Deuxfleurs/garage
41
56
Fork 73
Code Issues 99 Pull requests 14 Releases 30 Wiki Activity

garage_api(fixup): Verify Content-SHA256 header for multipart upload only when needed.
All checks were successful
continuous-integration/drone/pr Build is passing
Details

Browse source
This commit is contained in:
Jill 2022-01-14 14:09:18 +01:00
parent b2eda2c13e
commit 11a1f3f6cf
No known key found for this signature in database
GPG key ID: 09A5A2688F13FAC1
1 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
src/api/s3_put.rs
View file

@ -504,11 +504,11 @@ pub async fn handle_complete_multipart_upload(
upload_id: &str,
content_sha256: Option<Hash>,
) -> Result<Response<Body>, Error> {
let content_sha256 =
content_sha256.ok_or_bad_request("Request content hash not signed, aborting.")?;
let body = hyper::body::to_bytes(req.into_body()).await?;
verify_signed_content(content_sha256, &body[..])?;
if let Some(content_sha256) = content_sha256 {
verify_signed_content(content_sha256, &body[..])?;
}
let body_xml = roxmltree::Document::parse(std::str::from_utf8(&body)?)?;
let body_list_of_parts = parse_complete_multpart_upload_body(&body_xml)