Compare commits

..

No commits in common. "fd8a49e71c2bec70a1eaac77f5a05c31610ad503" and "80b91d724d733247d6eabbb0a93fbf68969a822d" have entirely different histories.

297 changed files with 5936 additions and 8476 deletions

3
.gitignore vendored
View File

@ -13,6 +13,3 @@ node_modules/
# Coverage # Coverage
coverage/ coverage/
.nyc_output/ .nyc_output/
# TypeScript
build/

View File

@ -1,4 +0,0 @@
{
"tabWidth": 4,
"singleQuote": true
}

197
index.js Normal file
View File

@ -0,0 +1,197 @@
module.exports = {
auth: require('./lib/auth/auth'),
constants: require('./lib/constants'),
db: require('./lib/db'),
errors: require('./lib/errors.js'),
errorUtils: require('./lib/errorUtils'),
shuffle: require('./lib/shuffle'),
stringHash: require('./lib/stringHash'),
ipCheck: require('./lib/ipCheck'),
jsutil: require('./lib/jsutil'),
https: {
ciphers: require('./lib/https/ciphers.js'),
dhparam: require('./lib/https/dh2048.js'),
},
algorithms: {
list: require('./lib/algos/list/exportAlgos'),
listTools: {
DelimiterTools: require('./lib/algos/list/tools'),
},
cache: {
LRUCache: require('./lib/algos/cache/LRUCache'),
},
stream: {
MergeStream: require('./lib/algos/stream/MergeStream'),
},
SortedSet: require('./lib/algos/set/SortedSet'),
},
policies: {
evaluators: require('./lib/policyEvaluator/evaluator.js'),
validateUserPolicy: require('./lib/policy/policyValidator')
.validateUserPolicy,
evaluatePrincipal: require('./lib/policyEvaluator/principal'),
RequestContext: require('./lib/policyEvaluator/RequestContext.js'),
requestUtils: require('./lib/policyEvaluator/requestUtils'),
actionMaps: require('./lib/policyEvaluator/utils/actionMaps'),
},
Clustering: require('./lib/Clustering'),
testing: {
matrix: require('./lib/testing/matrix.js'),
},
versioning: {
VersioningConstants: require('./lib/versioning/constants.js')
.VersioningConstants,
Version: require('./lib/versioning/Version.js').Version,
VersionID: require('./lib/versioning/VersionID.js'),
},
network: {
http: {
server: require('./lib/network/http/server'),
},
rpc: require('./lib/network/rpc/rpc'),
level: require('./lib/network/rpc/level-net'),
rest: {
RESTServer: require('./lib/network/rest/RESTServer'),
RESTClient: require('./lib/network/rest/RESTClient'),
},
RoundRobin: require('./lib/network/RoundRobin'),
probe: {
ProbeServer: require('./lib/network/probe/ProbeServer'),
HealthProbeServer:
require('./lib/network/probe/HealthProbeServer.js'),
Utils: require('./lib/network/probe/Utils.js'),
},
kmip: require('./lib/network/kmip'),
kmipClient: require('./lib/network/kmip/Client'),
},
s3routes: {
routes: require('./lib/s3routes/routes'),
routesUtils: require('./lib/s3routes/routesUtils'),
},
s3middleware: {
userMetadata: require('./lib/s3middleware/userMetadata'),
convertToXml: require('./lib/s3middleware/convertToXml'),
escapeForXml: require('./lib/s3middleware/escapeForXml'),
objectLegalHold: require('./lib/s3middleware/objectLegalHold'),
tagging: require('./lib/s3middleware/tagging'),
checkDateModifiedHeaders:
require('./lib/s3middleware/validateConditionalHeaders')
.checkDateModifiedHeaders,
validateConditionalHeaders:
require('./lib/s3middleware/validateConditionalHeaders')
.validateConditionalHeaders,
MD5Sum: require('./lib/s3middleware/MD5Sum'),
NullStream: require('./lib/s3middleware/nullStream'),
objectUtils: require('./lib/s3middleware/objectUtils'),
azureHelper: {
mpuUtils:
require('./lib/s3middleware/azureHelpers/mpuUtils'),
ResultsCollector:
require('./lib/s3middleware/azureHelpers/ResultsCollector'),
SubStreamInterface:
require('./lib/s3middleware/azureHelpers/SubStreamInterface'),
},
prepareStream: require('./lib/s3middleware/prepareStream'),
processMpuParts: require('./lib/s3middleware/processMpuParts'),
retention: require('./lib/s3middleware/objectRetention'),
lifecycleHelpers: require('./lib/s3middleware/lifecycleHelpers'),
},
storage: {
metadata: {
MetadataWrapper: require('./lib/storage/metadata/MetadataWrapper'),
bucketclient: {
BucketClientInterface:
require('./lib/storage/metadata/bucketclient/' +
'BucketClientInterface'),
LogConsumer:
require('./lib/storage/metadata/bucketclient/LogConsumer'),
},
file: {
BucketFileInterface:
require('./lib/storage/metadata/file/BucketFileInterface'),
MetadataFileServer:
require('./lib/storage/metadata/file/MetadataFileServer'),
MetadataFileClient:
require('./lib/storage/metadata/file/MetadataFileClient'),
},
inMemory: {
metastore:
require('./lib/storage/metadata/in_memory/metastore'),
metadata: require('./lib/storage/metadata/in_memory/metadata'),
bucketUtilities:
require('./lib/storage/metadata/in_memory/bucket_utilities'),
},
mongoclient: {
MongoClientInterface:
require('./lib/storage/metadata/mongoclient/' +
'MongoClientInterface'),
LogConsumer:
require('./lib/storage/metadata/mongoclient/LogConsumer'),
},
proxy: {
Server: require('./lib/storage/metadata/proxy/Server'),
},
},
data: {
DataWrapper: require('./lib/storage/data/DataWrapper'),
MultipleBackendGateway:
require('./lib/storage/data/MultipleBackendGateway'),
parseLC: require('./lib/storage/data/LocationConstraintParser'),
file: {
DataFileStore:
require('./lib/storage/data/file/DataFileStore'),
DataFileInterface:
require('./lib/storage/data/file/DataFileInterface'),
},
external: {
AwsClient: require('./lib/storage/data/external/AwsClient'),
AzureClient: require('./lib/storage/data/external/AzureClient'),
GcpClient: require('./lib/storage/data/external/GcpClient'),
GCP: require('./lib/storage/data/external/GCP/GcpService'),
GcpUtils: require('./lib/storage/data/external/GCP/GcpUtils'),
GcpSigner: require('./lib/storage/data/external/GCP/GcpSigner'),
PfsClient: require('./lib/storage/data/external/PfsClient'),
backendUtils: require('./lib/storage/data/external/utils'),
},
inMemory: {
datastore: require('./lib/storage/data/in_memory/datastore'),
},
},
utils: require('./lib/storage/utils'),
},
models: {
BackendInfo: require('./lib/models/BackendInfo'),
BucketInfo: require('./lib/models/BucketInfo'),
BucketAzureInfo: require('./lib/models/BucketAzureInfo'),
ObjectMD: require('./lib/models/ObjectMD'),
ObjectMDLocation: require('./lib/models/ObjectMDLocation'),
ObjectMDAzureInfo: require('./lib/models/ObjectMDAzureInfo'),
ARN: require('./lib/models/ARN'),
WebsiteConfiguration: require('./lib/models/WebsiteConfiguration'),
ReplicationConfiguration:
require('./lib/models/ReplicationConfiguration'),
LifecycleConfiguration:
require('./lib/models/LifecycleConfiguration'),
LifecycleRule: require('./lib/models/LifecycleRule'),
BucketPolicy: require('./lib/models/BucketPolicy'),
ObjectLockConfiguration:
require('./lib/models/ObjectLockConfiguration'),
NotificationConfiguration:
require('./lib/models/NotificationConfiguration'),
},
metrics: {
StatsClient: require('./lib/metrics/StatsClient'),
StatsModel: require('./lib/metrics/StatsModel'),
RedisClient: require('./lib/metrics/RedisClient'),
ZenkoMetrics: require('./lib/metrics/ZenkoMetrics'),
},
pensieve: {
credentialUtils: require('./lib/executables/pensieveCreds/utils'),
},
stream: {
readJSONStreamObject: require('./lib/stream/readJSONStreamObject'),
},
patches: {
locationConstraints: require('./lib/patches/locationConstraints'),
},
};

192
index.ts
View File

@ -1,192 +0,0 @@
export * as auth from './lib/auth/auth'
export { default as constants } from './lib/constants'
export { default as errors } from './lib/errors'
export { default as shuffle } from './lib/shuffle'
export { default as stringHash } from './lib/stringHash'
export * as db from './lib/db'
export * as errorUtils from './lib/errorUtils'
export * as ipCheck from './lib/ipCheck'
export * as jsutil from './lib/jsutil'
export * as https from './lib/https'
// algorithms: {
// list: require('./lib/algos/list/exportAlgos'),
// listTools: {
// DelimiterTools: require('./lib/algos/list/tools'),
// },
// cache: {
// LRUCache: require('./lib/algos/cache/LRUCache'),
// },
// stream: {
// MergeStream: require('./lib/algos/stream/MergeStream'),
// },
// SortedSet: require('./lib/algos/set/SortedSet'),
// },
// policies: {
// evaluators: require('./lib/policyEvaluator/evaluator.js'),
// validateUserPolicy: require('./lib/policy/policyValidator')
// .validateUserPolicy,
// evaluatePrincipal: require('./lib/policyEvaluator/principal'),
// RequestContext: require('./lib/policyEvaluator/RequestContext.js'),
// requestUtils: require('./lib/policyEvaluator/requestUtils'),
// actionMaps: require('./lib/policyEvaluator/utils/actionMaps'),
// },
// Clustering: require('./lib/Clustering'),
// testing: {
// matrix: require('./lib/testing/matrix.js'),
// },
// versioning: {
// VersioningConstants: require('./lib/versioning/constants.js')
// .VersioningConstants,
// Version: require('./lib/versioning/Version.js').Version,
// VersionID: require('./lib/versioning/VersionID.js'),
// },
// network: {
// http: {
// server: require('./lib/network/http/server'),
// },
// rpc: require('./lib/network/rpc/rpc'),
// level: require('./lib/network/rpc/level-net'),
// rest: {
// RESTServer: require('./lib/network/rest/RESTServer'),
// RESTClient: require('./lib/network/rest/RESTClient'),
// },
// RoundRobin: require('./lib/network/RoundRobin'),
// probe: {
// ProbeServer: require('./lib/network/probe/ProbeServer'),
// HealthProbeServer:
// require('./lib/network/probe/HealthProbeServer.js'),
// Utils: require('./lib/network/probe/Utils.js'),
// },
// kmip: require('./lib/network/kmip'),
// kmipClient: require('./lib/network/kmip/Client'),
// },
// s3routes: {
// routes: require('./lib/s3routes/routes'),
// routesUtils: require('./lib/s3routes/routesUtils'),
// },
// s3middleware: {
// userMetadata: require('./lib/s3middleware/userMetadata'),
// convertToXml: require('./lib/s3middleware/convertToXml'),
// escapeForXml: require('./lib/s3middleware/escapeForXml'),
// objectLegalHold: require('./lib/s3middleware/objectLegalHold'),
// tagging: require('./lib/s3middleware/tagging'),
// checkDateModifiedHeaders:
// require('./lib/s3middleware/validateConditionalHeaders')
// .checkDateModifiedHeaders,
// validateConditionalHeaders:
// require('./lib/s3middleware/validateConditionalHeaders')
// .validateConditionalHeaders,
// MD5Sum: require('./lib/s3middleware/MD5Sum'),
// NullStream: require('./lib/s3middleware/nullStream'),
// objectUtils: require('./lib/s3middleware/objectUtils'),
// azureHelper: {
// mpuUtils:
// require('./lib/s3middleware/azureHelpers/mpuUtils'),
// ResultsCollector:
// require('./lib/s3middleware/azureHelpers/ResultsCollector'),
// SubStreamInterface:
// require('./lib/s3middleware/azureHelpers/SubStreamInterface'),
// },
// prepareStream: require('./lib/s3middleware/prepareStream'),
// processMpuParts: require('./lib/s3middleware/processMpuParts'),
// retention: require('./lib/s3middleware/objectRetention'),
// lifecycleHelpers: require('./lib/s3middleware/lifecycleHelpers'),
// },
// storage: {
// metadata: {
// MetadataWrapper: require('./lib/storage/metadata/MetadataWrapper'),
// bucketclient: {
// BucketClientInterface:
// require('./lib/storage/metadata/bucketclient/' +
// 'BucketClientInterface'),
// LogConsumer:
// require('./lib/storage/metadata/bucketclient/LogConsumer'),
// },
// file: {
// BucketFileInterface:
// require('./lib/storage/metadata/file/BucketFileInterface'),
// MetadataFileServer:
// require('./lib/storage/metadata/file/MetadataFileServer'),
// MetadataFileClient:
// require('./lib/storage/metadata/file/MetadataFileClient'),
// },
// inMemory: {
// metastore:
// require('./lib/storage/metadata/in_memory/metastore'),
// metadata: require('./lib/storage/metadata/in_memory/metadata'),
// bucketUtilities:
// require('./lib/storage/metadata/in_memory/bucket_utilities'),
// },
// mongoclient: {
// MongoClientInterface:
// require('./lib/storage/metadata/mongoclient/' +
// 'MongoClientInterface'),
// LogConsumer:
// require('./lib/storage/metadata/mongoclient/LogConsumer'),
// },
// proxy: {
// Server: require('./lib/storage/metadata/proxy/Server'),
// },
// },
// data: {
// DataWrapper: require('./lib/storage/data/DataWrapper'),
// MultipleBackendGateway:
// require('./lib/storage/data/MultipleBackendGateway'),
// parseLC: require('./lib/storage/data/LocationConstraintParser'),
// file: {
// DataFileStore:
// require('./lib/storage/data/file/DataFileStore'),
// DataFileInterface:
// require('./lib/storage/data/file/DataFileInterface'),
// },
// external: {
// AwsClient: require('./lib/storage/data/external/AwsClient'),
// AzureClient: require('./lib/storage/data/external/AzureClient'),
// GcpClient: require('./lib/storage/data/external/GcpClient'),
// GCP: require('./lib/storage/data/external/GCP/GcpService'),
// GcpUtils: require('./lib/storage/data/external/GCP/GcpUtils'),
// GcpSigner: require('./lib/storage/data/external/GCP/GcpSigner'),
// PfsClient: require('./lib/storage/data/external/PfsClient'),
// backendUtils: require('./lib/storage/data/external/utils'),
// },
// inMemory: {
// datastore: require('./lib/storage/data/in_memory/datastore'),
// },
// },
// utils: require('./lib/storage/utils'),
// },
// models: {
// BackendInfo: require('./lib/models/BackendInfo'),
// BucketInfo: require('./lib/models/BucketInfo'),
// BucketAzureInfo: require('./lib/models/BucketAzureInfo'),
// ObjectMD: require('./lib/models/ObjectMD'),
// ObjectMDLocation: require('./lib/models/ObjectMDLocation'),
// ObjectMDAzureInfo: require('./lib/models/ObjectMDAzureInfo'),
// ARN: require('./lib/models/ARN'),
// WebsiteConfiguration: require('./lib/models/WebsiteConfiguration'),
// ReplicationConfiguration:
// require('./lib/models/ReplicationConfiguration'),
// LifecycleConfiguration:
// require('./lib/models/LifecycleConfiguration'),
// LifecycleRule: require('./lib/models/LifecycleRule'),
// BucketPolicy: require('./lib/models/BucketPolicy'),
// ObjectLockConfiguration:
// require('./lib/models/ObjectLockConfiguration'),
// NotificationConfiguration:
// require('./lib/models/NotificationConfiguration'),
// },
// metrics: {
// StatsClient: require('./lib/metrics/StatsClient'),
// StatsModel: require('./lib/metrics/StatsModel'),
// RedisClient: require('./lib/metrics/RedisClient'),
// ZenkoMetrics: require('./lib/metrics/ZenkoMetrics'),
// },
// pensieve: {
// credentialUtils: require('./lib/executables/pensieveCreds/utils'),
// },
// stream: {
// readJSONStreamObject: require('./lib/stream/readJSONStreamObject'),
// },
// patches: {
// locationConstraints: require('./lib/patches/locationConstraints'),
// },

View File

@ -1,6 +1,8 @@
import * as cluster from 'cluster'; 'use strict'; // eslint-disable-line
export default class Clustering { const cluster = require('cluster');
class Clustering {
/** /**
* Constructor * Constructor
* *
@ -257,3 +259,5 @@ export default class Clustering {
}); });
} }
} }
module.exports = Clustering;

