjects (#12540 ) (#12541 )

2026-11-10 09:58:45 -08:00

s3api_object_handlers_multipart.go

fix(s3api): reject an invalid storage class before uploading the body (#12354 )

2026-11-02 22:08:21 -08:00

s3api_object_handlers_postpolicy_authz_test.go

s3: store the POST Object acl on the uploaded object (#12567 )

2026-11-11 10:36:51 -08:00

s3api_object_handlers_postpolicy_test.go

s3: reject POST Object header fields with control characters (#12400 )

2026-11-04 09:43:48 -08:00

s3api_object_handlers_postpolicy.go

s3: store the POST Object acl on the uploaded object (#12567 )

2026-11-11 10:36:51 -08:00

s3api_object_handlers_put_ambiguous_test.go

s3api: mint a versioned PUT's id at commit, after the lock wait and the upload (#12454 )

2026-11-06 13:20:36 -08:00

s3api_object_handlers_put_checksum_test.go

fix(s3): honor ChecksumAlgorithm on presigned URL uploads (#9076 )

2026-04-14 21:52:49 -07:00

s3api_object_handlers_put_chunksize_test.go

s3: chunk uploads at the filer's maxMB (#10439 )

2026-07-25 11:30:02 -07:00

s3api_object_handlers_put_error_test.go

s3: return 403, not 500, when an over-quota bucket refuses a write (#11552 )

2026-10-01 22:21:03 +08:00

s3api_object_handlers_put.go

s3api: mint a versioned PUT's id at commit, after the lock wait and the upload (#12454 )

2026-11-06 13:20:36 -08:00

s3api_object_handlers_readonly_test.go

s3: report the copied bytes' MD5 in UploadPartCopy ETags (#11884 )

2026-10-21 13:46:11 -07:00

s3api_object_handlers_rename_test.go

s3: make RenameObject idempotent for a retried request (#11178 )

2026-09-05 11:48:42 -07:00

s3api_object_handlers_rename.go

s3: route regular copy source reads to the write owner (#12173 )

2026-10-28 14:35:39 -07:00

s3api_object_handlers_response_headers_test.go

s3api: stop echoing stored tags and internal attributes on GET/HEAD (#12053 )

2026-10-25 06:05:06 -07:00

s3api_object_handlers_retention.go

s3api: evaluate object-tag policy conditions on delete, ACL and lock operations (#11807 )

2026-10-17 22:30:32 -07:00

s3api_object_handlers_tagging_test.go

s3: allow up to 50 tags in a bucket tag set (#12030 )

2026-10-24 07:04:01 -07:00

s3api_object_handlers_tagging.go

s3: route regular copy source reads to the write owner (#12173 )

2026-10-28 14:35:39 -07:00

s3api_object_handlers.go

s3: return an error for GETs canceled before the first byte (#12502 )

2026-11-11 08:45:20 -08:00

s3api_object_lifecycle_ttl_test.go

s3: lazy, bounded, entry-free per-bucket caches (#10213 )

2026-07-02 21:11:34 -07:00

s3api_object_lifecycle_ttl.go

feat(s3api): apply lifecycle TTL at write time (#9377 )

2026-05-08 21:35:27 -07:00

s3api_object_lock_actions_authz_test.go

s3: mask anonymous misses behind AccessDenied unless the bucket is listable (#11857 )

2026-10-20 12:52:58 -07:00

s3api_object_lock_authz_test.go

s3: separate Object Lock configuration permission (#11361 )

2026-09-16 15:27:09 -07:00

s3api_object_lock_fix_test.go

s3: apply destination retention on copies instead of inheriting it (#11773 )

2026-10-16 19:52:10 -07:00

s3api_object_lock_headers_test.go

s3: require dedicated object-lock permissions for x-amz-object-lock-* headers (#11492 )

2026-09-27 20:17:12 +08:00

s3api_object_ownership_test.go

s3: lazy, bounded, entry-free per-bucket caches (#10213 )

2026-07-02 21:11:34 -07:00

s3api_object_part_number_test.go

s3: HeadObject with partNumber returns the part's size and 206 (#11166 )

2026-09-04 23:10:41 -07:00

s3api_object_range_test.go

s3: apply Range to HeadObject (#11856 )

2026-10-21 13:37:00 -07:00

s3api_object_retention_test.go

s3: keep transient object-entry errors out of ErrObjectNotFound (#12083 )

