Jay HemnaniandChris Lu ecd716e0e2 s3: allow POST Object uploads when auth is off (#12273) ...

* s3: allow POST Object uploads when auth is off

With no identities configured every other handler skips authentication,
but PostPolicyBucketHandler still verified the form signature, so a
browser form upload failed with InvalidAccessKeyId (or a malformed
credential error without signature fields). Skip the signature check
when auth is off; the policy conditions are still enforced.

* s3: update AuthPostPolicy comment for the auth-off path

---------

Co-authored-by: Chris Lu <chris.lu@gmail.com>

2026-10-31 05:19:17 -07:00

..

admin

admin: warn on dashboard when cluster nodes run mixed versions (#12196)

2026-10-29 00:13:51 -07:00

cluster

vector: weed-vector registers to master; s3 discovers it there (#12146)

2026-10-28 00:58:31 -07:00

command

security: fail closed on gRPC TLS errors, verify dialed server identity (#12263)

2026-10-30 20:04:45 -07:00

credential

fix: clone protobuf snapshots without copying internal locks (#11968)

2026-10-22 18:38:33 -07:00

ec

ec.rebuild: remount shards the rebuild replaced, keep regenerated copies (#12193)

2026-10-29 00:58:30 -07:00

filer

security: fail closed on gRPC TLS errors, verify dialed server identity (#12263)

2026-10-30 20:04:45 -07:00

filer_client

fix: resolve gRPC DNS resolution issues in Kubernetes #8384 (#8387)

2026-02-19 15:46:02 -08:00

glog

go fmt

2026-04-10 17:31:14 -07:00

iam

iam/oidc: drop single-use web-identity tokens and the jti replay cache (#12065)

2026-10-25 12:04:59 -07:00

iamapi

iam: optionally require an iam: grant for self-service access-key actions (#11937)

2026-10-21 20:06:30 -07:00

images

image: add an optional public image processing gateway (#11593)

2026-10-05 19:49:02 +08:00

kms

kms/azure: fix encrypt/decrypt round trip for Azure Key Vault (#11692)

2026-10-10 23:40:19 +08:00

mount

mount: refuse to attach opens to a draining file handle (#12219)

2026-10-29 16:06:57 -07:00

mq

mq/kafka: wait for a filer to register instead of panicking on an empty list (#12019)

2026-10-24 07:09:43 -07:00

notification

filer,pb,mount: keep per-chunk cipher keys out of logs (#12085)

2026-10-26 11:52:56 -07:00

operation

fix(volume): return conflict and explicit proof for read-only upload refusals (#12236)

2026-10-29 23:33:56 -07:00

pb

backup: carry index-only tombstones through incremental copies (#12231)

2026-10-29 22:37:31 -07:00

placement

placement: let callers reject candidates placement cannot judge (#10581)

2026-08-05 00:18:22 -07:00

plugin/worker

admin: explain detection cooldowns and skipped scans (#12185)

2026-10-28 22:55:36 -07:00

query

filer: fail the request, not the process, when chunks cannot be resolved (#11685)

2026-10-10 23:39:29 +08:00

remote_storage

remote: reuse one guarded remote storage client per configuration (#12189)

2026-10-29 00:57:37 -07:00

replication

filer.backup: add -s3.flattenVersions to mirror the current S3 view of versioned buckets (#12255)

2026-10-30 09:09:05 -07:00

s3api

s3: allow POST Object uploads when auth is off (#12273)

2026-10-31 05:19:17 -07:00

security

security: fail closed on gRPC TLS errors, verify dialed server identity (#12263)

2026-10-30 20:04:45 -07:00

sequence

[nfs] Add NFS (#9067)

2026-04-14 20:48:24 -07:00

server

fix(volume): reject a negative suffix length in Range headers (#12269)

2026-10-31 05:09:14 -07:00

sftpd

sftp: fail rm and rmdir of a missing path, and mkdir of an existing one (#12168)

2026-10-28 08:11:21 -07:00

shell

vector: recheck master discovery quickly while no worker is cached (#12199)

2026-10-29 01:15:29 -07:00

static

adjust logo

2026-04-23 10:05:51 -07:00

stats

fix: clone protobuf snapshots without copying internal locks (#11968)

2026-10-22 18:38:33 -07:00

storage

volume.copy: drop the needle-map index a failed copy leaves behind (#12252)

2026-10-30 09:20:55 -07:00

telemetry

telemetry: keep only clusters that store at least 10 GiB (#11138)

2026-09-03 12:36:00 -07:00

topology

fix(volume): return conflict and explicit proof for read-only upload refusals (#12236)

2026-10-29 23:33:56 -07:00

util

util: do not bind outbound dials to a loopback -ip.bind (#12198)

2026-10-29 01:35:00 -07:00

wdclient

wdclient: regression test for the elapsed caller-deadline lookup path (#12154)

2026-10-28 01:08:04 -07:00

worker

iceberg maintenance: cache a remote-only file before reading it (#12191)

2026-10-29 11:13:23 -07:00

Makefile

Move SQL engine and PostgreSQL server to their own binaries (#8417)

2026-02-23 16:27:08 -08:00

weed.go

shell: exit non-zero when a piped command fails (#11117)

2026-09-02 22:12:51 -07:00