View File

@ -1,4 +1,4 @@
import assert from 'assert'; const assert = require('assert');
/** /**
* @class * @class
@ -6,19 +6,13 @@ import assert from 'assert';
* number of items and a Least Recently Used (LRU) strategy for * number of items and a Least Recently Used (LRU) strategy for
* eviction. * eviction.
*/ */
export default class LRUCache { class LRUCache {
_maxEntries;
_entryMap;
_entryCount;
_lruTail;
_lruHead;
/** /**
* @constructor * @constructor
* @param maxEntries - maximum number of entries kept in * @param {number} maxEntries - maximum number of entries kept in
* the cache * the cache
*/ */
constructor(maxEntries: number) { constructor(maxEntries) {
assert(maxEntries >= 1); assert(maxEntries >= 1);
this._maxEntries = maxEntries; this._maxEntries = maxEntries;
this.clear(); this.clear();
@ -28,12 +22,12 @@ export default class LRUCache {
* Add or update the value associated to a key in the cache, * Add or update the value associated to a key in the cache,
* making it the most recently accessed for eviction purpose. * making it the most recently accessed for eviction purpose.
* *
* @param key - key to add * @param {string} key - key to add
* @param value - associated value (can be of any type) * @param {object} value - associated value (can be of any type)
* @return true if the cache contained an entry with * @return {boolean} true if the cache contained an entry with
* this key, false if it did not * this key, false if it did not
*/ */
add(key: string, value): boolean { add(key, value) {
let entry = this._entryMap[key]; let entry = this._entryMap[key];
if (entry) { if (entry) {
entry.value = value; entry.value = value;
@ -60,12 +54,12 @@ export default class LRUCache {
* Get the value associated to a key in the cache, making it the * Get the value associated to a key in the cache, making it the
* most recently accessed for eviction purpose. * most recently accessed for eviction purpose.
* *
* @param key - key of which to fetch the associated value * @param {string} key - key of which to fetch the associated value
* @return returns the associated value if * @return {object|undefined} - returns the associated value if
* exists in the cache, or undefined if not found - either if the * exists in the cache, or undefined if not found - either if the
* key was never added or if it has been evicted from the cache. * key was never added or if it has been evicted from the cache.
*/ */
get(key: string) { get(key) {
const entry = this._entryMap[key]; const entry = this._entryMap[key];
if (entry) { if (entry) {
// make the entry the most recently used by re-pushing it // make the entry the most recently used by re-pushing it
@ -80,12 +74,12 @@ export default class LRUCache {
/** /**
* Remove an entry from the cache if exists * Remove an entry from the cache if exists
* *
* @param key - key to remove * @param {string} key - key to remove
* @return true if an entry has been removed, false if * @return {boolean} true if an entry has been removed, false if
* there was no entry with this key in the cache - either if the * there was no entry with this key in the cache - either if the
* key was never added or if it has been evicted from the cache. * key was never added or if it has been evicted from the cache.
*/ */
remove(key: string): boolean { remove(key) {
const entry = this._entryMap[key]; const entry = this._entryMap[key];
if (entry) { if (entry) {
this._removeEntry(entry); this._removeEntry(entry);
@ -97,14 +91,16 @@ export default class LRUCache {
/** /**
* Get the current number of cached entries * Get the current number of cached entries
* *
* @return current number of cached entries * @return {number} current number of cached entries
*/ */
count(): number { count() {
return this._entryCount; return this._entryCount;
} }
/** /**
* Remove all entries from the cache * Remove all entries from the cache
*
* @return {undefined}
*/ */
clear() { clear() {
this._entryMap = {}; this._entryMap = {};
@ -117,7 +113,8 @@ export default class LRUCache {
* Push an entry to the front of the LRU list, making it the most * Push an entry to the front of the LRU list, making it the most
* recently accessed * recently accessed
* *
* @param entry - entry to push * @param {object} entry - entry to push
* @return {undefined}
*/ */
_lruPushEntry(entry) { _lruPushEntry(entry) {
/* eslint-disable no-param-reassign */ /* eslint-disable no-param-reassign */
@ -136,7 +133,8 @@ export default class LRUCache {
/** /**
* Remove an entry from the LRU list * Remove an entry from the LRU list
* *
* @param entry - entry to remove * @param {object} entry - entry to remove
* @return {undefined}
*/ */
_lruRemoveEntry(entry) { _lruRemoveEntry(entry) {
/* eslint-disable no-param-reassign */ /* eslint-disable no-param-reassign */
@ -156,7 +154,8 @@ export default class LRUCache {
/** /**
* Helper function to remove an existing entry from the cache * Helper function to remove an existing entry from the cache
* *
* @param entry - cache entry to remove * @param {object} entry - cache entry to remove
* @return {undefined}
*/ */
_removeEntry(entry) { _removeEntry(entry) {
this._lruRemoveEntry(entry); this._lruRemoveEntry(entry);
@ -164,3 +163,5 @@ export default class LRUCache {
this._entryCount -= 1; this._entryCount -= 1;
} }
} }
module.exports = LRUCache;

View File

@ -1,4 +1,7 @@
import { FILTER_SKIP, SKIP_NONE } from './tools'; 'use strict'; // eslint-disable-line strict
const { FILTER_SKIP, SKIP_NONE } = require('./tools');
// Use a heuristic to amortize the cost of JSON // Use a heuristic to amortize the cost of JSON
// serialization/deserialization only on largest metadata where the // serialization/deserialization only on largest metadata where the
// potential for size reduction is high, considering the bulk of the // potential for size reduction is high, considering the bulk of the
@ -19,12 +22,7 @@ const TRIM_METADATA_MIN_BLOB_SIZE = 10000;
/** /**
* Base class of listing extensions. * Base class of listing extensions.
*/ */
export default class Extension { class Extension {
parameters;
logger;
res?: any[];
keys: number;
/** /**
* This takes a list of parameters and a logger as the inputs. * This takes a list of parameters and a logger as the inputs.
* Derivatives should have their own format regarding parameters. * Derivatives should have their own format regarding parameters.
@ -53,14 +51,14 @@ export default class Extension {
* heavy unused fields, or left untouched (depending on size * heavy unused fields, or left untouched (depending on size
* heuristics) * heuristics)
*/ */
trimMetadata(value: string): string { trimMetadata(value) {
let ret: any = undefined; let ret = undefined;
if (value.length >= TRIM_METADATA_MIN_BLOB_SIZE) { if (value.length >= TRIM_METADATA_MIN_BLOB_SIZE) {
try { try {
ret = JSON.parse(value); ret = JSON.parse(value);
delete ret.location; delete ret.location;
ret = JSON.stringify(ret); ret = JSON.stringify(ret);
} catch (e: any) { } catch (e) {
// Prefer returning an unfiltered data rather than // Prefer returning an unfiltered data rather than
// stopping the service in case of parsing failure. // stopping the service in case of parsing failure.
// The risk of this approach is a potential // The risk of this approach is a potential
@ -68,8 +66,7 @@ export default class Extension {
// used by repd. // used by repd.
this.logger.warn( this.logger.warn(
'Could not parse Object Metadata while listing', 'Could not parse Object Metadata while listing',
{ err: e.toString() } { err: e.toString() });
);
} }
} }
return ret || value; return ret || value;
@ -99,7 +96,7 @@ export default class Extension {
* = 0: entry is accepted but not included (skipping) * = 0: entry is accepted but not included (skipping)
* < 0: entry is not accepted, listing should finish * < 0: entry is not accepted, listing should finish
*/ */
filter(entry): number { filter(entry) {
return entry ? FILTER_SKIP : FILTER_SKIP; return entry ? FILTER_SKIP : FILTER_SKIP;
} }
@ -108,18 +105,20 @@ export default class Extension {
* because it is skipping a range of delimited keys or a range of specific * because it is skipping a range of delimited keys or a range of specific
* version when doing master version listing. * version when doing master version listing.
* *
* @return the insight: a common prefix or a master key, * @return {string} - the insight: a common prefix or a master key,
* or SKIP_NONE if there is no insight * or SKIP_NONE if there is no insight
*/ */
skipping(): string | undefined { skipping() {
return SKIP_NONE; return SKIP_NONE;
} }
/** /**
* Get the listing resutls. Format depends on derivatives' specific logic. * Get the listing resutls. Format depends on derivatives' specific logic.
* @return The listed elements * @return {Array} - The listed elements
*/ */
result() { result() {
return this.res; return this.res;
} }
} }
module.exports.default = Extension;

View File

@ -1,12 +1,9 @@
import { 'use strict'; // eslint-disable-line strict
inc,
checkLimit, const { inc, checkLimit, listingParamsMasterKeysV0ToV1,
listingParamsMasterKeysV0ToV1, FILTER_END, FILTER_ACCEPT } = require('./tools');
FILTER_END,
FILTER_ACCEPT,
} from './tools';
const DEFAULT_MAX_KEYS = 1000; const DEFAULT_MAX_KEYS = 1000;
import { VersioningConstants as VSConst } from '../../versioning/constants'; const VSConst = require('../../versioning/constants').VersioningConstants;
const { DbPrefixes, BucketVersioningKeyFormat } = VSConst; const { DbPrefixes, BucketVersioningKeyFormat } = VSConst;
function numberDefault(num, defaultNum) { function numberDefault(num, defaultNum) {
@ -17,22 +14,7 @@ function numberDefault(num, defaultNum) {
/** /**
* Class for the MultipartUploads extension * Class for the MultipartUploads extension
*/ */
export class MultipartUploads { class MultipartUploads {
params
vFormat
CommonPrefixes
Uploads
IsTruncated
NextKeyMarker
NextUploadIdMarker
prefixLength
queryPrefixLength
keys
maxKeys
delimiter
splitter
logger
/** /**
* Constructor of the extension * Constructor of the extension
* Init and check parameters * Init and check parameters
@ -57,9 +39,7 @@ export class MultipartUploads {
this.splitter = params.splitter; this.splitter = params.splitter;
this.logger = logger; this.logger = logger;
Object.assign( Object.assign(this, {
this,
{
[BucketVersioningKeyFormat.v0]: { [BucketVersioningKeyFormat.v0]: {
genMDParams: this.genMDParamsV0, genMDParams: this.genMDParamsV0,
getObjectKey: this.getObjectKeyV0, getObjectKey: this.getObjectKeyV0,
@ -68,15 +48,13 @@ export class MultipartUploads {
genMDParams: this.genMDParamsV1, genMDParams: this.genMDParamsV1,
getObjectKey: this.getObjectKeyV1, getObjectKey: this.getObjectKeyV1,
}, },
}[this.vFormat] }[this.vFormat]);
);
} }
genMDParamsV0() { genMDParamsV0() {
const params = {}; const params = {};
if (this.params.keyMarker) { if (this.params.keyMarker) {
params.gt = params.gt = `overview${this.params.splitter}` +
`overview${this.params.splitter}` +
`${this.params.keyMarker}${this.params.splitter}`; `${this.params.keyMarker}${this.params.splitter}`;
if (this.params.uploadIdMarker) { if (this.params.uploadIdMarker) {
params.gt += `${this.params.uploadIdMarker}`; params.gt += `${this.params.uploadIdMarker}`;
@ -169,20 +147,14 @@ export class MultipartUploads {
if (this.delimiter) { if (this.delimiter) {
const mpuPrefixSlice = `overview${this.splitter}`.length; const mpuPrefixSlice = `overview${this.splitter}`.length;
const mpuKey = key.slice(mpuPrefixSlice); const mpuKey = key.slice(mpuPrefixSlice);
const commonPrefixIndex = mpuKey.indexOf( const commonPrefixIndex = mpuKey.indexOf(this.delimiter,
this.delimiter, this.queryPrefixLength);
this.queryPrefixLength
);
if (commonPrefixIndex === -1) { if (commonPrefixIndex === -1) {
this.addUpload(value); this.addUpload(value);
} else { } else {
this.addCommonPrefix( this.addCommonPrefix(mpuKey.substring(0,
mpuKey.substring( commonPrefixIndex + this.delimiter.length));
0,
commonPrefixIndex + this.delimiter.length
)
);
} }
} else { } else {
this.addUpload(value); this.addUpload(value);
@ -210,3 +182,7 @@ export class MultipartUploads {
}; };
} }
} }
module.exports = {
MultipartUploads,
};

View File

@ -1,17 +1,14 @@
import Extension from './Extension'; 'use strict'; // eslint-disable-line strict
import { checkLimit, FILTER_END, FILTER_ACCEPT, FILTER_SKIP } from './tools';
const Extension = require('./Extension').default;
const { checkLimit, FILTER_END, FILTER_ACCEPT, FILTER_SKIP } = require('./tools');
const DEFAULT_MAX_KEYS = 10000; const DEFAULT_MAX_KEYS = 10000;
/** /**
* Class of an extension doing the simple listing * Class of an extension doing the simple listing
*/ */
export class List extends Extension { class List extends Extension {
maxKeys: number;
filterKey;
filterKeyStartsWith;
res: any[];
/** /**
* Constructor * Constructor
* Set the logger and the res * Set the logger and the res
@ -33,17 +30,15 @@ export class List extends Extension {
} }
genMDParams() { genMDParams() {
const params = this.parameters const params = this.parameters ? {
? {
gt: this.parameters.gt, gt: this.parameters.gt,
gte: this.parameters.gte || this.parameters.start, gte: this.parameters.gte || this.parameters.start,
lt: this.parameters.lt, lt: this.parameters.lt,
lte: this.parameters.lte || this.parameters.end, lte: this.parameters.lte || this.parameters.end,
keys: this.parameters.keys, keys: this.parameters.keys,
values: this.parameters.values, values: this.parameters.values,
} } : {};
: {}; Object.keys(params).forEach(key => {
Object.keys(params).forEach((key) => {
if (params[key] === null || params[key] === undefined) { if (params[key] === null || params[key] === undefined) {
delete params[key]; delete params[key];
} }
@ -58,30 +53,29 @@ export class List extends Extension {
* *
* @return {Boolean} Returns true if matches, else false. * @return {Boolean} Returns true if matches, else false.
*/ */
customFilter(value: string): boolean { customFilter(value) {
let _value: any; let _value;
try { try {
_value = JSON.parse(value); _value = JSON.parse(value);
} catch (e: any) { } catch (e) {
// Prefer returning an unfiltered data rather than // Prefer returning an unfiltered data rather than
// stopping the service in case of parsing failure. // stopping the service in case of parsing failure.
// The risk of this approach is a potential // The risk of this approach is a potential
// reproduction of MD-692, where too much memory is // reproduction of MD-692, where too much memory is
// used by repd. // used by repd.
this.logger.warn('Could not parse Object Metadata while listing', { this.logger.warn(
err: e.toString(), 'Could not parse Object Metadata while listing',
}); { err: e.toString() });
return false; return false;
} }
if (_value.customAttributes !== undefined) { if (_value.customAttributes !== undefined) {
for (const key of Object.keys(_value.customAttributes)) { for (const key of Object.keys(_value.customAttributes)) {
if (this.filterKey !== undefined && key === this.filterKey) { if (this.filterKey !== undefined &&
key === this.filterKey) {
return true; return true;
} }
if ( if (this.filterKeyStartsWith !== undefined &&
this.filterKeyStartsWith !== undefined && key.startsWith(this.filterKeyStartsWith)) {
key.startsWith(this.filterKeyStartsWith)
) {
return true; return true;
} }
} }
@ -96,17 +90,15 @@ export class List extends Extension {
* @return {number} - > 0 : continue listing * @return {number} - > 0 : continue listing
* < 0 : listing done * < 0 : listing done
*/ */
filter(elem): number { filter(elem) {
// Check first in case of maxkeys <= 0 // Check first in case of maxkeys <= 0
if (this.keys >= this.maxKeys) { if (this.keys >= this.maxKeys) {
return FILTER_END; return FILTER_END;
} }
if ( if ((this.filterKey !== undefined ||
(this.filterKey !== undefined ||
this.filterKeyStartsWith !== undefined) && this.filterKeyStartsWith !== undefined) &&
typeof elem === 'object' && typeof elem === 'object' &&
!this.customFilter(elem.value) !this.customFilter(elem.value)) {
) {
return FILTER_SKIP; return FILTER_SKIP;
} }
if (typeof elem === 'object') { if (typeof elem === 'object') {
@ -129,3 +121,7 @@ export class List extends Extension {
return this.res; return this.res;
} }
} }
module.exports = {
List,
};