2026-10-26 11:52:15 -07:00

s3api_object_retention.go

s3: keep transient object-entry errors out of ErrObjectNotFound (#12083 )

2026-10-26 11:52:15 -07:00

s3api_object_routed_read_test.go

s3: route object reads to the key's owner filer (#9806 )

2026-06-03 00:12:28 -07:00

s3api_object_routed_read.go

s3: route regular copy source reads to the write owner (#12173 )

2026-10-28 14:35:39 -07:00

s3api_object_routed_write_test.go

s3: evaluate all conditional write headers under the object lock (#12211 )

2026-10-29 11:49:48 -07:00

s3api_object_routed_write.go

s3: evaluate all conditional write headers under the object lock (#12211 )

2026-10-29 11:49:48 -07:00

s3api_object_upload_acl_test.go

s3api: per-bucket Block Public Access (BlockPublicAcls, IgnorePublicAcls) (#12381 )

2026-11-03 14:52:20 -08:00

s3api_object_upload_acl.go

s3: store the POST Object acl on the uploaded object (#12567 )

2026-11-11 10:36:51 -08:00

s3api_object_versioned_finalize.go

s3api: mint a versioned PUT's id at commit, after the lock wait and the upload (#12454 )

2026-11-06 13:20:36 -08:00

s3api_object_versioned_put_order_test.go

s3api: mint a versioned PUT's id at commit, after the lock wait and the upload (#12454 )

2026-11-06 13:20:36 -08:00

s3api_object_versioning_delete_lookup_test.go

s3: don't report a version delete as done when the filer lookup failed (#12482 )

2026-11-08 05:06:52 -08:00

s3api_object_versioning_heal_test.go

fix(s3): make self-heal pointer persist CAS-bound against concurrent writers (#11627 )

2026-10-07 20:04:09 +08:00

s3api_object_versioning_list_prefix_test.go

s3api: push the listing prefix down to the filer in ListObjectVersions (#11070 )

2026-09-01 10:37:52 -07:00

s3api_object_versioning_lookup_retry_test.go

s3api: stop retrying a definitive NotFound in getLatestObjectVersion (#11067 )

2026-09-01 10:11:09 -07:00

s3api_object_versioning_pagination_test.go

S3: fix ListObjectVersions losing keys across page boundaries (#11598 )

2026-10-05 11:58:04 +08:00

s3api_object_versioning_self_heal_test.go

fix(s3): recover versioned reads when the .versions latest pointer is absent (#9782 )

2026-06-01 20:01:30 -07:00

s3api_object_versioning.go

s3: don't report a version delete as done when the filer lookup failed (#12482 )

2026-11-08 05:06:52 -08:00

s3api_part_boundary_test.go

S3: fold large chunk lists into manifest chunks on the direct write path (#10383 )

2026-07-21 00:08:05 -07:00

s3api_path_validation_test.go

[s3] validate indirect filer path inputs (#9931 )

2026-06-11 21:56:16 -07:00

s3api_path_validation.go

s3: close seaweedfs-quota policy-confusion gap (#11409 )

2026-09-20 23:34:57 -07:00

s3api_public_access_block_test.go

s3api: per-bucket Block Public Access (BlockPublicAcls, IgnorePublicAcls) (#12381 )

2026-11-03 14:52:20 -08:00

s3api_public_access_block.go

s3api: per-bucket Block Public Access (BlockPublicAcls, IgnorePublicAcls) (#12381 )

2026-11-03 14:52:20 -08:00

s3api_put_handlers.go

s3api: reject SSE headers PutObject cannot honor, as CopyObject does (#11642 )

2026-10-09 12:43:04 +08:00

s3api_put_object_helper_test.go

s3: accept signed streaming uploads when IAM is disabled (#11766 )

2026-10-16 21:10:38 -07:00

s3api_put_object_helper.go

s3: accept signed streaming uploads when IAM is disabled (#11766 )

2026-10-16 21:10:38 -07:00

s3api_remote_storage_test.go

s3: route regular copy source reads to the write owner (#12173 )

2026-10-28 14:35:39 -07:00

s3api_remote_versioned_path_test.go

s3: validate the version-id header used as a filer path segment (#11097 )

2026-09-02 11:36:58 -07:00

s3api_server_advertise_test.go

s3: register the advertised ip with the master (#10482 )

