Emit AccessDenied for empty Authorization header

pull/16/head
Andrew Gaul 2014-08-23 15:29:06 -07:00
rodzic 8042e9b490
commit d74a409f87
1 zmienionych plików z 6 dodań i 0 usunięć

Wyświetl plik

@ -152,6 +152,12 @@ final class S3ProxyHandler extends AbstractHandler {
identity, credential);
String headerAuthorization = request.getHeader(
HttpHeaders.AUTHORIZATION);
if (headerAuthorization == null) {
sendSimpleErrorResponse(response, S3ErrorCode.ACCESS_DENIED);
baseRequest.setHandled(true);
return;
}
String queryStringAuthorization = "AWS " +
request.getParameter("AWSAccessKeyId") + ":" +
request.getParameter("Signature");