View File

@ -1,12 +1,9 @@
import Extension from './Extension'; 'use strict'; // eslint-disable-line strict
import {
inc, const Extension = require('./Extension').default;
listingParamsMasterKeysV0ToV1, const { inc, listingParamsMasterKeysV0ToV1,
FILTER_END, FILTER_END, FILTER_ACCEPT, FILTER_SKIP } = require('./tools');
FILTER_ACCEPT, const VSConst = require('../../versioning/constants').VersioningConstants;
FILTER_SKIP,
} from './tools';
import { VersioningConstants as VSConst } from '../../versioning/constants';
const { DbPrefixes, BucketVersioningKeyFormat } = VSConst; const { DbPrefixes, BucketVersioningKeyFormat } = VSConst;
/** /**
@ -17,11 +14,7 @@ const { DbPrefixes, BucketVersioningKeyFormat } = VSConst;
* @param {Number} delimiterIndex - 'folder' index in the path * @param {Number} delimiterIndex - 'folder' index in the path
* @return {String} - CommonPrefix * @return {String} - CommonPrefix
*/ */
function getCommonPrefix( function getCommonPrefix(key, delimiter, delimiterIndex) {
key: string,
delimiter: string,
delimiterIndex: number
): string {
return key.substring(0, delimiterIndex + delimiter.length); return key.substring(0, delimiterIndex + delimiter.length);
} }
@ -37,25 +30,7 @@ function getCommonPrefix(
* @prop {String|undefined} prefix - prefix per amazon format * @prop {String|undefined} prefix - prefix per amazon format
* @prop {Number} maxKeys - number of keys to list * @prop {Number} maxKeys - number of keys to list
*/ */
export class Delimiter extends Extension { class Delimiter extends Extension {
CommonPrefixes: string[];
Contents: string[];
IsTruncated: boolean;
NextMarker?: string;
keys: number;
delimiter?: string;
prefix?: string;
maxKeys: number;
marker;
startAfter;
continuationToken;
alphabeticalOrder;
vFormat;
NextContinuationToken;
startMarker;
continueMarker;
nextContinueMarker;
/** /**
* Create a new Delimiter instance * Create a new Delimiter instance
* @constructor * @constructor
@ -83,7 +58,6 @@ export class Delimiter extends Extension {
constructor(parameters, logger, vFormat) { constructor(parameters, logger, vFormat) {
super(parameters, logger); super(parameters, logger);
// original listing parameters // original listing parameters
this.keys = 0;
this.delimiter = parameters.delimiter; this.delimiter = parameters.delimiter;
this.prefix = parameters.prefix; this.prefix = parameters.prefix;
this.marker = parameters.marker; this.marker = parameters.marker;
@ -91,9 +65,8 @@ export class Delimiter extends Extension {
this.startAfter = parameters.startAfter; this.startAfter = parameters.startAfter;
this.continuationToken = parameters.continuationToken; this.continuationToken = parameters.continuationToken;
this.alphabeticalOrder = this.alphabeticalOrder =
typeof parameters.alphabeticalOrder !== 'undefined' typeof parameters.alphabeticalOrder !== 'undefined' ?
? parameters.alphabeticalOrder parameters.alphabeticalOrder : true;
: true;
this.vFormat = vFormat || BucketVersioningKeyFormat.v0; this.vFormat = vFormat || BucketVersioningKeyFormat.v0;
// results // results
@ -106,28 +79,21 @@ export class Delimiter extends Extension {
this.startMarker = parameters.v2 ? 'startAfter' : 'marker'; this.startMarker = parameters.v2 ? 'startAfter' : 'marker';
this.continueMarker = parameters.v2 ? 'continuationToken' : 'marker'; this.continueMarker = parameters.v2 ? 'continuationToken' : 'marker';
this.nextContinueMarker = parameters.v2 this.nextContinueMarker = parameters.v2 ?
? 'NextContinuationToken' 'NextContinuationToken' : 'NextMarker';
: 'NextMarker';
if ( if (this.delimiter !== undefined &&
this.delimiter !== undefined &&
this[this.nextContinueMarker] !== undefined && this[this.nextContinueMarker] !== undefined &&
this[this.nextContinueMarker].startsWith(this.prefix || '') this[this.nextContinueMarker].startsWith(this.prefix || '')) {
) { const nextDelimiterIndex =
const nextDelimiterIndex = this[this.nextContinueMarker].indexOf( this[this.nextContinueMarker].indexOf(this.delimiter,
this.delimiter, this.prefix ? this.prefix.length : 0);
this.prefix ? this.prefix.length : 0 this[this.nextContinueMarker] =
); this[this.nextContinueMarker].slice(0, nextDelimiterIndex +
this[this.nextContinueMarker] = this[this.nextContinueMarker].slice( this.delimiter.length);
0,
nextDelimiterIndex + this.delimiter.length
);
} }
Object.assign( Object.assign(this, {
this,
{
[BucketVersioningKeyFormat.v0]: { [BucketVersioningKeyFormat.v0]: {
genMDParams: this.genMDParamsV0, genMDParams: this.genMDParamsV0,
getObjectKey: this.getObjectKeyV0, getObjectKey: this.getObjectKeyV0,
@ -138,12 +104,11 @@ export class Delimiter extends Extension {
getObjectKey: this.getObjectKeyV1, getObjectKey: this.getObjectKeyV1,
skipping: this.skippingV1, skipping: this.skippingV1,
}, },
}[this.vFormat] }[this.vFormat]);
);
} }
genMDParamsV0() { genMDParamsV0() {
const params: { gte?: string; lt?: string; gt?: string } = {}; const params = {};
if (this.prefix) { if (this.prefix) {
params.gte = this.prefix; params.gte = this.prefix;
params.lt = inc(this.prefix); params.lt = inc(this.prefix);
@ -169,7 +134,7 @@ export class Delimiter extends Extension {
* final state of the result if it is the case * final state of the result if it is the case
* @return {Boolean} - indicates if the iteration has to stop * @return {Boolean} - indicates if the iteration has to stop
*/ */
_reachedMaxKeys(): boolean { _reachedMaxKeys() {
if (this.keys >= this.maxKeys) { if (this.keys >= this.maxKeys) {
// In cases of maxKeys <= 0 -> IsTruncated = false // In cases of maxKeys <= 0 -> IsTruncated = false
this.IsTruncated = this.maxKeys > 0; this.IsTruncated = this.maxKeys > 0;
@ -186,7 +151,7 @@ export class Delimiter extends Extension {
* @param {String} value - The value of the key * @param {String} value - The value of the key
* @return {number} - indicates if iteration should continue * @return {number} - indicates if iteration should continue
*/ */
addContents(key: string, value: string): number { addContents(key, value) {
if (this._reachedMaxKeys()) { if (this._reachedMaxKeys()) {
return FILTER_END; return FILTER_END;
} }
@ -196,11 +161,11 @@ export class Delimiter extends Extension {
return FILTER_ACCEPT; return FILTER_ACCEPT;
} }
getObjectKeyV0(obj: { key: string }) { getObjectKeyV0(obj) {
return obj.key; return obj.key;
} }
getObjectKeyV1(obj: { key: string }) { getObjectKeyV1(obj) {
return obj.key.slice(DbPrefixes.Master.length); return obj.key.slice(DbPrefixes.Master.length);
} }
@ -215,15 +180,13 @@ export class Delimiter extends Extension {
* @param {String} obj.value - The value of the element * @param {String} obj.value - The value of the element
* @return {number} - indicates if iteration should continue * @return {number} - indicates if iteration should continue
*/ */
filter(obj: { key: string; value: string }): number { filter(obj) {
const key = this.getObjectKey(obj); const key = this.getObjectKey(obj);
const value = obj.value; const value = obj.value;
if ( if ((this.prefix && !key.startsWith(this.prefix))
(this.prefix && !key.startsWith(this.prefix)) || || (this.alphabeticalOrder
(this.alphabeticalOrder && && typeof this[this.nextContinueMarker] === 'string'
typeof this[this.nextContinueMarker] === 'string' && && key <= this[this.nextContinueMarker])) {
key <= this[this.nextContinueMarker])
) {
return FILTER_SKIP; return FILTER_SKIP;
} }
if (this.delimiter) { if (this.delimiter) {
@ -243,12 +206,10 @@ export class Delimiter extends Extension {
* @param {Number} index - after prefix starting point * @param {Number} index - after prefix starting point
* @return {Boolean} - indicates if iteration should continue * @return {Boolean} - indicates if iteration should continue
*/ */
addCommonPrefix(key: string, index: number): boolean { addCommonPrefix(key, index) {
const commonPrefix = getCommonPrefix(key, this.delimiter, index); const commonPrefix = getCommonPrefix(key, this.delimiter, index);
if ( if (this.CommonPrefixes.indexOf(commonPrefix) === -1
this.CommonPrefixes.indexOf(commonPrefix) === -1 && && this[this.nextContinueMarker] !== commonPrefix) {
this[this.nextContinueMarker] !== commonPrefix
) {
if (this._reachedMaxKeys()) { if (this._reachedMaxKeys()) {
return FILTER_END; return FILTER_END;
} }
@ -267,7 +228,7 @@ export class Delimiter extends Extension {
* @return {string} - the present range (NextMarker) if repd believes * @return {string} - the present range (NextMarker) if repd believes
* that it's enough and should move on * that it's enough and should move on
*/ */
skippingV0(): string { skippingV0() {
return this[this.nextContinueMarker]; return this[this.nextContinueMarker];
} }
@ -278,7 +239,7 @@ export class Delimiter extends Extension {
* @return {string} - the present range (NextMarker) if repd believes * @return {string} - the present range (NextMarker) if repd believes
* that it's enough and should move on * that it's enough and should move on
*/ */
skippingV1(): string { skippingV1() {
return DbPrefixes.Master + this[this.nextContinueMarker]; return DbPrefixes.Master + this[this.nextContinueMarker];
} }
@ -300,17 +261,14 @@ export class Delimiter extends Extension {
Delimiter: this.delimiter, Delimiter: this.delimiter,
}; };
if (this.parameters.v2) { if (this.parameters.v2) {
//
result.NextContinuationToken = this.IsTruncated result.NextContinuationToken = this.IsTruncated
? this.NextContinuationToken ? this.NextContinuationToken : undefined;
: undefined;
} else { } else {
// result.NextMarker = (this.IsTruncated && this.delimiter)
result.NextMarker = ? this.NextMarker : undefined;
this.IsTruncated && this.delimiter
? this.NextMarker
: undefined;
} }
return result; return result;
} }
} }
module.exports = { Delimiter };

View File

@ -1,8 +1,10 @@
import { Delimiter } from './delimiter'; 'use strict'; // eslint-disable-line strict
import { Version } from '../../versioning/Version';
import { VersioningConstants as VSConst } from '../../versioning/constants'; const Delimiter = require('./delimiter').Delimiter;
const Version = require('../../versioning/Version').Version;
const VSConst = require('../../versioning/constants').VersioningConstants;
const { BucketVersioningKeyFormat } = VSConst; const { BucketVersioningKeyFormat } = VSConst;
import { FILTER_ACCEPT, FILTER_SKIP, SKIP_NONE } from './tools'; const { FILTER_ACCEPT, FILTER_SKIP, SKIP_NONE } = require('./tools');
const VID_SEP = VSConst.VersionId.Separator; const VID_SEP = VSConst.VersionId.Separator;
const { DbPrefixes } = VSConst; const { DbPrefixes } = VSConst;
@ -11,11 +13,7 @@ const { DbPrefixes } = VSConst;
* Handle object listing with parameters. This extends the base class Delimiter * Handle object listing with parameters. This extends the base class Delimiter
* to return the raw master versions of existing objects. * to return the raw master versions of existing objects.
*/ */
export class DelimiterMaster extends Delimiter { class DelimiterMaster extends Delimiter {
prvKey;
prvPHDKey;
inReplayPrefix;
/** /**
* Delimiter listing of master versions. * Delimiter listing of master versions.
* @param {Object} parameters - listing parameters * @param {Object} parameters - listing parameters
@ -36,9 +34,7 @@ export class DelimiterMaster extends Delimiter {
this.prvPHDKey = undefined; this.prvPHDKey = undefined;
this.inReplayPrefix = false; this.inReplayPrefix = false;
Object.assign( Object.assign(this, {
this,
{
[BucketVersioningKeyFormat.v0]: { [BucketVersioningKeyFormat.v0]: {
filter: this.filterV0, filter: this.filterV0,
skipping: this.skippingV0, skipping: this.skippingV0,
@ -47,8 +43,7 @@ export class DelimiterMaster extends Delimiter {
filter: this.filterV1, filter: this.filterV1,
skipping: this.skippingV1, skipping: this.skippingV1,
}, },
}[this.vFormat] }[this.vFormat]);
);
} }
/** /**
@ -63,7 +58,7 @@ export class DelimiterMaster extends Delimiter {
* @param {String} obj.value - The value of the element * @param {String} obj.value - The value of the element
* @return {number} - indicates if iteration should continue * @return {number} - indicates if iteration should continue
*/ */
filterV0(obj: { key: string; value: string }): number { filterV0(obj) {
let key = obj.key; let key = obj.key;
const value = obj.value; const value = obj.value;
@ -75,11 +70,9 @@ export class DelimiterMaster extends Delimiter {
/* Skip keys not starting with the prefix or not alphabetically /* Skip keys not starting with the prefix or not alphabetically
* ordered. */ * ordered. */
if ( if ((this.prefix && !key.startsWith(this.prefix))
(this.prefix && !key.startsWith(this.prefix)) || || (typeof this[this.nextContinueMarker] === 'string' &&
(typeof this[this.nextContinueMarker] === 'string' && key <= this[this.nextContinueMarker])) {
key <= this[this.nextContinueMarker])
) {
return FILTER_SKIP; return FILTER_SKIP;
} }
@ -102,12 +95,9 @@ export class DelimiterMaster extends Delimiter {
* NextMarker to the common prefix instead of the whole key * NextMarker to the common prefix instead of the whole key
* value. (TODO: remove this test once ZENKO-1048 is fixed) * value. (TODO: remove this test once ZENKO-1048 is fixed)
* */ * */
if ( if (key === this.prvKey || key === this[this.nextContinueMarker] ||
key === this.prvKey ||
key === this[this.nextContinueMarker] ||
(this.delimiter && (this.delimiter &&
key.startsWith(this[this.nextContinueMarker])) key.startsWith(this[this.nextContinueMarker]))) {
) {
/* master version already filtered */ /* master version already filtered */
return FILTER_SKIP; return FILTER_SKIP;
} }
@ -165,7 +155,7 @@ export class DelimiterMaster extends Delimiter {
* @param {String} obj.value - The value of the element * @param {String} obj.value - The value of the element
* @return {number} - indicates if iteration should continue * @return {number} - indicates if iteration should continue
*/ */
filterV1(obj: { key: string; value: string }): number { filterV1(obj) {
// Filtering master keys in v1 is simply listing the master // Filtering master keys in v1 is simply listing the master
// keys, as the state of version keys do not change the // keys, as the state of version keys do not change the
// result, so we can use Delimiter method directly. // result, so we can use Delimiter method directly.
@ -177,9 +167,8 @@ export class DelimiterMaster extends Delimiter {
// next marker or next continuation token: // next marker or next continuation token:
// - foo/ : skipping foo/ // - foo/ : skipping foo/
// - foo : skipping foo. // - foo : skipping foo.
const index = this[this.nextContinueMarker].lastIndexOf( const index = this[this.nextContinueMarker].
this.delimiter lastIndexOf(this.delimiter);
);
if (index === this[this.nextContinueMarker].length - 1) { if (index === this[this.nextContinueMarker].length - 1) {
return this[this.nextContinueMarker]; return this[this.nextContinueMarker];
} }
@ -203,3 +192,5 @@ export class DelimiterMaster extends Delimiter {
return DbPrefixes.Master + skipTo; return DbPrefixes.Master + skipTo;
} }
} }
module.exports = { DelimiterMaster };

View File

@ -1,13 +1,10 @@
import { Delimiter } from './delimiter'; 'use strict'; // eslint-disable-line strict
import { Version } from '../../versioning/Version';
import { VersioningConstants as VSConst } from '../../versioning/constants'; const Delimiter = require('./delimiter').Delimiter;
import { const Version = require('../../versioning/Version').Version;
inc, const VSConst = require('../../versioning/constants').VersioningConstants;
FILTER_END, const { inc, FILTER_END, FILTER_ACCEPT, FILTER_SKIP, SKIP_NONE } =
FILTER_ACCEPT, require('./tools');
FILTER_SKIP,
SKIP_NONE,
} from './tools';
const VID_SEP = VSConst.VersionId.Separator; const VID_SEP = VSConst.VersionId.Separator;
const { DbPrefixes, BucketVersioningKeyFormat } = VSConst; const { DbPrefixes, BucketVersioningKeyFormat } = VSConst;
@ -24,16 +21,7 @@ const { DbPrefixes, BucketVersioningKeyFormat } = VSConst;
* @prop {String|undefined} prefix - prefix per amazon format * @prop {String|undefined} prefix - prefix per amazon format
* @prop {Number} maxKeys - number of keys to list * @prop {Number} maxKeys - number of keys to list
*/ */
export class DelimiterVersions extends Delimiter { class DelimiterVersions extends Delimiter {
CommonPrefixes: string[];
Contents: string[];
IsTruncated: boolean;
NextMarker?: string;
keys: number;
delimiter?: string;
prefix?: string;
maxKeys: number;
constructor(parameters, logger, vFormat) { constructor(parameters, logger, vFormat) {
super(parameters, logger, vFormat); super(parameters, logger, vFormat);
// specific to version listing // specific to version listing
@ -47,9 +35,7 @@ export class DelimiterVersions extends Delimiter {
this.NextVersionIdMarker = undefined; this.NextVersionIdMarker = undefined;
this.inReplayPrefix = false; this.inReplayPrefix = false;
Object.assign( Object.assign(this, {
this,
{
[BucketVersioningKeyFormat.v0]: { [BucketVersioningKeyFormat.v0]: {
genMDParams: this.genMDParamsV0, genMDParams: this.genMDParamsV0,
filter: this.filterV0, filter: this.filterV0,
@ -60,8 +46,7 @@ export class DelimiterVersions extends Delimiter {
filter: this.filterV1, filter: this.filterV1,
skipping: this.skippingV1, skipping: this.skippingV1,
}, },
}[this.vFormat] }[this.vFormat]);
);
} }
genMDParamsV0() { genMDParamsV0() {
@ -78,10 +63,9 @@ export class DelimiterVersions extends Delimiter {
if (this.parameters.versionIdMarker) { if (this.parameters.versionIdMarker) {
// versionIdMarker should always come with keyMarker // versionIdMarker should always come with keyMarker
// but may not be the other way around // but may not be the other way around
params.gt = params.gt = this.parameters.keyMarker
this.parameters.keyMarker + + VID_SEP
VID_SEP + + this.parameters.versionIdMarker;
this.parameters.versionIdMarker;
} else { } else {
params.gt = inc(this.parameters.keyMarker + VID_SEP); params.gt = inc(this.parameters.keyMarker + VID_SEP);
} }
@ -105,27 +89,20 @@ export class DelimiterVersions extends Delimiter {
params[1].lt = inc(DbPrefixes.Version); // stop after the last version key params[1].lt = inc(DbPrefixes.Version); // stop after the last version key
} }
if (this.parameters.keyMarker) { if (this.parameters.keyMarker) {
if ( if (params[1].gte <= DbPrefixes.Version + this.parameters.keyMarker) {
params[1].gte <=
DbPrefixes.Version + this.parameters.keyMarker
) {
delete params[0].gte; delete params[0].gte;
delete params[1].gte; delete params[1].gte;
params[0].gt = params[0].gt = DbPrefixes.Master + inc(this.parameters.keyMarker + VID_SEP);
DbPrefixes.Master +
inc(this.parameters.keyMarker + VID_SEP);
if (this.parameters.versionIdMarker) { if (this.parameters.versionIdMarker) {
// versionIdMarker should always come with keyMarker // versionIdMarker should always come with keyMarker
// but may not be the other way around // but may not be the other way around
params[1].gt = params[1].gt = DbPrefixes.Version
DbPrefixes.Version + + this.parameters.keyMarker
this.parameters.keyMarker + + VID_SEP
VID_SEP + + this.parameters.versionIdMarker;
this.parameters.versionIdMarker;
} else { } else {
params[1].gt = params[1].gt = DbPrefixes.Version
DbPrefixes.Version + + inc(this.parameters.keyMarker + VID_SEP);
inc(this.parameters.keyMarker + VID_SEP);
} }
} }
} }
@ -143,7 +120,7 @@ export class DelimiterVersions extends Delimiter {
* * -1 if master key < version key * * -1 if master key < version key
* * 1 if master key > version key * * 1 if master key > version key
*/ */
compareObjects(masterObj, versionObj): number { compareObjects(masterObj, versionObj) {
const masterKey = masterObj.key.slice(DbPrefixes.Master.length); const masterKey = masterObj.key.slice(DbPrefixes.Master.length);
const versionKey = versionObj.key.slice(DbPrefixes.Version.length); const versionKey = versionObj.key.slice(DbPrefixes.Version.length);
return masterKey < versionKey ? -1 : 1; return masterKey < versionKey ? -1 : 1;
@ -159,11 +136,7 @@ export class DelimiterVersions extends Delimiter {
* @param {String} obj.value - The value of the key * @param {String} obj.value - The value of the key
* @return {Boolean} - indicates if iteration should continue * @return {Boolean} - indicates if iteration should continue
*/ */
addContents(obj: { addContents(obj) {
key: string;
versionId: string;
value: string;
}): boolean {
if (this._reachedMaxKeys()) { if (this._reachedMaxKeys()) {
return FILTER_END; return FILTER_END;
} }
@ -190,7 +163,7 @@ export class DelimiterVersions extends Delimiter {
* @param {String} obj.value - The value of the element * @param {String} obj.value - The value of the element
* @return {number} - indicates if iteration should continue * @return {number} - indicates if iteration should continue
*/ */
filterV0(obj: { key: string; value: string }): number { filterV0(obj) {
if (obj.key.startsWith(DbPrefixes.Replay)) { if (obj.key.startsWith(DbPrefixes.Replay)) {
this.inReplayPrefix = true; this.inReplayPrefix = true;
return FILTER_SKIP; return FILTER_SKIP;
@ -216,14 +189,12 @@ export class DelimiterVersions extends Delimiter {
* @param {String} obj.value - The value of the element * @param {String} obj.value - The value of the element
* @return {number} - indicates if iteration should continue * @return {number} - indicates if iteration should continue
*/ */
filterV1(obj: { key: string; value: string }): number { filterV1(obj) {
// this function receives both M and V keys, but their prefix // this function receives both M and V keys, but their prefix
// length is the same so we can remove their prefix without // length is the same so we can remove their prefix without
// looking at the type of key // looking at the type of key
return this.filterCommon( return this.filterCommon(obj.key.slice(DbPrefixes.Master.length),
obj.key.slice(DbPrefixes.Master.length), obj.value);
obj.value
);
} }
filterCommon(key, value) { filterCommon(key, value) {
@ -236,16 +207,14 @@ export class DelimiterVersions extends Delimiter {
if (versionIdIndex < 0) { if (versionIdIndex < 0) {
nonversionedKey = key; nonversionedKey = key;
this.masterKey = key; this.masterKey = key;
this.masterVersionId = Version.from(value).getVersionId() || 'null'; this.masterVersionId =
Version.from(value).getVersionId() || 'null';
versionId = this.masterVersionId; versionId = this.masterVersionId;
} else { } else {
nonversionedKey = key.slice(0, versionIdIndex); nonversionedKey = key.slice(0, versionIdIndex);
versionId = key.slice(versionIdIndex + 1); versionId = key.slice(versionIdIndex + 1);
// skip a version key if it is the master version // skip a version key if it is the master version
if ( if (this.masterKey === nonversionedKey && this.masterVersionId === versionId) {
this.masterKey === nonversionedKey &&
this.masterVersionId === versionId
) {
return FILTER_SKIP; return FILTER_SKIP;
} }
this.masterKey = undefined; this.masterKey = undefined;
@ -253,10 +222,7 @@ export class DelimiterVersions extends Delimiter {
} }
if (this.delimiter) { if (this.delimiter) {
const baseIndex = this.prefix ? this.prefix.length : 0; const baseIndex = this.prefix ? this.prefix.length : 0;
const delimiterIndex = nonversionedKey.indexOf( const delimiterIndex = nonversionedKey.indexOf(this.delimiter, baseIndex);
this.delimiter,
baseIndex
);
if (delimiterIndex >= 0) { if (delimiterIndex >= 0) {
return this.addCommonPrefix(nonversionedKey, delimiterIndex); return this.addCommonPrefix(nonversionedKey, delimiterIndex);
} }
@ -283,7 +249,8 @@ export class DelimiterVersions extends Delimiter {
return SKIP_NONE; return SKIP_NONE;
} }
// skip to the same object key in both M and V range listings // skip to the same object key in both M and V range listings
return [DbPrefixes.Master + skipV0, DbPrefixes.Version + skipV0]; return [DbPrefixes.Master + skipV0,
DbPrefixes.Version + skipV0];
} }
/** /**
@ -302,10 +269,11 @@ export class DelimiterVersions extends Delimiter {
Versions: this.Contents, Versions: this.Contents,
IsTruncated: this.IsTruncated, IsTruncated: this.IsTruncated,
NextKeyMarker: this.IsTruncated ? this.NextMarker : undefined, NextKeyMarker: this.IsTruncated ? this.NextMarker : undefined,
NextVersionIdMarker: this.IsTruncated NextVersionIdMarker: this.IsTruncated ?
? this.NextVersionIdMarker this.NextVersionIdMarker : undefined,
: undefined,
Delimiter: this.delimiter, Delimiter: this.delimiter,
}; };
} }
} }
module.exports = { DelimiterVersions };