2026-07-29 10:30:46 -07:00

s3api_server_grpc_test.go

fix(s3): accept fresh admin tokens when context carries stale authorization (#12390 ) (#12397 )

2026-11-04 09:42:25 -08:00

s3api_server_grpc.go

fix(s3): accept fresh admin tokens when context carries stale authorization (#12390 ) (#12397 )

2026-11-04 09:42:25 -08:00

s3api_server_routing_test.go

s3: require their own actions to change a bucket's CORS or versioning (#12433 )

2026-11-06 09:12:00 -08:00

s3api_server.go

s3: store the POST Object acl on the uploaded object (#12567 )

2026-11-11 10:36:51 -08:00

s3api_sosapi.go

s3api: cap SOSAPI capacity by the reported physical disk bytes (#12118 )

2026-10-26 23:18:43 -07:00

s3api_sse_decrypt_test.go

fix(s3api): backfill multipart SSE-S3 metadata at completion (#9224 )

2026-04-25 23:06:37 -07:00

s3api_sse_s3_upload_test.go

S3: Directly read write volume servers (#7481 )

2025-11-18 23:18:35 -08:00

s3api_sse_stream_status_test.go

S3: commit SSE GET status only after the first read succeeds (#10935 )

2026-08-24 18:36:46 -07:00

s3api_status_handlers.go

vector: integrate engine health, admin management, and local deployment (#12517 )

2026-11-10 04:21:18 -08:00

s3api_storage_class_validation_test.go

fix(s3api): reject an invalid storage class before uploading the body (#12354 )

2026-11-02 22:08:21 -08:00

s3api_stream_error_test.go

s3: return an error for GETs canceled before the first byte (#12502 )

2026-11-11 08:45:20 -08:00

s3api_sts_assume_role_admin_scope_test.go

s3: keep an admin's role session scoped to the role (#10520 )

2026-07-31 19:50:59 -07:00

s3api_sts_assume_role_arn_shape_test.go

s3api: load document-style policies from the advanced IAM config (#10481 )

2026-07-29 10:30:30 -07:00

s3api_sts_assume_role_authz_test.go

sts: enforce session-policy explicit deny during role chaining (#10103 )

2026-06-24 21:38:21 -07:00

s3api_sts_assume_role_dispatch_test.go

fix(iam): four phase-3 follow-ups (provider scoping, public path wrapper, static mirror, claim-mode RoleArn) (#9333 )

2026-05-05 19:14:44 -07:00

s3api_sts_assume_role_empty_arn_test.go

fix(iam): four phase-3 follow-ups (provider scoping, public path wrapper, static mirror, claim-mode RoleArn) (#9333 )

2026-05-05 19:14:44 -07:00

s3api_sts_assume_role_test.go

s3/iam: manage roles through the IAM API, with an opt-in persistent role store (#11522 )

2026-09-30 20:45:47 +08:00

s3api_sts_audit_routing_test.go

s3: cover three untested STS paths (#10521 )

2026-07-31 23:56:04 -07:00

s3api_sts_duration_test.go

fix(s3api/sts): respect MaxSessionLength config in DurationSeconds validation (#11267 )

2026-09-10 23:03:32 -07:00

s3api_sts_get_caller_identity_handler_test.go

s3: cover three untested STS paths (#10521 )

2026-07-31 23:56:04 -07:00

s3api_sts_get_caller_identity_test.go

STS: add GetCallerIdentity support (#8893 )

2026-04-02 15:59:09 -07:00

s3api_sts_get_federation_token_test.go

s3api: tolerate session tokens on statically configured credentials (#11694 )

2026-10-10 10:11:24 +08:00

s3api_sts_web_identity_http_test.go

iam/oidc: drop single-use web-identity tokens and the jti replay cache (#12065 )

2026-10-25 12:04:59 -07:00

s3api_sts.go

s3api: tolerate session tokens on statically configured credentials (#11694 )

2026-10-10 10:11:24 +08:00

s3api_subresource_ambiguity_test.go

s3: reject requests carrying more than one routed subresource (#11942 )

2026-10-21 22:45:53 -07:00

s3api_subresource_ambiguity.go

s3: reject requests carrying more than one routed subresource (#11942 )

2026-10-21 22:45:53 -07:00

s3api_tables_auth_test.go

seaweed-vector: work on its defaults, and without identities or credentials (#12323 )

