Chris Lu 0ca1c19821 s3api: unify auth error handling across s3tables, iceberg and lance (#11381) ...

* s3api: fail closed when S3 Tables signature verification fails

* s3api: avoid nil Account dereference in S3 Tables auth log

* iceberg: return auth error instead of falling back to DefaultAllow

* lance: return auth error instead of falling back to DefaultAllow

* s3api: stop trusting client-supplied s3-account-id

The header is set by the server after successful authentication; scrub
inbound values alongside the other internal headers, and apply the same
admin guard to the header fallback branch of getAccountID that the
identity branch already has.

* test: cover table-catalog auth wrappers and principal resolution

* test: configure anonymous identity where catalog clients do not sign

* s3api: scrub s3-account-id after signature verification

2026-09-18 01:01:04 -07:00

..

errors.go

Lance catalog, and a Rust plugin worker to maintain it (#10841)

2026-08-19 22:59:56 -07:00

handlers_namespace.go

Lance catalog, and a Rust plugin worker to maintain it (#10841)

2026-08-19 22:59:56 -07:00

handlers_table.go

s3: confine a Lance catalog table location to the caller's own bucket (#10901)

2026-08-23 11:49:52 -07:00

handlers_test.go

s3: confine a Lance catalog table location to the caller's own bucket (#10901)

2026-08-23 11:49:52 -07:00

identifier_test.go

Lance catalog, and a Rust plugin worker to maintain it (#10841)

2026-08-19 22:59:56 -07:00

identifier.go

Lance catalog, and a Rust plugin worker to maintain it (#10841)

2026-08-19 22:59:56 -07:00

markers.go

Lance catalog, and a Rust plugin worker to maintain it (#10841)

2026-08-19 22:59:56 -07:00

server.go

s3api: unify auth error handling across s3tables, iceberg and lance (#11381)

2026-09-18 01:01:04 -07:00

storage.go

s3: confine a Lance catalog table location to the caller's own bucket (#10901)

2026-08-23 11:49:52 -07:00

types.go

Lance catalog, and a Rust plugin worker to maintain it (#10841)

2026-08-19 22:59:56 -07:00