View File

@ -1,25 +1,21 @@
import assert from 'assert'; const assert = require('assert');
import { FILTER_END, FILTER_SKIP, SKIP_NONE } from './tools';
const { FILTER_END, FILTER_SKIP, SKIP_NONE } = require('./tools');
const MAX_STREAK_LENGTH = 100; const MAX_STREAK_LENGTH = 100;
/** /**
* Handle the filtering and the skip mechanism of a listing result. * Handle the filtering and the skip mechanism of a listing result.
*/ */
export class Skip { class Skip {
extension;
gteParams;
listingEndCb;
skipRangeCb;
streakLength;
/** /**
* @param {Object} params - skip parameters * @param {Object} params - skip parameters
* @param {Object} params.extension - delimiter extension used (required) * @param {Object} params.extension - delimiter extension used (required)
* @param {String} params.gte - current range gte (greater than or * @param {String} params.gte - current range gte (greater than or
* equal) used by the client code * equal) used by the client code
*/ */
constructor(params: { extension: any; gte: string }) { constructor(params) {
assert(params.extension); assert(params.extension);
this.extension = params.extension; this.extension = params.extension;
@ -51,7 +47,7 @@ export class Skip {
* This function calls the listing end or the skip range callbacks if * This function calls the listing end or the skip range callbacks if
* needed. * needed.
*/ */
filter(entry): void { filter(entry) {
assert(this.listingEndCb); assert(this.listingEndCb);
assert(this.skipRangeCb); assert(this.skipRangeCb);
@ -60,10 +56,8 @@ export class Skip {
if (filteringResult === FILTER_END) { if (filteringResult === FILTER_END) {
this.listingEndCb(); this.listingEndCb();
} else if ( } else if (filteringResult === FILTER_SKIP
filteringResult === FILTER_SKIP && && skippingRange !== SKIP_NONE) {
skippingRange !== SKIP_NONE
) {
if (++this.streakLength >= MAX_STREAK_LENGTH) { if (++this.streakLength >= MAX_STREAK_LENGTH) {
const newRange = this._inc(skippingRange); const newRange = this._inc(skippingRange);
@ -79,7 +73,7 @@ export class Skip {
} }
} }
_inc(str: string) { _inc(str) {
if (!str) { if (!str) {
return str; return str;
} }
@ -89,3 +83,6 @@ export class Skip {
return `${str.slice(0, str.length - 1)}${lastCharNewValue}`; return `${str.slice(0, str.length - 1)}${lastCharNewValue}`;
} }
} }
module.exports = Skip;

View File

@ -1,11 +1,10 @@
import { VersioningConstants as VSConst } from '../../versioning/constants'; const { DbPrefixes } = require('../../versioning/constants').VersioningConstants;
const { DbPrefixes } = VSConst
// constants for extensions // constants for extensions
export const SKIP_NONE = undefined; // to be inline with the values of NextMarker const SKIP_NONE = undefined; // to be inline with the values of NextMarker
export const FILTER_ACCEPT = 1; const FILTER_ACCEPT = 1;
export const FILTER_SKIP = 0; const FILTER_SKIP = 0;
export const FILTER_END = -1; const FILTER_END = -1;
/** /**
* This function check if number is valid * This function check if number is valid
@ -16,8 +15,8 @@ export const FILTER_END = -1;
* @param {Number} limit - The limit to respect * @param {Number} limit - The limit to respect
* @return {Number} - The parsed number || limit * @return {Number} - The parsed number || limit
*/ */
export function checkLimit(number: number, limit: number): number { function checkLimit(number, limit) {
const parsed = Number.parseInt(number, 10) const parsed = Number.parseInt(number, 10);
const valid = !Number.isNaN(parsed) && (!limit || parsed <= limit); const valid = !Number.isNaN(parsed) && (!limit || parsed <= limit);
return valid ? parsed : limit; return valid ? parsed : limit;
} }
@ -29,7 +28,7 @@ export function checkLimit(number: number, limit: number): number {
* @return {string} - the incremented string * @return {string} - the incremented string
* or the input if it is not valid * or the input if it is not valid
*/ */
export function inc(str: string): string { function inc(str) {
return str ? (str.slice(0, str.length - 1) + return str ? (str.slice(0, str.length - 1) +
String.fromCharCode(str.charCodeAt(str.length - 1) + 1)) : str; String.fromCharCode(str.charCodeAt(str.length - 1) + 1)) : str;
} }
@ -41,7 +40,7 @@ export function inc(str: string): string {
* @param {object} v0params - listing parameters for v0 format * @param {object} v0params - listing parameters for v0 format
* @return {object} - listing parameters for v1 format * @return {object} - listing parameters for v1 format
*/ */
export function listingParamsMasterKeysV0ToV1(v0params: any): any { function listingParamsMasterKeysV0ToV1(v0params) {
const v1params = Object.assign({}, v0params); const v1params = Object.assign({}, v0params);
if (v0params.gt !== undefined) { if (v0params.gt !== undefined) {
v1params.gt = `${DbPrefixes.Master}${v0params.gt}`; v1params.gt = `${DbPrefixes.Master}${v0params.gt}`;
@ -59,3 +58,13 @@ export function listingParamsMasterKeysV0ToV1(v0params: any): any {
} }
return v1params; return v1params;
} }
module.exports = {
checkLimit,
inc,
listingParamsMasterKeysV0ToV1,
SKIP_NONE,
FILTER_END,
FILTER_SKIP,
FILTER_ACCEPT,
};

View File

@ -1,4 +1,4 @@
export function indexOf<T>(arr: T[], value: T) { function indexOf(arr, value) {
if (!arr.length) { if (!arr.length) {
return -1; return -1;
} }
@ -22,10 +22,10 @@ export function indexOf<T>(arr: T[], value: T) {
return -1; return -1;
} }
export function indexAtOrBelow<T>(arr: T[], value: T) { function indexAtOrBelow(arr, value) {
let i: number; let i;
let lo: number; let lo;
let hi: number; let hi;
if (!arr.length || arr[0] > value) { if (!arr.length || arr[0] > value) {
return -1; return -1;
@ -52,7 +52,7 @@ export function indexAtOrBelow<T>(arr: T[], value: T) {
/* /*
* perform symmetric diff in O(m + n) * perform symmetric diff in O(m + n)
*/ */
export function symDiff(k1, k2, v1, v2, cb) { function symDiff(k1, k2, v1, v2, cb) {
let i = 0; let i = 0;
let j = 0; let j = 0;
const n = k1.length; const n = k1.length;
@ -79,3 +79,9 @@ export function symDiff(k1, k2, v1, v2, cb) {
j++; j++;
} }
} }
module.exports = {
indexOf,
indexAtOrBelow,
symDiff,
};

View File

@ -1,12 +1,14 @@
import * as ArrayUtils from './ArrayUtils'; const ArrayUtils = require('./ArrayUtils');
export default class SortedSet<Key, Value> { class SortedSet {
keys: Key[];
values: Value[];
constructor(obj?: { keys: Key[]; values: Value[] }) { constructor(obj) {
this.keys = obj?.keys ?? []; if (obj) {
this.values = obj?.values ?? []; this.keys = obj.keys;
this.values = obj.values;
} else {
this.clear();
}
} }
clear() { clear() {
@ -18,7 +20,7 @@ export default class SortedSet<Key, Value> {
return this.keys.length; return this.keys.length;
} }
set(key: Key, value: Value) { set(key, value) {
const index = ArrayUtils.indexAtOrBelow(this.keys, key); const index = ArrayUtils.indexAtOrBelow(this.keys, key);
if (this.keys[index] === key) { if (this.keys[index] === key) {
this.values[index] = value; this.values[index] = value;
@ -28,17 +30,17 @@ export default class SortedSet<Key, Value> {
this.values.splice(index + 1, 0, value); this.values.splice(index + 1, 0, value);
} }
isSet(key: Key) { isSet(key) {
const index = ArrayUtils.indexOf(this.keys, key); const index = ArrayUtils.indexOf(this.keys, key);
return index >= 0; return index >= 0;
} }
get(key: Key) { get(key) {
const index = ArrayUtils.indexOf(this.keys, key); const index = ArrayUtils.indexOf(this.keys, key);
return index >= 0 ? this.values[index] : undefined; return index >= 0 ? this.values[index] : undefined;
} }
del(key: Key) { del(key) {
const index = ArrayUtils.indexOf(this.keys, key); const index = ArrayUtils.indexOf(this.keys, key);
if (index >= 0) { if (index >= 0) {
this.keys.splice(index, 1); this.keys.splice(index, 1);
@ -46,3 +48,5 @@ export default class SortedSet<Key, Value> {
} }
} }
} }
module.exports = SortedSet;

View File

@ -1,17 +1,7 @@
import stream from 'stream'; const stream = require('stream');
export default class MergeStream extends stream.Readable { class MergeStream extends stream.Readable {
_compare: (a: any, b: any) => number; constructor(stream1, stream2, compare) {
_streams: [stream.Readable, stream.Readable];
_peekItems: [undefined | null, undefined | null];
_streamEof: [boolean, boolean];
_streamToResume: stream.Readable | null;
constructor(
stream1: stream.Readable,
stream2: stream.Readable,
compare: (a: any, b: any) => number
) {
super({ objectMode: true }); super({ objectMode: true });
this._compare = compare; this._compare = compare;
@ -26,13 +16,13 @@ export default class MergeStream extends stream.Readable {
this._streamEof = [false, false]; this._streamEof = [false, false];
this._streamToResume = null; this._streamToResume = null;
stream1.on('data', (item) => this._onItem(stream1, item, 0, 1)); stream1.on('data', item => this._onItem(stream1, item, 0, 1));
stream1.once('end', () => this._onEnd(stream1, 0, 1)); stream1.once('end', () => this._onEnd(stream1, 0, 1));
stream1.once('error', (err) => this._onError(stream1, err, 0, 1)); stream1.once('error', err => this._onError(stream1, err, 0, 1));
stream2.on('data', (item) => this._onItem(stream2, item, 1, 0)); stream2.on('data', item => this._onItem(stream2, item, 1, 0));
stream2.once('end', () => this._onEnd(stream2, 1, 0)); stream2.once('end', () => this._onEnd(stream2, 1, 0));
stream2.once('error', (err) => this._onError(stream2, err, 1, 0)); stream2.once('error', err => this._onError(stream2, err, 1, 0));
} }
_read() { _read() {
@ -51,7 +41,7 @@ export default class MergeStream extends stream.Readable {
callback(); callback();
} }
_onItem(myStream: stream.Readable, myItem, myIndex, otherIndex) { _onItem(myStream, myItem, myIndex, otherIndex) {
this._peekItems[myIndex] = myItem; this._peekItems[myIndex] = myItem;
const otherItem = this._peekItems[otherIndex]; const otherItem = this._peekItems[otherIndex];
if (otherItem === undefined) { if (otherItem === undefined) {
@ -79,7 +69,7 @@ export default class MergeStream extends stream.Readable {
return undefined; return undefined;
} }
_onEnd(myStream: stream.Readable, myIndex, otherIndex) { _onEnd(myStream, myIndex, otherIndex) {
this._streamEof[myIndex] = true; this._streamEof[myIndex] = true;
if (this._peekItems[myIndex] === undefined) { if (this._peekItems[myIndex] === undefined) {
this._peekItems[myIndex] = null; this._peekItems[myIndex] = null;
@ -104,7 +94,7 @@ export default class MergeStream extends stream.Readable {
return otherStream.resume(); return otherStream.resume();
} }
_onError(myStream: stream.Readable, err, myIndex, otherIndex) { _onError(myStream, err, myIndex, otherIndex) {
myStream.destroy(); myStream.destroy();
if (this._streams[otherIndex]) { if (this._streams[otherIndex]) {
this._streams[otherIndex].destroy(); this._streams[otherIndex].destroy();
@ -112,3 +102,5 @@ export default class MergeStream extends stream.Readable {
this.emit('error', err); this.emit('error', err);
} }
} }
module.exports = MergeStream;

View File

@ -1,4 +1,6 @@
import * as constants from '../constants'; 'use strict'; // eslint-disable-line strict
const constants = require('../constants');
/** /**
* Class containing requester's information received from Vault * Class containing requester's information received from Vault
@ -7,14 +9,7 @@ import * as constants from '../constants';
* @return {AuthInfo} an AuthInfo instance * @return {AuthInfo} an AuthInfo instance
*/ */
export default class AuthInfo { class AuthInfo {
arn
canonicalID
shortid
email
accountDisplayName
IAMdisplayName
constructor(objectFromVault) { constructor(objectFromVault) {
// amazon resource name for IAM user (if applicable) // amazon resource name for IAM user (if applicable)
this.arn = objectFromVault.arn; this.arn = objectFromVault.arn;
@ -55,12 +50,13 @@ export default class AuthInfo {
return this.canonicalID === constants.publicId; return this.canonicalID === constants.publicId;
} }
isRequesterAServiceAccount() { isRequesterAServiceAccount() {
return this.canonicalID.startsWith(`${constants.zenkoServiceAccount}/`); return this.canonicalID.startsWith(
`${constants.zenkoServiceAccount}/`);
} }
isRequesterThisServiceAccount(serviceName) { isRequesterThisServiceAccount(serviceName) {
return ( return this.canonicalID ===
this.canonicalID === `${constants.zenkoServiceAccount}/${serviceName}`;
`${constants.zenkoServiceAccount}/${serviceName}`
);
} }
} }
module.exports = AuthInfo;

