Zhengchao An 230e5fc31a fix(auth): POST-object lock fields and signed metadata=true listing 403s (#4959) ...

* fix(sse): surface unconfigured managed SSE as 400, fix POST SSE-S3 e2e

Managed SSE (SSE-S3 / bucket-default) on a server without KMS and without RUSTFS_SSE_S3_MASTER_KEY fails closed by design since #3564, but surfaced as 500 InternalError. Map the misconfiguration to InvalidRequest (400) and seed the local SSE master key in the anonymous POST-object SSE e2e tests; align the missing-from-policy test with the MinIO-compatible SSE field exemption (s3s#608). Re-admit the tests to the e2e-full profile (rustfs#4844).

* fix(auth): POST-object lock fields and signed metadata=true listing 403s

Two authorization surfaces returned 403 for allowed requests (rustfs#4845): the PutObject access hook demanded PutObjectRetention/PutObjectLegalHold IAM actions for POST-object form uploads whose lock fields are governed by the validated POST policy, and the metadata=true listing route never resolved SigV4-verified credentials into ReqInfo so signed requests were evaluated as anonymous. Skip the PUT-header lock actions for POST form uploads and resolve credentials in the metadata route; re-admit the four e2e tests to the e2e-full profile.

2026-07-18 10:44:53 +08:00

..

make

ci(coverage): add weekly cargo-llvm-cov baseline workflow (#4820)

2026-07-15 11:10:22 +08:00

migration-gate-floor.txt

ci: add count-floor guard to migration-critical test gate (#4673)

2026-07-10 20:55:52 +08:00

nextest.toml

fix(auth): POST-object lock fields and signed metadata=true listing 403s (#4959)

2026-07-18 10:44:53 +08:00

security-smoke-floor.txt

test(security): wire negative-auth suites into e2e-smoke with a count-floor guard (#4815)

2026-07-15 09:33:30 +08:00