mirror of
https://github.com/minio/minio.git
synced 2025-10-31 08:11:19 +01:00
113 lines
2.7 KiB
Go
113 lines
2.7 KiB
Go
//go:build ignore
|
|
// +build ignore
|
|
|
|
// Copyright (c) 2015-2022 MinIO, Inc.
|
|
//
|
|
// This file is part of MinIO Object Storage stack
|
|
//
|
|
// This program is free software: you can redistribute it and/or modify
|
|
// it under the terms of the GNU Affero General Public License as published by
|
|
// the Free Software Foundation, either version 3 of the License, or
|
|
// (at your option) any later version.
|
|
//
|
|
// This program is distributed in the hope that it will be useful
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
// GNU Affero General Public License for more details.
|
|
//
|
|
// You should have received a copy of the GNU Affero General Public License
|
|
// along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
package main
|
|
|
|
import (
|
|
"bytes"
|
|
"encoding/json"
|
|
"flag"
|
|
"fmt"
|
|
"io"
|
|
"log"
|
|
"net/http"
|
|
"strings"
|
|
)
|
|
|
|
var (
|
|
keyFile string
|
|
certFile string
|
|
)
|
|
|
|
func init() {
|
|
flag.StringVar(&keyFile, "key-file", "", "Path to TLS cert key file")
|
|
flag.StringVar(&certFile, "cert-file", "", "Path to TLS cert file")
|
|
}
|
|
|
|
func writeErrorResponse(w http.ResponseWriter, err error) {
|
|
w.WriteHeader(http.StatusBadRequest)
|
|
json.NewEncoder(w).Encode(map[string]string{
|
|
"error": fmt.Sprintf("%v", err),
|
|
})
|
|
}
|
|
|
|
type Result struct {
|
|
Result bool `json:"result"`
|
|
}
|
|
|
|
func mainHandler(w http.ResponseWriter, r *http.Request) {
|
|
body, err := io.ReadAll(r.Body)
|
|
if err != nil {
|
|
writeErrorResponse(w, err)
|
|
return
|
|
}
|
|
|
|
var out bytes.Buffer
|
|
json.Indent(&out, body, "", " ")
|
|
fmt.Printf("Received JSON payload:\n%s\n", out.String())
|
|
|
|
reqMap := make(map[string]interface{})
|
|
err = json.Unmarshal(body, &reqMap)
|
|
if err != nil {
|
|
writeErrorResponse(w, err)
|
|
return
|
|
}
|
|
|
|
m := reqMap["input"].(map[string]interface{})
|
|
accountValue := m["account"].(string)
|
|
actionValue := m["action"].(string)
|
|
|
|
// Allow user `minio` to perform any action.
|
|
var res Result
|
|
if accountValue == "minio" {
|
|
res.Result = true
|
|
} else {
|
|
// All other users may not perform any `s3:Put*` operations.
|
|
res.Result = true
|
|
if strings.HasPrefix(actionValue, "s3:Put") {
|
|
res.Result = false
|
|
}
|
|
}
|
|
fmt.Printf("account: %v | action: %v | allowed: %v\n", accountValue, actionValue, res.Result)
|
|
json.NewEncoder(w).Encode(res)
|
|
return
|
|
}
|
|
|
|
func main() {
|
|
flag.Parse()
|
|
serveFunc := func() error {
|
|
return http.ListenAndServe(":8080", nil)
|
|
}
|
|
|
|
if certFile != "" || keyFile != "" {
|
|
if certFile == "" || keyFile == "" {
|
|
log.Fatal("Please provide both a key file and a cert file to enable TLS.")
|
|
}
|
|
serveFunc = func() error {
|
|
return http.ListenAndServeTLS(":8080", certFile, keyFile, nil)
|
|
}
|
|
}
|
|
|
|
http.HandleFunc("/", mainHandler)
|
|
|
|
log.Print("Listening on :8080")
|
|
log.Fatal(serveFunc())
|
|
}
|