View File

@ -1,5 +1,5 @@
import errors from '../errors'; const errors = require('../errors');
import AuthInfo from './AuthInfo'; const AuthInfo = require('./AuthInfo');
/** vaultSignatureCb parses message from Vault and instantiates /** vaultSignatureCb parses message from Vault and instantiates
* @param {object} err - error from vault * @param {object} err - error from vault
@ -39,10 +39,7 @@ function vaultSignatureCb(err, authInfo, log, callback, streamingV4Params) {
* authentication backends. * authentication backends.
* @class Vault * @class Vault
*/ */
export default class Vault { class Vault {
client
implName
/** /**
* @constructor * @constructor
* @param {object} client - authentication backend or vault client * @param {object} client - authentication backend or vault client
@ -94,7 +91,7 @@ export default class Vault {
requestContext: serializedRCsArr, requestContext: serializedRCsArr,
}, },
(err, userInfo) => vaultSignatureCb(err, userInfo, (err, userInfo) => vaultSignatureCb(err, userInfo,
params.log, callback), params.log, callback)
); );
} }
@ -149,7 +146,7 @@ export default class Vault {
requestContext: serializedRCs, requestContext: serializedRCs,
}, },
(err, userInfo) => vaultSignatureCb(err, userInfo, (err, userInfo) => vaultSignatureCb(err, userInfo,
params.log, callback, streamingV4Params), params.log, callback, streamingV4Params)
); );
} }
@ -315,3 +312,5 @@ export default class Vault {
}); });
} }
} }
module.exports = Vault;

View File

@ -1,20 +1,22 @@
import * as crypto from 'crypto'; 'use strict'; // eslint-disable-line strict
import errors from '../errors';
import * as queryString from 'querystring'; const crypto = require('crypto');
import AuthInfo from './AuthInfo'; const errors = require('../errors');
import * as v2 from './v2/authV2'; const queryString = require('querystring');
import * as v4 from './v4/authV4'; const AuthInfo = require('./AuthInfo');
import * as constants from '../constants'; const v2 = require('./v2/authV2');
import constructStringToSignV2 from './v2/constructStringToSign'; const v4 = require('./v4/authV4');
import constructStringToSignV4 from './v4/constructStringToSign'; const constants = require('../constants');
import { convertUTCtoISO8601 } from './v4/timeUtils'; const constructStringToSignV2 = require('./v2/constructStringToSign');
import * as vaultUtilities from './backends/in_memory/vaultUtilities'; const constructStringToSignV4 = require('./v4/constructStringToSign');
import * as inMemoryBackend from './backends/in_memory/Backend'; const convertUTCtoISO8601 = require('./v4/timeUtils').convertUTCtoISO8601;
import validateAuthConfig from './backends/in_memory/validateAuthConfig'; const vaultUtilities = require('./backends/in_memory/vaultUtilities');
import AuthLoader from './backends/in_memory/AuthLoader'; const inMemoryBackend = require('./backends/in_memory/Backend');
import Vault from './Vault'; const validateAuthConfig = require('./backends/in_memory/validateAuthConfig');
import baseBackend from './backends/base'; const AuthLoader = require('./backends/in_memory/AuthLoader');
import chainBackend from './backends/ChainBackend'; const Vault = require('./Vault');
const baseBackend = require('./backends/base');
const chainBackend = require('./backends/ChainBackend');
let vault = null; let vault = null;
const auth = {}; const auth = {};
@ -71,9 +73,8 @@ function extractParams(request, log, awsService, data) {
} else if (authHeader.startsWith('AWS4')) { } else if (authHeader.startsWith('AWS4')) {
version = 'v4'; version = 'v4';
} else { } else {
log.trace('invalid authorization security header', { log.trace('invalid authorization security header',
header: authHeader, { header: authHeader });
});
return { err: errors.AccessDenied }; return { err: errors.AccessDenied };
} }
} else if (data.Signature) { } else if (data.Signature) {
@ -87,10 +88,8 @@ function extractParams(request, log, awsService, data) {
// Here, either both values are set, or none is set // Here, either both values are set, or none is set
if (version !== null && method !== null) { if (version !== null && method !== null) {
if (!checkFunctions[version] || !checkFunctions[version][method]) { if (!checkFunctions[version] || !checkFunctions[version][method]) {
log.trace('invalid auth version or method', { log.trace('invalid auth version or method',
version, { version, authMethod: method });
authMethod: method,
});
return { err: errors.NotImplemented }; return { err: errors.NotImplemented };
} }
log.trace('identified auth method', { version, authMethod: method }); log.trace('identified auth method', { version, authMethod: method });
@ -122,11 +121,10 @@ function doAuth(request, log, cb, awsService, requestContexts) {
return cb(null, res.params); return cb(null, res.params);
} }
if (requestContexts) { if (requestContexts) {
requestContexts.forEach((requestContext) => { requestContexts.forEach(requestContext => {
requestContext.setAuthType(res.params.data.authType); requestContext.setAuthType(res.params.data.authType);
requestContext.setSignatureVersion( requestContext.setSignatureVersion(res.params
res.params.data.signatureVersion .data.signatureVersion);
);
requestContext.setSignatureAge(res.params.data.signatureAge); requestContext.setSignatureAge(res.params.data.signatureAge);
requestContext.setSecurityToken(res.params.data.securityToken); requestContext.setSecurityToken(res.params.data.securityToken);
}); });
@ -138,12 +136,8 @@ function doAuth(request, log, cb, awsService, requestContexts) {
return vault.authenticateV2Request(res.params, requestContexts, cb); return vault.authenticateV2Request(res.params, requestContexts, cb);
} }
if (res.params.version === 4) { if (res.params.version === 4) {
return vault.authenticateV4Request( return vault.authenticateV4Request(res.params, requestContexts, cb,
res.params, awsService);
requestContexts,
cb,
awsService
);
} }
log.error('authentication method not found', { log.error('authentication method not found', {
@ -166,22 +160,16 @@ function doAuth(request, log, cb, awsService, requestContexts) {
* are temporary credentials from STS * are temporary credentials from STS
* @return {undefined} * @return {undefined}
*/ */
function generateV4Headers( function generateV4Headers(request, data, accessKey, secretKeyValue,
request, awsService, proxyPath, sessionToken) {
data,
accessKey,
secretKeyValue,
awsService,
proxyPath,
sessionToken
) {
Object.assign(request, { headers: {} }); Object.assign(request, { headers: {} });
const amzDate = convertUTCtoISO8601(Date.now()); const amzDate = convertUTCtoISO8601(Date.now());
// get date without time // get date without time
const scopeDate = amzDate.slice(0, amzDate.indexOf('T')); const scopeDate = amzDate.slice(0, amzDate.indexOf('T'));
const region = 'us-east-1'; const region = 'us-east-1';
const service = awsService || 'iam'; const service = awsService || 'iam';
const credentialScope = `${scopeDate}/${region}/${service}/aws4_request`; const credentialScope =
`${scopeDate}/${region}/${service}/aws4_request`;
const timestamp = amzDate; const timestamp = amzDate;
const algorithm = 'AWS4-HMAC-SHA256'; const algorithm = 'AWS4-HMAC-SHA256';
@ -191,10 +179,8 @@ function generateV4Headers(
encodeURIComponent, encodeURIComponent,
}); });
} }
const payloadChecksum = crypto const payloadChecksum = crypto.createHash('sha256')
.createHash('sha256') .update(payload, 'binary').digest('hex');
.update(payload, 'binary')
.digest('hex');
request.setHeader('host', request._headers.host); request.setHeader('host', request._headers.host);
request.setHeader('x-amz-date', amzDate); request.setHeader('x-amz-date', amzDate);
request.setHeader('x-amz-content-sha256', payloadChecksum); request.setHeader('x-amz-content-sha256', payloadChecksum);
@ -205,49 +191,47 @@ function generateV4Headers(
Object.assign(request.headers, request._headers); Object.assign(request.headers, request._headers);
const signedHeaders = Object.keys(request._headers) const signedHeaders = Object.keys(request._headers)
.filter( .filter(headerName =>
(headerName) => headerName.startsWith('x-amz-')
headerName.startsWith('x-amz-') || || headerName.startsWith('x-scal-')
headerName.startsWith('x-scal-') || || headerName === 'host'
headerName === 'host' ).sort().join(';');
) const params = { request, signedHeaders, payloadChecksum,
.sort() credentialScope, timestamp, query: data,
.join(';'); awsService: service, proxyPath };
const params = {
request,
signedHeaders,
payloadChecksum,
credentialScope,
timestamp,
query: data,
awsService: service,
proxyPath,
};
const stringToSign = constructStringToSignV4(params); const stringToSign = constructStringToSignV4(params);
const signingKey = vaultUtilities.calculateSigningKey( const signingKey = vaultUtilities.calculateSigningKey(secretKeyValue,
secretKeyValue,
region, region,
scopeDate, scopeDate,
service service);
); const signature = crypto.createHmac('sha256', signingKey)
const signature = crypto .update(stringToSign, 'binary').digest('hex');
.createHmac('sha256', signingKey) const authorizationHeader = `${algorithm} Credential=${accessKey}` +
.update(stringToSign, 'binary')
.digest('hex');
const authorizationHeader =
`${algorithm} Credential=${accessKey}` +
`/${credentialScope}, SignedHeaders=${signedHeaders}, ` + `/${credentialScope}, SignedHeaders=${signedHeaders}, ` +
`Signature=${signature}`; `Signature=${signature}`;
request.setHeader('authorization', authorizationHeader); request.setHeader('authorization', authorizationHeader);
Object.assign(request, { headers: {} }); Object.assign(request, { headers: {} });
} }
export const server = { extractParams, doAuth }; module.exports = {
export const client = { generateV4Headers, constructStringToSignV2 }; setHandler: setAuthHandler,
export const inMemory = { server: {
extractParams,
doAuth,
},
client: {
generateV4Headers,
constructStringToSignV2,
},
inMemory: {
backend: inMemoryBackend, backend: inMemoryBackend,
validateAuthConfig, validateAuthConfig,
AuthLoader, AuthLoader,
},
backends: {
baseBackend,
chainBackend,
},
AuthInfo,
Vault,
}; };
export const backends = { baseBackend, chainBackend };
export { setAuthHandler as setHandler, AuthInfo, Vault };

View File

@ -1,8 +1,10 @@
import assert from 'assert'; 'use strict'; // eslint-disable-line strict
import async from 'async';
import errors from '../../errors'; const assert = require('assert');
import BaseBackend from './base'; const async = require('async');
const errors = require('../../errors');
const BaseBackend = require('./base');
/** /**
* Class that provides an authentication backend that will verify signatures * Class that provides an authentication backend that will verify signatures
@ -11,15 +13,13 @@ import BaseBackend from './base';
* *
* @class ChainBackend * @class ChainBackend
*/ */
export default class ChainBackend extends BaseBackend { class ChainBackend extends BaseBackend {
_clients: any[];
/** /**
* @constructor * @constructor
* @param {string} service - service id * @param {string} service - service id
* @param {object[]} clients - list of authentication backends or vault clients * @param {object[]} clients - list of authentication backends or vault clients
*/ */
constructor(service: string, clients: any[]) { constructor(service, clients) {
super(service); super(service);
assert(Array.isArray(clients) && clients.length > 0, 'invalid client list'); assert(Array.isArray(clients) && clients.length > 0, 'invalid client list');
@ -34,6 +34,7 @@ export default class ChainBackend extends BaseBackend {
this._clients = clients; this._clients = clients;
} }
/* /*
* try task against each client for one to be successful * try task against each client for one to be successful
*/ */
@ -73,8 +74,7 @@ export default class ChainBackend extends BaseBackend {
static _mergeObjects(objectResponses) { static _mergeObjects(objectResponses) {
return objectResponses.reduce( return objectResponses.reduce(
(retObj, resObj) => Object.assign(retObj, resObj.message.body), (retObj, resObj) => Object.assign(retObj, resObj.message.body),
{} {});
);
} }
getCanonicalIds(emailAddresses, options, callback) { getCanonicalIds(emailAddresses, options, callback) {
@ -90,8 +90,7 @@ export default class ChainBackend extends BaseBackend {
body: ChainBackend._mergeObjects(res), body: ChainBackend._mergeObjects(res),
}, },
}); });
} });
);
} }
getEmailAddresses(canonicalIDs, options, callback) { getEmailAddresses(canonicalIDs, options, callback) {
@ -106,8 +105,7 @@ export default class ChainBackend extends BaseBackend {
body: ChainBackend._mergeObjects(res), body: ChainBackend._mergeObjects(res),
}, },
}); });
} });
);
} }
/* /*
@ -130,7 +128,7 @@ export default class ChainBackend extends BaseBackend {
}); });
}); });
return Object.keys(policyMap).map((key) => { return Object.keys(policyMap).map(key => {
const policyRes = { isAllowed: policyMap[key].isAllowed }; const policyRes = { isAllowed: policyMap[key].isAllowed };
if (policyMap[key].arn !== '') { if (policyMap[key].arn !== '') {
policyRes.arn = policyMap[key].arn; policyRes.arn = policyMap[key].arn;
@ -179,7 +177,7 @@ export default class ChainBackend extends BaseBackend {
return callback(err); return callback(err);
} }
const isError = res.some((results) => !!results.error); const isError = res.some(results => !!results.error);
if (isError) { if (isError) {
return callback(errors.InternalError, res); return callback(errors.InternalError, res);
} }
@ -187,3 +185,5 @@ export default class ChainBackend extends BaseBackend {
}); });
} }
} }
module.exports = ChainBackend;

View File

@ -1,13 +1,13 @@
import errors from '../../errors'; 'use strict'; // eslint-disable-line strict
const errors = require('../../errors');
/** /**
* Base backend class * Base backend class
* *
* @class BaseBackend * @class BaseBackend
*/ */
export default class BaseBackend { class BaseBackend {
service
/** /**
* @constructor * @constructor
* @param {string} service - service identifer for construction arn * @param {string} service - service identifer for construction arn
@ -82,3 +82,5 @@ export default class BaseBackend {
return callback(null, { code: 200, message: 'OK' }); return callback(null, { code: 200, message: 'OK' });
} }
} }
module.exports = BaseBackend;