2026-11-01 23:52:30 -08:00

s3api_tables_maintenance_rest_test.go

s3tables: add the maintenance configuration APIs (#10773 )

2026-08-16 10:36:59 -07:00

s3api_tables_rename_rest_test.go

fix(s3tables): route REST RenameTable and refuse unrouted S3 Tables requests (#12446 )

2026-11-06 09:32:13 -08:00

s3api_tables_rest_validation_test.go

s3tables: allow hyphens in namespace and table names (#10093 )

2026-06-24 16:24:45 -07:00

s3api_tables_routing_test.go

fix(s3tables): route REST RenameTable and refuse unrouted S3 Tables requests (#12446 )

2026-11-06 09:32:13 -08:00

s3api_tables.go

fix(s3tables): route REST RenameTable and refuse unrouted S3 Tables requests (#12446 )

2026-11-06 09:32:13 -08:00

s3api_test.go

chore: execute goimports to format the code (#7983 )

2026-01-07 13:06:08 -08:00

s3api_vector_iam_test.go

vector: integrate engine health, admin management, and local deployment (#12517 )

2026-11-10 04:21:18 -08:00

s3api_vector_iam.go

vector: integrate engine health, admin management, and local deployment (#12517 )

2026-11-10 04:21:18 -08:00

s3api_version_id_test.go

[s3] validate indirect filer path inputs (#9931 )

2026-06-11 21:56:16 -07:00

s3api_version_id.go

filer.backup: add -s3.flattenVersions to mirror the current S3 view of versioned buckets (#12255 )

2026-10-30 09:09:05 -07:00

s3api_versioning_heal_log_test.go

feat(s3/versioning): grep-able heal logs + scan-anomaly diagnostics + audit cmd (#9468 )

2026-05-13 10:48:58 -07:00

s3api_versioning_reconciler_test.go

s3: share one retry allowance across a batch delete (#11001 )

2026-08-27 22:28:25 -07:00

s3api_versioning_reconciler.go

feat(s3/versioning): grep-able heal logs + scan-anomaly diagnostics + audit cmd (#9468 )

2026-05-13 10:48:58 -07:00

s3api_xml_timestamp_test.go

s3api: always write XML timestamps with three fractional digits (#11520 )

2026-09-30 16:22:31 +08:00

s3api_xsd_generated_helper.go

add s3test for sql (#5718 )

2024-07-04 11:00:41 -07:00

s3api_xsd_generated.go

s3api: always write XML timestamps with three fractional digits (#11520 )

2026-09-30 16:22:31 +08:00

sses3_multipart_repro_test.go

mount: version open file handles by filer log position (#10403 )

2026-07-23 17:44:02 -07:00

stats_test.go

fix(s3/audit): emit audit log for successful GET/HEAD (#9467 )

2026-05-13 09:24:59 -07:00

stats.go

s3: log each request at -v=2 (#10931 )

2026-08-24 18:39:30 -07:00

sts_packed_policy_test.go

feat(iam): STS web-identity AWS-fidelity polish (Phase 1) (#9318 )

2026-05-04 22:10:49 -07:00

sts_params_test.go

s3/iam: reuse one request id per request (#8538 )

2026-03-06 15:22:39 -08:00

sts_session_name_test.go

feat(iam): STS web-identity AWS-fidelity polish (Phase 1) (#9318 )

2026-05-04 22:10:49 -07:00

table_bucket_verify_object_test.go

s3tables: accept the external-volume verification object at a table bucket's root (#11900 )

2026-10-21 14:49:36 -07:00

tags_test.go

s3: allow up to 50 tags in a bucket tag set (#12030 )

2026-10-24 07:04:01 -07:00

tags.go

s3: allow up to 50 tags in a bucket tag set (#12030 )

2026-10-24 07:04:01 -07:00

README.txt

see https://blog.aqwari.net/xml-schema-go/

1. go get aqwari.net/xml/cmd/xsdgen
2. Add EncodingType element for ListBucketResult in AmazonS3.xsd
3. xsdgen -o s3api_xsd_generated.go -pkg s3api AmazonS3.xsd
4. Remove empty Grantee struct in s3api_xsd_generated.go
5. Remove xmlns: sed s'/http:\/\/s3.amazonaws.com\/doc\/2006-03-01\/\ //' s3api_xsd_generated.go