Do not require date header w/ none authentication

AWS S3 uses a date header to prevent replay attacks on signed
requests.  None authentication should not require this header.
Regression from 8c623c179c.  Fixes #17.
pull/20/head
Andrew Gaul 2014-10-14 17:17:21 -07:00
rodzic 4baaca86f9
commit 6792798347
1 zmienionych plików z 1 dodań i 1 usunięć

Wyświetl plik

@ -144,7 +144,7 @@ final class S3ProxyHandler extends AbstractHandler {
}
}
if (!hasDateHeader && !hasXAmzDateHeader &&
if (identity != null && !hasDateHeader && !hasXAmzDateHeader &&
request.getParameter("Expires") == null) {
sendSimpleErrorResponse(response, S3ErrorCode.ACCESS_DENIED);
baseRequest.setHandled(true);