View File

@ -1,9 +1,9 @@
import * as fs from 'fs'; const fs = require('fs');
import glob from 'simple-glob'; const glob = require('simple-glob');
import joi from '@hapi/joi'; const joi = require('@hapi/joi');
import werelogs from 'werelogs'; const werelogs = require('werelogs');
import ARN from '../../../models/ARN'; const ARN = require('../../../models/ARN');
/** /**
* Load authentication information from files or pre-loaded account * Load authentication information from files or pre-loaded account
@ -11,38 +11,27 @@ import ARN from '../../../models/ARN';
* *
* @class AuthLoader * @class AuthLoader
*/ */
export default class AuthLoader { class AuthLoader {
_log
_authData
_isValid
_joiKeysValidator
_joiValidator
constructor(logApi) { constructor(logApi) {
this._log = new (logApi || werelogs).Logger('S3'); this._log = new (logApi || werelogs).Logger('S3');
this._authData = { accounts: [] }; this._authData = { accounts: [] };
// null: unknown validity, true/false: valid or invalid // null: unknown validity, true/false: valid or invalid
this._isValid = null; this._isValid = null;
this._joiKeysValidator = joi this._joiKeysValidator = joi.array()
.array()
.items({ .items({
access: joi.string().required(), access: joi.string().required(),
secret: joi.string().required(), secret: joi.string().required(),
}) })
.required(); .required();
const accountsJoi = joi const accountsJoi = joi.array()
.array()
.items({ .items({
name: joi.string().required(), name: joi.string().required(),
email: joi.string().email().required(), email: joi.string().email().required(),
arn: joi.string().required(), arn: joi.string().required(),
canonicalID: joi.string().required(), canonicalID: joi.string().required(),
shortid: joi shortid: joi.string().regex(/^[0-9]{12}$/).required(),
.string()
.regex(/^[0-9]{12}$/)
.required(),
keys: this._joiKeysValidator, keys: this._joiKeysValidator,
// backward-compat // backward-compat
users: joi.array(), users: joi.array(),
@ -75,12 +64,11 @@ export default class AuthLoader {
* logging purpose * logging purpose
* @return {undefined} * @return {undefined}
*/ */
addAccounts(authData, filePath: string) { addAccounts(authData, filePath) {
const isValid = this._validateData(authData, filePath); const isValid = this._validateData(authData, filePath);
if (isValid) { if (isValid) {
this._authData.accounts = this._authData.accounts.concat( this._authData.accounts =
authData.accounts this._authData.accounts.concat(authData.accounts);
);
// defer validity checking when getting data to avoid // defer validity checking when getting data to avoid
// logging multiple times the errors (we need to validate // logging multiple times the errors (we need to validate
// all accounts at once to detect duplicate values) // all accounts at once to detect duplicate values)
@ -99,7 +87,7 @@ export default class AuthLoader {
* authentication info (see {@link addAccounts()} for format) * authentication info (see {@link addAccounts()} for format)
* @return {undefined} * @return {undefined}
*/ */
addFile(filePath: string) { addFile(filePath) {
const authData = JSON.parse(fs.readFileSync(filePath)); const authData = JSON.parse(fs.readFileSync(filePath));
this.addAccounts(authData, filePath); this.addAccounts(authData, filePath);
} }
@ -115,9 +103,9 @@ export default class AuthLoader {
* {@link addAccounts()} for JSON format. * {@link addAccounts()} for JSON format.
* @return {undefined} * @return {undefined}
*/ */
addFilesByGlob(globPattern: string | string[]) { addFilesByGlob(globPattern) {
const files = glob(globPattern); const files = glob(globPattern);
files.forEach((filePath) => this.addFile(filePath)); files.forEach(filePath => this.addFile(filePath));
} }
/** /**
@ -146,10 +134,9 @@ export default class AuthLoader {
return this.validate() ? this._authData : null; return this.validate() ? this._authData : null;
} }
_validateData(authData, filePath?: string) { _validateData(authData, filePath) {
const res = joi.validate(authData, this._joiValidator, { const res = joi.validate(authData, this._joiValidator,
abortEarly: false, { abortEarly: false });
});
if (res.error) { if (res.error) {
this._dumpJoiErrors(res.error.details, filePath); this._dumpJoiErrors(res.error.details, filePath);
return false; return false;
@ -157,23 +144,19 @@ export default class AuthLoader {
let allKeys = []; let allKeys = [];
let arnError = false; let arnError = false;
const validatedAuth = res.value; const validatedAuth = res.value;
validatedAuth.accounts.forEach((account) => { validatedAuth.accounts.forEach(account => {
// backward-compat: ignore arn if starts with 'aws:' and log a // backward-compat: ignore arn if starts with 'aws:' and log a
// warning // warning
if (account.arn.startsWith('aws:')) { if (account.arn.startsWith('aws:')) {
this._log.error( this._log.error(
'account must have a valid AWS ARN, legacy examples ' + 'account must have a valid AWS ARN, legacy examples ' +
"starting with 'aws:' are not supported anymore. " + 'starting with \'aws:\' are not supported anymore. ' +
'Please convert to a proper account entry (see ' + 'Please convert to a proper account entry (see ' +
'examples at https://github.com/scality/S3/blob/' + 'examples at https://github.com/scality/S3/blob/' +
'master/conf/authdata.json). Also note that support ' + 'master/conf/authdata.json). Also note that support ' +
'for account users has been dropped.', 'for account users has been dropped.',
{ { accountName: account.name, accountArn: account.arn,
accountName: account.name, filePath });
accountArn: account.arn,
filePath,
}
);
arnError = true; arnError = true;
return; return;
} }
@ -183,33 +166,27 @@ export default class AuthLoader {
'turning users into account entries (see examples at ' + 'turning users into account entries (see examples at ' +
'https://github.com/scality/S3/blob/master/conf/' + 'https://github.com/scality/S3/blob/master/conf/' +
'authdata.json)', 'authdata.json)',
{ { accountName: account.name, accountArn: account.arn,
accountName: account.name, filePath });
accountArn: account.arn,
filePath,
}
);
arnError = true; arnError = true;
return; return;
} }
const arnObj = ARN.createFromString(account.arn); const arnObj = ARN.createFromString(account.arn);
if (arnObj.error) { if (arnObj.error) {
this._log.error('authentication config validation error', { this._log.error(
reason: arnObj.error.description, 'authentication config validation error',
accountName: account.name, { reason: arnObj.error.description,
accountArn: account.arn, accountName: account.name, accountArn: account.arn,
filePath, filePath });
});
arnError = true; arnError = true;
return; return;
} }
if (!arnObj.isIAMAccount()) { if (!arnObj.isIAMAccount()) {
this._log.error('authentication config validation error', { this._log.error(
reason: 'not an IAM account ARN', 'authentication config validation error',
accountName: account.name, { reason: 'not an IAM account ARN',
accountArn: account.arn, accountName: account.name, accountArn: account.arn,
filePath, filePath });
});
arnError = true; arnError = true;
return; return;
} }
@ -219,9 +196,7 @@ export default class AuthLoader {
return false; return false;
} }
const uniqueKeysRes = joi.validate( const uniqueKeysRes = joi.validate(
allKeys, allKeys, this._joiKeysValidator.unique('access'));
this._joiKeysValidator.unique('access')
);
if (uniqueKeysRes.error) { if (uniqueKeysRes.error) {
this._dumpJoiErrors(uniqueKeysRes.error.details, filePath); this._dumpJoiErrors(uniqueKeysRes.error.details, filePath);
return false; return false;
@ -230,7 +205,7 @@ export default class AuthLoader {
} }
_dumpJoiErrors(errors, filePath) { _dumpJoiErrors(errors, filePath) {
errors.forEach((err) => { errors.forEach(err => {
const logInfo = { item: err.path, filePath }; const logInfo = { item: err.path, filePath };
if (err.type === 'array.unique') { if (err.type === 'array.unique') {
logInfo.reason = `duplicate value '${err.context.path}'`; logInfo.reason = `duplicate value '${err.context.path}'`;
@ -239,7 +214,10 @@ export default class AuthLoader {
logInfo.reason = err.message; logInfo.reason = err.message;
logInfo.context = err.context; logInfo.context = err.context;
} }
this._log.error('authentication config validation error', logInfo); this._log.error('authentication config validation error',
logInfo);
}); });
} }
} }
module.exports = AuthLoader;

View File

@ -1,8 +1,12 @@
import * as crypto from 'crypto'; 'use strict'; // eslint-disable-line strict
import errors from '../../../errors';
import { calculateSigningKey, hashSignature } from './vaultUtilities'; const crypto = require('crypto');
import Indexer from './Indexer';
import BaseBackend from '../base'; const errors = require('../../../errors');
const calculateSigningKey = require('./vaultUtilities').calculateSigningKey;
const hashSignature = require('./vaultUtilities').hashSignature;
const Indexer = require('./Indexer');
const BaseBackend = require('../base');
function _formatResponse(userInfoToSend) { function _formatResponse(userInfoToSend) {
return { return {
@ -19,9 +23,6 @@ function _formatResponse(userInfoToSend) {
* @class InMemoryBackend * @class InMemoryBackend
*/ */
class InMemoryBackend extends BaseBackend { class InMemoryBackend extends BaseBackend {
indexer
formatResponse
/** /**
* @constructor * @constructor
* @param {string} service - service identifer for construction arn * @param {string} service - service identifer for construction arn
@ -35,23 +36,15 @@ class InMemoryBackend extends BaseBackend {
this.formatResponse = formatter; this.formatResponse = formatter;
} }
verifySignatureV2( verifySignatureV2(stringToSign, signatureFromRequest,
stringToSign, accessKey, options, callback) {
signatureFromRequest,
accessKey,
options,
callback
) {
const entity = this.indexer.getEntityByKey(accessKey); const entity = this.indexer.getEntityByKey(accessKey);
if (!entity) { if (!entity) {
return callback(errors.InvalidAccessKeyId); return callback(errors.InvalidAccessKeyId);
} }
const secretKey = this.indexer.getSecretKey(entity, accessKey); const secretKey = this.indexer.getSecretKey(entity, accessKey);
const reconstructedSig = hashSignature( const reconstructedSig =
stringToSign, hashSignature(stringToSign, secretKey, options.algo);
secretKey,
options.algo
);
if (signatureFromRequest !== reconstructedSig) { if (signatureFromRequest !== reconstructedSig) {
return callback(errors.SignatureDoesNotMatch); return callback(errors.SignatureDoesNotMatch);
} }
@ -65,25 +58,16 @@ class InMemoryBackend extends BaseBackend {
return callback(null, vaultReturnObject); return callback(null, vaultReturnObject);
} }
verifySignatureV4( verifySignatureV4(stringToSign, signatureFromRequest, accessKey,
stringToSign, region, scopeDate, options, callback) {
signatureFromRequest,
accessKey,
region,
scopeDate,
options,
callback
) {
const entity = this.indexer.getEntityByKey(accessKey); const entity = this.indexer.getEntityByKey(accessKey);
if (!entity) { if (!entity) {
return callback(errors.InvalidAccessKeyId); return callback(errors.InvalidAccessKeyId);
} }
const secretKey = this.indexer.getSecretKey(entity, accessKey); const secretKey = this.indexer.getSecretKey(entity, accessKey);
const signingKey = calculateSigningKey(secretKey, region, scopeDate); const signingKey = calculateSigningKey(secretKey, region, scopeDate);
const reconstructedSig = crypto const reconstructedSig = crypto.createHmac('sha256', signingKey)
.createHmac('sha256', signingKey) .update(stringToSign, 'binary').digest('hex');
.update(stringToSign, 'binary')
.digest('hex');
if (signatureFromRequest !== reconstructedSig) { if (signatureFromRequest !== reconstructedSig) {
return callback(errors.SignatureDoesNotMatch); return callback(errors.SignatureDoesNotMatch);
} }
@ -99,13 +83,14 @@ class InMemoryBackend extends BaseBackend {
getCanonicalIds(emails, log, cb) { getCanonicalIds(emails, log, cb) {
const results = {}; const results = {};
emails.forEach((email) => { emails.forEach(email => {
const lowercasedEmail = email.toLowerCase(); const lowercasedEmail = email.toLowerCase();
const entity = this.indexer.getEntityByEmail(lowercasedEmail); const entity = this.indexer.getEntityByEmail(lowercasedEmail);
if (!entity) { if (!entity) {
results[email] = 'NotFound'; results[email] = 'NotFound';
} else { } else {
results[email] = entity.canonicalID; results[email] =
entity.canonicalID;
} }
}); });
const vaultReturnObject = { const vaultReturnObject = {
@ -118,7 +103,7 @@ class InMemoryBackend extends BaseBackend {
getEmailAddresses(canonicalIDs, options, cb) { getEmailAddresses(canonicalIDs, options, cb) {
const results = {}; const results = {};
canonicalIDs.forEach((canonicalId) => { canonicalIDs.forEach(canonicalId => {
const foundEntity = this.indexer.getEntityByCanId(canonicalId); const foundEntity = this.indexer.getEntityByCanId(canonicalId);
if (!foundEntity || !foundEntity.email) { if (!foundEntity || !foundEntity.email) {
results[canonicalId] = 'NotFound'; results[canonicalId] = 'NotFound';
@ -146,7 +131,7 @@ class InMemoryBackend extends BaseBackend {
*/ */
getAccountIds(canonicalIDs, options, cb) { getAccountIds(canonicalIDs, options, cb) {
const results = {}; const results = {};
canonicalIDs.forEach((canonicalID) => { canonicalIDs.forEach(canonicalID => {
const foundEntity = this.indexer.getEntityByCanId(canonicalID); const foundEntity = this.indexer.getEntityByCanId(canonicalID);
if (!foundEntity || !foundEntity.shortid) { if (!foundEntity || !foundEntity.shortid) {
results[canonicalID] = 'Not Found'; results[canonicalID] = 'Not Found';
@ -163,6 +148,7 @@ class InMemoryBackend extends BaseBackend {
} }
} }
class S3AuthBackend extends InMemoryBackend { class S3AuthBackend extends InMemoryBackend {
/** /**
* @constructor * @constructor

View File

@ -6,7 +6,7 @@
* *
* @class Indexer * @class Indexer
*/ */
export default class Indexer { class Indexer {
/** /**
* @constructor * @constructor
* @param {object} authdata - the authentication config file's data * @param {object} authdata - the authentication config file's data
@ -141,3 +141,5 @@ export default class Indexer {
return entity.accountDisplayName; return entity.accountDisplayName;
} }
} }
module.exports = Indexer;

View File

@ -1,4 +1,4 @@
import AuthLoader from './AuthLoader'; const AuthLoader = require('./AuthLoader');
/** /**
* @deprecated please use {@link AuthLoader} class instead * @deprecated please use {@link AuthLoader} class instead
@ -9,8 +9,10 @@ import AuthLoader from './AuthLoader';
* @return {boolean} true on erroneous data * @return {boolean} true on erroneous data
* false on success * false on success
*/ */
export default function validateAuthConfig(authdata, logApi) { function validateAuthConfig(authdata, logApi) {
const authLoader = new AuthLoader(logApi); const authLoader = new AuthLoader(logApi);
authLoader.addAccounts(authdata); authLoader.addAccounts(authdata);
return !authLoader.validate(); return !authLoader.validate();
} }
module.exports = validateAuthConfig;

View File

@ -1,4 +1,6 @@
import * as crypto from 'crypto'; 'use strict'; // eslint-disable-line strict
const crypto = require('crypto');
/** hashSignature for v2 Auth /** hashSignature for v2 Auth
* @param {string} stringToSign - built string to sign per AWS rules * @param {string} stringToSign - built string to sign per AWS rules
@ -6,11 +8,7 @@ import * as crypto from 'crypto';
* @param {string} algorithm - either SHA256 or SHA1 * @param {string} algorithm - either SHA256 or SHA1
* @return {string} reconstructed signature * @return {string} reconstructed signature
*/ */
export function hashSignature( function hashSignature(stringToSign, secretKey, algorithm) {
stringToSign: string,
secretKey: string,
algorithm: 'SHA256' | 'SHA1'
): string {
const hmacObject = crypto.createHmac(algorithm, secretKey); const hmacObject = crypto.createHmac(algorithm, secretKey);
return hmacObject.update(stringToSign, 'binary').digest('base64'); return hmacObject.update(stringToSign, 'binary').digest('base64');
} }
@ -22,12 +20,7 @@ export function hashSignature(
* @param {string} [service] - To specify another service than s3 * @param {string} [service] - To specify another service than s3
* @return {string} signingKey - signingKey to calculate signature * @return {string} signingKey - signingKey to calculate signature
*/ */
export function calculateSigningKey( function calculateSigningKey(secretKey, region, scopeDate, service) {
secretKey: string,
region: string,
scopeDate: string,
service: string
): string {
const dateKey = crypto.createHmac('sha256', `AWS4${secretKey}`) const dateKey = crypto.createHmac('sha256', `AWS4${secretKey}`)
.update(scopeDate, 'binary').digest(); .update(scopeDate, 'binary').digest();
const dateRegionKey = crypto.createHmac('sha256', dateKey) const dateRegionKey = crypto.createHmac('sha256', dateKey)
@ -38,3 +31,5 @@ export function calculateSigningKey(
.update('aws4_request', 'binary').digest(); .update('aws4_request', 'binary').digest();
return signingKey; return signingKey;
} }
module.exports = { hashSignature, calculateSigningKey };

View File

@ -1,4 +1,6 @@
export default function algoCheck(signatureLength) { 'use strict'; // eslint-disable-line strict
function algoCheck(signatureLength) {
let algo; let algo;
// If the signature sent is 44 characters, // If the signature sent is 44 characters,
// this means that sha256 was used: // this means that sha256 was used:
@ -13,3 +15,5 @@ export default function algoCheck(signatureLength) {
} }
return algo; return algo;
} }
module.exports = algoCheck;

View File

@ -1,3 +1,5 @@
'use strict'; // eslint-disable-line strict
const headerAuthCheck = require('./headerAuthCheck'); const headerAuthCheck = require('./headerAuthCheck');
const queryAuthCheck = require('./queryAuthCheck'); const queryAuthCheck = require('./queryAuthCheck');

View File

@ -1,9 +1,9 @@
'use strict'; // eslint-disable-line strict 'use strict'; // eslint-disable-line strict
import errors from '../../errors'; const errors = require('../../errors');
const epochTime = new Date('1970-01-01').getTime(); const epochTime = new Date('1970-01-01').getTime();
export default function checkRequestExpiry(timestamp, log) { function checkRequestExpiry(timestamp, log) {
// If timestamp is before epochTime, the request is invalid and return // If timestamp is before epochTime, the request is invalid and return
// errors.AccessDenied // errors.AccessDenied
if (timestamp < epochTime) { if (timestamp < epochTime) {
@ -17,7 +17,7 @@ export default function checkRequestExpiry(timestamp, log) {
log.trace('request timestamp', { requestTimestamp: timestamp }); log.trace('request timestamp', { requestTimestamp: timestamp });
log.trace('current timestamp', { currentTimestamp: currentTime }); log.trace('current timestamp', { currentTimestamp: currentTime });
const fifteenMinutes = 15 * 60 * 1000; const fifteenMinutes = (15 * 60 * 1000);
if (currentTime - timestamp > fifteenMinutes) { if (currentTime - timestamp > fifteenMinutes) {
log.trace('request timestamp is not within 15 minutes of current time'); log.trace('request timestamp is not within 15 minutes of current time');
log.debug('request time too skewed', { timestamp }); log.debug('request time too skewed', { timestamp });
@ -32,3 +32,5 @@ export default function checkRequestExpiry(timestamp, log) {
return undefined; return undefined;
} }
module.exports = checkRequestExpiry;

View File

@ -1,8 +1,11 @@
import utf8 from 'utf8'; 'use strict'; // eslint-disable-line strict
import getCanonicalizedAmzHeaders from './getCanonicalizedAmzHeaders';
import getCanonicalizedResource from './getCanonicalizedResource';
export default function constructStringToSign(request, data, log, clientType?: any) { const utf8 = require('utf8');
const getCanonicalizedAmzHeaders = require('./getCanonicalizedAmzHeaders');
const getCanonicalizedResource = require('./getCanonicalizedResource');
function constructStringToSign(request, data, log, clientType) {
/* /*
Build signature per AWS requirements: Build signature per AWS requirements:
StringToSign = HTTP-Verb + '\n' + StringToSign = HTTP-Verb + '\n' +
@ -20,11 +23,11 @@ export default function constructStringToSign(request, data, log, clientType?: a
const contentMD5 = headers['content-md5'] ? const contentMD5 = headers['content-md5'] ?
headers['content-md5'] : query['Content-MD5']; headers['content-md5'] : query['Content-MD5'];
stringToSign += contentMD5 ? `${contentMD5}\n` : '\n'; stringToSign += (contentMD5 ? `${contentMD5}\n` : '\n');
const contentType = headers['content-type'] ? const contentType = headers['content-type'] ?
headers['content-type'] : query['Content-Type']; headers['content-type'] : query['Content-Type'];
stringToSign += contentType ? `${contentType}\n` : '\n'; stringToSign += (contentType ? `${contentType}\n` : '\n');
/* /*
AWS docs are conflicting on whether to include x-amz-date header here AWS docs are conflicting on whether to include x-amz-date header here
@ -39,3 +42,5 @@ export default function constructStringToSign(request, data, log, clientType?: a
+ getCanonicalizedResource(request, clientType); + getCanonicalizedResource(request, clientType);
return utf8.encode(stringToSign); return utf8.encode(stringToSign);
} }
module.exports = constructStringToSign;

View File

@ -1,4 +1,6 @@
export default function getCanonicalizedAmzHeaders(headers, clientType) { 'use strict'; // eslint-disable-line strict
function getCanonicalizedAmzHeaders(headers, clientType) {
/* /*
Iterate through headers and pull any headers that are x-amz headers. Iterate through headers and pull any headers that are x-amz headers.
Need to include 'x-amz-date' here even though AWS docs Need to include 'x-amz-date' here even though AWS docs
@ -41,3 +43,5 @@ export default function getCanonicalizedAmzHeaders(headers, clientType) {
`${headerStr}${current[0]}:${current[1]}\n`, `${headerStr}${current[0]}:${current[1]}\n`,
''); '');
} }
module.exports = getCanonicalizedAmzHeaders;

