The TestJWTAuthenticationFlow was failing because the IAM policies for
S3ReadOnlyRole and S3AdminRole were missing the 'sts:ValidateSession' action.
### Problem:
- JWT authentication was working correctly (tokens parsed successfully)
- But IsActionAllowed returned false for sts:ValidateSession action
- This caused all JWT auth tests to fail with errCode=1
### Solution:
- Added sts:ValidateSession action to S3ReadOnlyPolicy
- Added sts:ValidateSession action to S3AdminPolicy
- Both policies now include the required STS session validation permission
### Test Results:
✅ TestJWTAuthenticationFlow now passes 100% (6/6 test cases)
✅ Read-Only JWT Authentication: All operations work correctly
✅ Admin JWT Authentication: All operations work correctly
✅ JWT token parsing and validation: Fully functional
This ensures consistent policy definitions across all S3 API JWT tests,
matching the policies used in s3_end_to_end_test.go.
see https://blog.aqwari.net/xml-schema-go/
1. go get aqwari.net/xml/cmd/xsdgen
2. Add EncodingType element for ListBucketResult in AmazonS3.xsd
3. xsdgen -o s3api_xsd_generated.go -pkg s3api AmazonS3.xsd
4. Remove empty Grantee struct in s3api_xsd_generated.go
5. Remove xmlns: sed s'/http:\/\/s3.amazonaws.com\/doc\/2006-03-01\/\ //' s3api_xsd_generated.go
chrislu
b1260d9743