View File

@ -1,4 +1,6 @@
import * as url from 'url'; 'use strict'; // eslint-disable-line strict
const url = require('url');
const gcpSubresources = [ const gcpSubresources = [
'acl', 'acl',
@ -39,7 +41,7 @@ const awsSubresources = [
'website', 'website',
]; ];
export default function getCanonicalizedResource(request, clientType) { function getCanonicalizedResource(request, clientType) {
/* /*
This variable is used to determine whether to insert This variable is used to determine whether to insert
a '?' or '&'. Once a query parameter is added to the resourceString, a '?' or '&'. Once a query parameter is added to the resourceString,
@ -115,3 +117,5 @@ export default function getCanonicalizedResource(request, clientType) {
} }
return resourceString; return resourceString;
} }
module.exports = getCanonicalizedResource;

View File

@ -1,10 +1,12 @@
import errors from '../../errors'; 'use strict'; // eslint-disable-line strict
import * as constants from '../../constants';
import constructStringToSign from './constructStringToSign';
import checkRequestExpiry from './checkRequestExpiry';
import algoCheck from './algoCheck';
export function check(request, log, data) { const errors = require('../../errors');
const constants = require('../../constants');
const constructStringToSign = require('./constructStringToSign');
const checkRequestExpiry = require('./checkRequestExpiry');
const algoCheck = require('./algoCheck');
function check(request, log, data) {
log.trace('running header auth check'); log.trace('running header auth check');
const headers = request.headers; const headers = request.headers;
@ -15,19 +17,15 @@ export function check(request, log, data) {
} }
// Check to make sure timestamp is within 15 minutes of current time // Check to make sure timestamp is within 15 minutes of current time
let timestamp = headers['x-amz-date'] let timestamp = headers['x-amz-date'] ?
? headers['x-amz-date'] headers['x-amz-date'] : headers.date;
: headers.date;
timestamp = Date.parse(timestamp); timestamp = Date.parse(timestamp);
if (!timestamp) { if (!timestamp) {
log.debug('missing or invalid date header', { log.debug('missing or invalid date header',
method: 'auth/v2/headerAuthCheck.check', { method: 'auth/v2/headerAuthCheck.check' });
}); return { err: errors.AccessDenied.
return { customizeDescription('Authentication requires a valid Date or ' +
err: errors.AccessDenied.customizeDescription( 'x-amz-date header') };
'Authentication requires a valid Date or ' + 'x-amz-date header'
),
};
} }
const err = checkRequestExpiry(timestamp, log); const err = checkRequestExpiry(timestamp, log);
@ -48,10 +46,8 @@ export function check(request, log, data) {
log.debug('invalid authorization header', { authInfo }); log.debug('invalid authorization header', { authInfo });
return { err: errors.InvalidArgument }; return { err: errors.InvalidArgument };
} }
const accessKey = const accessKey = semicolonIndex > 4 ?
semicolonIndex > 4 authInfo.substring(4, semicolonIndex).trim() : undefined;
? authInfo.substring(4, semicolonIndex).trim()
: undefined;
if (typeof accessKey !== 'string' || accessKey.length === 0) { if (typeof accessKey !== 'string' || accessKey.length === 0) {
log.trace('invalid authorization header', { authInfo }); log.trace('invalid authorization header', { authInfo });
return { err: errors.MissingSecurityHeader }; return { err: errors.MissingSecurityHeader };
@ -84,3 +80,5 @@ export function check(request, log, data) {
}, },
}; };
} }
module.exports = { check };

View File

@ -1,9 +1,11 @@
import errors from '../../errors'; 'use strict'; // eslint-disable-line strict
import * as constants from '../../constants';
import algoCheck from './algoCheck';
import constructStringToSign from './constructStringToSign';
export function check(request, log, data) { const errors = require('../../errors');
const constants = require('../../constants');
const algoCheck = require('./algoCheck');
const constructStringToSign = require('./constructStringToSign');
function check(request, log, data) {
log.trace('running query auth check'); log.trace('running query auth check');
if (request.method === 'POST') { if (request.method === 'POST') {
log.debug('query string auth not supported for post requests'); log.debug('query string auth not supported for post requests');
@ -26,28 +28,26 @@ export function check(request, log, data) {
*/ */
const expirationTime = parseInt(data.Expires, 10) * 1000; const expirationTime = parseInt(data.Expires, 10) * 1000;
if (Number.isNaN(expirationTime)) { if (Number.isNaN(expirationTime)) {
log.debug('invalid expires parameter', { expires: data.Expires }); log.debug('invalid expires parameter',
{ expires: data.Expires });
return { err: errors.MissingSecurityHeader }; return { err: errors.MissingSecurityHeader };
} }
const currentTime = Date.now(); const currentTime = Date.now();
const preSignedURLExpiry = const preSignedURLExpiry = process.env.PRE_SIGN_URL_EXPIRY
process.env.PRE_SIGN_URL_EXPIRY && && !Number.isNaN(process.env.PRE_SIGN_URL_EXPIRY)
!Number.isNaN(process.env.PRE_SIGN_URL_EXPIRY)
? Number.parseInt(process.env.PRE_SIGN_URL_EXPIRY, 10) ? Number.parseInt(process.env.PRE_SIGN_URL_EXPIRY, 10)
: constants.defaultPreSignedURLExpiry * 1000; : constants.defaultPreSignedURLExpiry * 1000;
if (expirationTime > currentTime + preSignedURLExpiry) { if (expirationTime > currentTime + preSignedURLExpiry) {
log.debug('expires parameter too far in future', { log.debug('expires parameter too far in future',
expires: request.query.Expires, { expires: request.query.Expires });
});
return { err: errors.AccessDenied }; return { err: errors.AccessDenied };
} }
if (currentTime > expirationTime) { if (currentTime > expirationTime) {
log.debug('current time exceeds expires time', { log.debug('current time exceeds expires time',
expires: request.query.Expires, { expires: request.query.Expires });
});
return { err: errors.RequestTimeTooSkewed }; return { err: errors.RequestTimeTooSkewed };
} }
const accessKey = data.AWSAccessKeyId; const accessKey = data.AWSAccessKeyId;
@ -82,3 +82,5 @@ export function check(request, log, data) {
}, },
}; };
} }
module.exports = { check };

View File

@ -1,3 +1,5 @@
'use strict'; // eslint-disable-line strict
/* /*
AWS's URI encoding rules: AWS's URI encoding rules:
URI encode every byte. Uri-Encode() must enforce the following rules: URI encode every byte. Uri-Encode() must enforce the following rules:
@ -30,7 +32,7 @@ function _toHexUTF8(char) {
return res; return res;
} }
export default function awsURIencode(input, encodeSlash?: any, noEncodeStar?: any) { function awsURIencode(input, encodeSlash, noEncodeStar) {
const encSlash = encodeSlash === undefined ? true : encodeSlash; const encSlash = encodeSlash === undefined ? true : encodeSlash;
let encoded = ''; let encoded = '';
/** /**
@ -42,15 +44,11 @@ export default function awsURIencode(input, encodeSlash?: any, noEncodeStar?: an
} }
for (let i = 0; i < input.length; i++) { for (let i = 0; i < input.length; i++) {
let ch = input.charAt(i); let ch = input.charAt(i);
if ( if ((ch >= 'A' && ch <= 'Z') ||
(ch >= 'A' && ch <= 'Z') ||
(ch >= 'a' && ch <= 'z') || (ch >= 'a' && ch <= 'z') ||
(ch >= '0' && ch <= '9') || (ch >= '0' && ch <= '9') ||
ch === '_' || ch === '_' || ch === '-' ||
ch === '-' || ch === '~' || ch === '.') {
ch === '~' ||
ch === '.'
) {
encoded = encoded.concat(ch); encoded = encoded.concat(ch);
} else if (ch === ' ') { } else if (ch === ' ') {
encoded = encoded.concat('%20'); encoded = encoded.concat('%20');
@ -78,3 +76,5 @@ export default function awsURIencode(input, encodeSlash?: any, noEncodeStar?: an
} }
return encoded; return encoded;
} }
module.exports = awsURIencode;

View File

@ -1,22 +1,17 @@
import * as crypto from 'crypto'; 'use strict'; // eslint-disable-line strict
import createCanonicalRequest from './createCanonicalRequest';
const crypto = require('crypto');
const createCanonicalRequest = require('./createCanonicalRequest');
/** /**
* constructStringToSign - creates V4 stringToSign * constructStringToSign - creates V4 stringToSign
* @param {object} params - params object * @param {object} params - params object
* @returns {string} - stringToSign * @returns {string} - stringToSign
*/ */
export default function constructStringToSign(params): string { function constructStringToSign(params) {
const { const { request, signedHeaders, payloadChecksum, credentialScope, timestamp,
request, query, log, proxyPath } = params;
signedHeaders,
payloadChecksum,
credentialScope,
timestamp,
query,
log,
proxyPath,
} = params;
const path = proxyPath || request.path; const path = proxyPath || request.path;
const canonicalReqResult = createCanonicalRequest({ const canonicalReqResult = createCanonicalRequest({
@ -39,11 +34,11 @@ export default function constructStringToSign(params): string {
log.debug('constructed canonicalRequest', { canonicalReqResult }); log.debug('constructed canonicalRequest', { canonicalReqResult });
} }
const sha256 = crypto.createHash('sha256'); const sha256 = crypto.createHash('sha256');
const canonicalHex = sha256 const canonicalHex = sha256.update(canonicalReqResult, 'binary')
.update(canonicalReqResult, 'binary')
.digest('hex'); .digest('hex');
const stringToSign = const stringToSign = `AWS4-HMAC-SHA256\n${timestamp}\n` +
`AWS4-HMAC-SHA256\n${timestamp}\n` +
`${credentialScope}\n${canonicalHex}`; `${credentialScope}\n${canonicalHex}`;
return stringToSign; return stringToSign;
} }
module.exports = constructStringToSign;

View File

@ -1,6 +1,8 @@
import awsURIencode from './awsURIencode'; 'use strict'; // eslint-disable-line strict
import * as crypto from 'crypto';
import * as queryString from 'querystring'; const awsURIencode = require('./awsURIencode');
const crypto = require('crypto');
const queryString = require('querystring');
/** /**
* createCanonicalRequest - creates V4 canonical request * createCanonicalRequest - creates V4 canonical request
@ -10,7 +12,7 @@ import * as queryString from 'querystring';
* payloadChecksum (from request) * payloadChecksum (from request)
* @returns {string} - canonicalRequest * @returns {string} - canonicalRequest
*/ */
export default function createCanonicalRequest(params) { function createCanonicalRequest(params) {
const pHttpVerb = params.pHttpVerb; const pHttpVerb = params.pHttpVerb;
const pResource = params.pResource; const pResource = params.pResource;
const pQuery = params.pQuery; const pQuery = params.pQuery;
@ -85,3 +87,5 @@ export default function createCanonicalRequest(params) {
`${signedHeaders}\n${payloadChecksum}`; `${signedHeaders}\n${payloadChecksum}`;
return canonicalRequest; return canonicalRequest;
} }
module.exports = createCanonicalRequest;

View File

@ -1,16 +1,16 @@
import errors from '../../../lib/errors'; 'use strict'; // eslint-disable-line strict
import * as constants from '../../constants';
import constructStringToSign from './constructStringToSign'; const errors = require('../../../lib/errors');
import { const constants = require('../../constants');
checkTimeSkew,
convertUTCtoISO8601, const constructStringToSign = require('./constructStringToSign');
convertAmzTimeToMs, const checkTimeSkew = require('./timeUtils').checkTimeSkew;
} from './timeUtils'; const convertUTCtoISO8601 = require('./timeUtils').convertUTCtoISO8601;
import { const convertAmzTimeToMs = require('./timeUtils').convertAmzTimeToMs;
extractAuthItems, const extractAuthItems = require('./validateInputs').extractAuthItems;
validateCredentials, const validateCredentials = require('./validateInputs').validateCredentials;
areSignedHeadersComplete, const areSignedHeadersComplete =
} from './validateInputs'; require('./validateInputs').areSignedHeadersComplete;
/** /**
* V4 header auth check * V4 header auth check
@ -21,7 +21,7 @@ import {
* @param {string} awsService - Aws service ('iam' or 's3') * @param {string} awsService - Aws service ('iam' or 's3')
* @return {callback} calls callback * @return {callback} calls callback
*/ */
export function check(request, log, data, awsService) { function check(request, log, data, awsService) {
log.trace('running header auth check'); log.trace('running header auth check');
const token = request.headers['x-amz-security-token']; const token = request.headers['x-amz-security-token'];
@ -51,9 +51,8 @@ export function check(request, log, data, awsService) {
if (payloadChecksum === 'STREAMING-AWS4-HMAC-SHA256-PAYLOAD') { if (payloadChecksum === 'STREAMING-AWS4-HMAC-SHA256-PAYLOAD') {
log.trace('requesting streaming v4 auth'); log.trace('requesting streaming v4 auth');
if (request.method !== 'PUT') { if (request.method !== 'PUT') {
log.debug('streaming v4 auth for put only', { log.debug('streaming v4 auth for put only',
method: 'auth/v4/headerAuthCheck.check', { method: 'auth/v4/headerAuthCheck.check' });
});
return { err: errors.InvalidArgument }; return { err: errors.InvalidArgument };
} }
if (!request.headers['x-amz-decoded-content-length']) { if (!request.headers['x-amz-decoded-content-length']) {
@ -78,12 +77,9 @@ export function check(request, log, data, awsService) {
if (xAmzDate) { if (xAmzDate) {
const xAmzDateArr = xAmzDate.split('T'); const xAmzDateArr = xAmzDate.split('T');
// check that x-amz- date has the correct format and after epochTime // check that x-amz- date has the correct format and after epochTime
if ( if (xAmzDateArr.length === 2 && xAmzDateArr[0].length === 8
xAmzDateArr.length === 2 && && xAmzDateArr[1].length === 7
xAmzDateArr[0].length === 8 && && Number.parseInt(xAmzDateArr[0], 10) > 19700101) {
xAmzDateArr[1].length === 7 &&
Number.parseInt(xAmzDateArr[0], 10) > 19700101
) {
// format of x-amz- date is ISO 8601: YYYYMMDDTHHMMSSZ // format of x-amz- date is ISO 8601: YYYYMMDDTHHMMSSZ
timestamp = request.headers['x-amz-date']; timestamp = request.headers['x-amz-date'];
} }
@ -91,27 +87,18 @@ export function check(request, log, data, awsService) {
timestamp = convertUTCtoISO8601(request.headers.date); timestamp = convertUTCtoISO8601(request.headers.date);
} }
if (!timestamp) { if (!timestamp) {
log.debug('missing or invalid date header', { log.debug('missing or invalid date header',
method: 'auth/v4/headerAuthCheck.check', { method: 'auth/v4/headerAuthCheck.check' });
}); return { err: errors.AccessDenied.
return { customizeDescription('Authentication requires a valid Date or ' +
err: errors.AccessDenied.customizeDescription( 'x-amz-date header') };
'Authentication requires a valid Date or ' + 'x-amz-date header'
),
};
} }
const validationResult = validateCredentials( const validationResult = validateCredentials(credentialsArr, timestamp,
credentialsArr, log);
timestamp,
log
);
if (validationResult instanceof Error) { if (validationResult instanceof Error) {
log.debug('credentials in improper format', { log.debug('credentials in improper format', { credentialsArr,
credentialsArr, timestamp, validationResult });
timestamp,
validationResult,
});
return { err: validationResult }; return { err: validationResult };
} }
// credentialsArr is [accessKey, date, region, aws-service, aws4_request] // credentialsArr is [accessKey, date, region, aws-service, aws4_request]
@ -134,7 +121,7 @@ export function check(request, log, data, awsService) {
// expiry is as set out in the policy. // expiry is as set out in the policy.
// 15 minutes in seconds // 15 minutes in seconds
const expiry = 15 * 60; const expiry = (15 * 60);
const isTimeSkewed = checkTimeSkew(timestamp, expiry, log); const isTimeSkewed = checkTimeSkew(timestamp, expiry, log);
if (isTimeSkewed) { if (isTimeSkewed) {
return { err: errors.RequestTimeTooSkewed }; return { err: errors.RequestTimeTooSkewed };
@ -146,11 +133,8 @@ export function check(request, log, data, awsService) {
proxyPath = decodeURIComponent(request.headers.proxy_path); proxyPath = decodeURIComponent(request.headers.proxy_path);
} catch (err) { } catch (err) {
log.debug('invalid proxy_path header', { proxyPath, err }); log.debug('invalid proxy_path header', { proxyPath, err });
return { return { err: errors.InvalidArgument.customizeDescription(
err: errors.InvalidArgument.customizeDescription( 'invalid proxy_path header') };
'invalid proxy_path header'
),
};
} }
} }
@ -170,6 +154,7 @@ export function check(request, log, data, awsService) {
return { err: stringToSign }; return { err: stringToSign };
} }
return { return {
err: null, err: null,
params: { params: {
@ -193,3 +178,5 @@ export function check(request, log, data, awsService) {
}, },
}; };
} }
module.exports = { check };

View File

@ -1,10 +1,15 @@
import * as constants from '../../constants'; 'use strict'; // eslint-disable-line strict
import errors from '../../errors';
import constructStringToSign from './constructStringToSign'; const constants = require('../../constants');
import { checkTimeSkew, convertAmzTimeToMs } from './timeUtils'; const errors = require('../../errors');
import { validateCredentials, extractQueryParams } from './validateInputs';
import { areSignedHeadersComplete } from './validateInputs'; const constructStringToSign = require('./constructStringToSign');
const checkTimeSkew = require('./timeUtils').checkTimeSkew;
const convertAmzTimeToMs = require('./timeUtils').convertAmzTimeToMs;
const validateCredentials = require('./validateInputs').validateCredentials;
const extractQueryParams = require('./validateInputs').extractQueryParams;
const areSignedHeadersComplete =
require('./validateInputs').areSignedHeadersComplete;
/** /**
* V4 query auth check * V4 query auth check
@ -13,7 +18,7 @@ import { areSignedHeadersComplete } from './validateInputs';
* @param {object} data - Contain authentification params (GET or POST data) * @param {object} data - Contain authentification params (GET or POST data)
* @return {callback} calls callback * @return {callback} calls callback
*/ */
export function check(request, log, data) { function check(request, log, data) {
const authParams = extractQueryParams(data, log); const authParams = extractQueryParams(data, log);
if (Object.keys(authParams).length !== 5) { if (Object.keys(authParams).length !== 5) {
@ -39,13 +44,11 @@ export function check(request, log, data) {
return { err: errors.AccessDenied }; return { err: errors.AccessDenied };
} }
const validationResult = validateCredentials(credential, timestamp, log); const validationResult = validateCredentials(credential, timestamp,
log);
if (validationResult instanceof Error) { if (validationResult instanceof Error) {
log.debug('credentials in improper format', { log.debug('credentials in improper format', { credential,
credential, timestamp, validationResult });
timestamp,
validationResult,
});
return { err: validationResult }; return { err: validationResult };
} }
const accessKey = credential[0]; const accessKey = credential[0];
@ -65,11 +68,8 @@ export function check(request, log, data) {
proxyPath = decodeURIComponent(request.headers.proxy_path); proxyPath = decodeURIComponent(request.headers.proxy_path);
} catch (err) { } catch (err) {
log.debug('invalid proxy_path header', { proxyPath }); log.debug('invalid proxy_path header', { proxyPath });
return { return { err: errors.InvalidArgument.customizeDescription(
err: errors.InvalidArgument.customizeDescription( 'invalid proxy_path header') };
'invalid proxy_path header'
),
};
} }
} }
@ -95,7 +95,8 @@ export function check(request, log, data) {
signedHeaders, signedHeaders,
payloadChecksum, payloadChecksum,
timestamp, timestamp,
credentialScope: `${scopeDate}/${region}/${service}/${requestType}`, credentialScope:
`${scopeDate}/${region}/${service}/${requestType}`,
awsService: service, awsService: service,
proxyPath, proxyPath,
}); });
@ -121,3 +122,5 @@ export function check(request, log, data) {
}, },
}; };
} }
module.exports = { check };

View File

@ -1,31 +1,15 @@
import { Transform } from 'stream'; const { Transform } = require('stream');
import async from 'async';
import errors from '../../../errors'; const async = require('async');
import constructChunkStringToSign from './constructChunkStringToSign'; const errors = require('../../../errors');
const constructChunkStringToSign = require('./constructChunkStringToSign');
/** /**
* This class is designed to handle the chunks sent in a streaming * This class is designed to handle the chunks sent in a streaming
* v4 Auth request * v4 Auth request
*/ */
export default class V4Transform extends Transform { class V4Transform extends Transform {
log;
cb;
accessKey;
region;
scopeDate;
timestamp;
credentialScope;
lastSignature;
currentSignature;
haveMetadata;
seekingDataSize;
currentData;
dataCursor;
currentMetadata;
lastPieceDone;
lastChunk;
vault;
/** /**
* @constructor * @constructor
* @param {object} streamingV4Params - info for chunk authentication * @param {object} streamingV4Params - info for chunk authentication
@ -44,14 +28,8 @@ export default class V4Transform extends Transform {
* @param {function} cb - callback to api * @param {function} cb - callback to api
*/ */
constructor(streamingV4Params, vault, log, cb) { constructor(streamingV4Params, vault, log, cb) {
const { const { accessKey, signatureFromRequest, region, scopeDate, timestamp,
accessKey, credentialScope } = streamingV4Params;
signatureFromRequest,
region,
scopeDate,
timestamp,
credentialScope,
} = streamingV4Params;
super({}); super({});
this.log = log; this.log = log;
this.cb = cb; this.cb = cb;
@ -101,30 +79,28 @@ export default class V4Transform extends Transform {
this.currentMetadata.push(remainingPlusStoredMetadata); this.currentMetadata.push(remainingPlusStoredMetadata);
return { completeMetadata: false }; return { completeMetadata: false };
} }
let fullMetadata = remainingPlusStoredMetadata.slice(0, lineBreakIndex); let fullMetadata = remainingPlusStoredMetadata.slice(0,
lineBreakIndex);
// handle extra line break on end of data chunk // handle extra line break on end of data chunk
if (fullMetadata.length === 0) { if (fullMetadata.length === 0) {
const chunkWithoutLeadingLineBreak = const chunkWithoutLeadingLineBreak = remainingPlusStoredMetadata
remainingPlusStoredMetadata.slice(2); .slice(2);
// find second line break // find second line break
lineBreakIndex = chunkWithoutLeadingLineBreak.indexOf('\r\n'); lineBreakIndex = chunkWithoutLeadingLineBreak.indexOf('\r\n');
if (lineBreakIndex < 0) { if (lineBreakIndex < 0) {
this.currentMetadata.push(chunkWithoutLeadingLineBreak); this.currentMetadata.push(chunkWithoutLeadingLineBreak);
return { completeMetadata: false }; return { completeMetadata: false };
} }
fullMetadata = chunkWithoutLeadingLineBreak.slice( fullMetadata = chunkWithoutLeadingLineBreak.slice(0,
0, lineBreakIndex);
lineBreakIndex
);
} }
const splitMeta = fullMetadata.toString().split(';'); const splitMeta = fullMetadata.toString().split(';');
this.log.trace('parsed full metadata for chunk', { splitMeta }); this.log.trace('parsed full metadata for chunk', { splitMeta });
if (splitMeta.length !== 2) { if (splitMeta.length !== 2) {
this.log.trace( this.log.trace('chunk body did not contain correct ' +
'chunk body did not contain correct ' + 'metadata format' 'metadata format');
);
return { err: errors.InvalidArgument }; return { err: errors.InvalidArgument };
} }
let dataSize = splitMeta[0]; let dataSize = splitMeta[0];
@ -156,9 +132,8 @@ export default class V4Transform extends Transform {
completeMetadata: true, completeMetadata: true,
// start slice at lineBreak plus 2 to remove line break at end of // start slice at lineBreak plus 2 to remove line break at end of
// metadata piece since length of '\r\n' is 2 // metadata piece since length of '\r\n' is 2
unparsedChunk: remainingPlusStoredMetadata.slice( unparsedChunk: remainingPlusStoredMetadata
lineBreakIndex + 2 .slice(lineBreakIndex + 2),
),
}; };
} }
@ -171,13 +146,10 @@ export default class V4Transform extends Transform {
*/ */
_authenticate(dataToSend, done) { _authenticate(dataToSend, done) {
// use prior sig to construct new string to sign // use prior sig to construct new string to sign
const stringToSign = constructChunkStringToSign( const stringToSign = constructChunkStringToSign(this.timestamp,
this.timestamp, this.credentialScope, this.lastSignature, dataToSend);
this.credentialScope, this.log.trace('constructed chunk string to sign',
this.lastSignature, { stringToSign });
dataToSend
);
this.log.trace('constructed chunk string to sign', { stringToSign });
// once used prior sig to construct string to sign, reassign // once used prior sig to construct string to sign, reassign
// lastSignature to current signature // lastSignature to current signature
this.lastSignature = this.currentSignature; this.lastSignature = this.currentSignature;
@ -193,18 +165,17 @@ export default class V4Transform extends Transform {
credentialScope: this.credentialScope, credentialScope: this.credentialScope,
}, },
}; };
return this.vault.authenticateV4Request(vaultParams, null, (err) => { return this.vault.authenticateV4Request(vaultParams, null, err => {
if (err) { if (err) {
this.log.trace('err from vault on streaming v4 auth', { this.log.trace('err from vault on streaming v4 auth',
error: err, { error: err, paramsSentToVault: vaultParams.data });
paramsSentToVault: vaultParams.data,
});
return done(err); return done(err);
} }
return done(); return done();
}); });
} }
/** /**
* This function will parse the chunk into metadata and data, * This function will parse the chunk into metadata and data,
* use the metadata to authenticate with vault and send the * use the metadata to authenticate with vault and send the
@ -224,10 +195,9 @@ export default class V4Transform extends Transform {
if (this.lastPieceDone) { if (this.lastPieceDone) {
const slice = chunk.slice(0, 10); const slice = chunk.slice(0, 10);
this.log.trace( this.log.trace('received chunk after end.' +
'received chunk after end.' + 'See first 10 bytes of chunk', 'See first 10 bytes of chunk',
{ chunk: slice.toString() } { chunk: slice.toString() });
);
return callback(); return callback();
} }
let unparsedChunk = chunk; let unparsedChunk = chunk;
@ -236,11 +206,10 @@ export default class V4Transform extends Transform {
// test function // test function
() => chunkLeftToEvaluate, () => chunkLeftToEvaluate,
// async function // async function
(done) => { done => {
if (!this.haveMetadata) { if (!this.haveMetadata) {
this.log.trace( this.log.trace('do not have metadata so calling ' +
'do not have metadata so calling ' + '_parseMetadata' '_parseMetadata');
);
// need to parse our metadata // need to parse our metadata
const parsedMetadataResults = const parsedMetadataResults =
this._parseMetadata(unparsedChunk); this._parseMetadata(unparsedChunk);
@ -258,7 +227,7 @@ export default class V4Transform extends Transform {
} }
if (this.lastChunk) { if (this.lastChunk) {
this.log.trace('authenticating final chunk with no data'); this.log.trace('authenticating final chunk with no data');
return this._authenticate(null, (err) => { return this._authenticate(null, err => {
if (err) { if (err) {
return done(err); return done(err);
} }
@ -277,18 +246,17 @@ export default class V4Transform extends Transform {
} }
// parse just the next data piece without \r\n at the end // parse just the next data piece without \r\n at the end
// (therefore, minus 2) // (therefore, minus 2)
const nextDataPiece = unparsedChunk.slice( const nextDataPiece =
0, unparsedChunk.slice(0, this.seekingDataSize - 2);
this.seekingDataSize - 2
);
// add parsed data piece to other currentData pieces // add parsed data piece to other currentData pieces
// so that this.currentData is the full data piece // so that this.currentData is the full data piece
nextDataPiece.copy(this.currentData, this.dataCursor); nextDataPiece.copy(this.currentData, this.dataCursor);
return this._authenticate(this.currentData, (err) => { return this._authenticate(this.currentData, err => {
if (err) { if (err) {
return done(err); return done(err);
} }
unparsedChunk = unparsedChunk.slice(this.seekingDataSize); unparsedChunk =
unparsedChunk.slice(this.seekingDataSize);
this.push(this.currentData); this.push(this.currentData);
this.haveMetadata = false; this.haveMetadata = false;
this.seekingDataSize = -1; this.seekingDataSize = -1;
@ -299,7 +267,7 @@ export default class V4Transform extends Transform {
}); });
}, },
// final callback // final callback
(err) => { err => {
if (err) { if (err) {
return this.cb(err); return this.cb(err);
} }
@ -309,3 +277,5 @@ export default class V4Transform extends Transform {
); );
} }
} }
module.exports = V4Transform;

View File

@ -1,5 +1,6 @@
import * as crypto from 'crypto'; const crypto = require('crypto');
import * as constants from '../../../constants';
const constants = require('../../../constants');
/** /**
* Constructs stringToSign for chunk * Constructs stringToSign for chunk
@ -12,12 +13,8 @@ import * as constants from '../../../constants';
* @param {string} justDataChunk - data portion of chunk * @param {string} justDataChunk - data portion of chunk
* @returns {string} stringToSign * @returns {string} stringToSign
*/ */
export default function constructChunkStringToSign( function constructChunkStringToSign(timestamp,
timestamp: string, credentialScope, lastSignature, justDataChunk) {
credentialScope: string,
lastSignature: string,
justDataChunk: string
): string {
let currentChunkHash; let currentChunkHash;
// for last chunk, there will be no data, so use emptyStringHash // for last chunk, there will be no data, so use emptyStringHash
if (!justDataChunk) { if (!justDataChunk) {
@ -25,12 +22,11 @@ export default function constructChunkStringToSign(
} else { } else {
currentChunkHash = crypto.createHash('sha256'); currentChunkHash = crypto.createHash('sha256');
currentChunkHash = currentChunkHash currentChunkHash = currentChunkHash
.update(justDataChunk, 'binary') .update(justDataChunk, 'binary').digest('hex');
.digest('hex');
} }
return ( return `AWS4-HMAC-SHA256-PAYLOAD\n${timestamp}\n` +
`AWS4-HMAC-SHA256-PAYLOAD\n${timestamp}\n` +
`${credentialScope}\n${lastSignature}\n` + `${credentialScope}\n${lastSignature}\n` +
`${constants.emptyStringHash}\n${currentChunkHash}` `${constants.emptyStringHash}\n${currentChunkHash}`;
);
} }
module.exports = constructChunkStringToSign;

View File

@ -1,10 +1,12 @@
'use strict'; // eslint-disable-line strict
/** /**
* Convert timestamp to milliseconds since Unix Epoch * Convert timestamp to milliseconds since Unix Epoch
* @param {string} timestamp of ISO8601Timestamp format without * @param {string} timestamp of ISO8601Timestamp format without
* dashes or colons, e.g. 20160202T220410Z * dashes or colons, e.g. 20160202T220410Z
* @return {number} number of milliseconds since Unix Epoch * @return {number} number of milliseconds since Unix Epoch
*/ */
export function convertAmzTimeToMs(timestamp) { function convertAmzTimeToMs(timestamp) {
const arr = timestamp.split(''); const arr = timestamp.split('');
// Convert to YYYY-MM-DDTHH:mm:ss.sssZ // Convert to YYYY-MM-DDTHH:mm:ss.sssZ
const ISO8601time = `${arr.slice(0, 4).join('')}-${arr[4]}${arr[5]}` + const ISO8601time = `${arr.slice(0, 4).join('')}-${arr[4]}${arr[5]}` +
@ -19,7 +21,7 @@ export function convertAmzTimeToMs(timestamp) {
* @param {string} timestamp of UTC form: Fri, 10 Feb 2012 21:34:55 GMT * @param {string} timestamp of UTC form: Fri, 10 Feb 2012 21:34:55 GMT
* @return {string} ISO8601 timestamp of form: YYYYMMDDTHHMMSSZ * @return {string} ISO8601 timestamp of form: YYYYMMDDTHHMMSSZ
*/ */
export function convertUTCtoISO8601(timestamp) { function convertUTCtoISO8601(timestamp) {
// convert to ISO string: YYYY-MM-DDTHH:mm:ss.sssZ. // convert to ISO string: YYYY-MM-DDTHH:mm:ss.sssZ.
const converted = new Date(timestamp).toISOString(); const converted = new Date(timestamp).toISOString();
// Remove "-"s and "."s and milliseconds // Remove "-"s and "."s and milliseconds
@ -34,7 +36,7 @@ export function convertUTCtoISO8601(timestamp) {
* @param {object} log - log for request * @param {object} log - log for request
* @return {boolean} true if there is a time problem * @return {boolean} true if there is a time problem
*/ */
export function checkTimeSkew(timestamp, expiry, log) { function checkTimeSkew(timestamp, expiry, log) {
const currentTime = Date.now(); const currentTime = Date.now();
const fifteenMinutes = (15 * 60 * 1000); const fifteenMinutes = (15 * 60 * 1000);
const parsedTimestamp = convertAmzTimeToMs(timestamp); const parsedTimestamp = convertAmzTimeToMs(timestamp);
@ -54,3 +56,5 @@ export function checkTimeSkew(timestamp, expiry, log) {
} }
return false; return false;
} }
module.exports = { convertAmzTimeToMs, convertUTCtoISO8601, checkTimeSkew };

View File

@ -1,4 +1,6 @@
import errors from '../../../lib/errors'; 'use strict'; // eslint-disable-line strict
const errors = require('../../../lib/errors');
/** /**
* Validate Credentials * Validate Credentials
@ -9,7 +11,7 @@ import errors from '../../../lib/errors';
* @param {object} log - logging object * @param {object} log - logging object
* @return {boolean} true if credentials are correct format, false if not * @return {boolean} true if credentials are correct format, false if not
*/ */
export function validateCredentials(credentials, timestamp, log) { function validateCredentials(credentials, timestamp, log) {
if (!Array.isArray(credentials) || credentials.length !== 5) { if (!Array.isArray(credentials) || credentials.length !== 5) {
log.warn('credentials in improper format', { credentials }); log.warn('credentials in improper format', { credentials });
return errors.InvalidArgument; return errors.InvalidArgument;
@ -35,27 +37,20 @@ export function validateCredentials(credentials, timestamp, log) {
// convert timestamp to format of scopeDate YYYYMMDD // convert timestamp to format of scopeDate YYYYMMDD
const timestampDate = timestamp.split('T')[0]; const timestampDate = timestamp.split('T')[0];
if (scopeDate.length !== 8 || scopeDate !== timestampDate) { if (scopeDate.length !== 8 || scopeDate !== timestampDate) {
log.warn('scope date must be the same date as the timestamp date', { log.warn('scope date must be the same date as the timestamp date',
scopeDate, { scopeDate, timestampDate });
timestampDate,
});
return errors.RequestTimeTooSkewed; return errors.RequestTimeTooSkewed;
} }
if ( if (service !== 's3' && service !== 'iam' && service !== 'ring' &&
service !== 's3' && service !== 'sts') {
service !== 'iam' &&
service !== 'ring' &&
service !== 'sts'
) {
log.warn('service in credentials is not one of s3/iam/ring/sts', { log.warn('service in credentials is not one of s3/iam/ring/sts', {
service, service,
}); });
return errors.InvalidArgument; return errors.InvalidArgument;
} }
if (requestType !== 'aws4_request') { if (requestType !== 'aws4_request') {
log.warn('requestType contained in params is not aws4_request', { log.warn('requestType contained in params is not aws4_request',
requestType, { requestType });
});
return errors.InvalidArgument; return errors.InvalidArgument;
} }
return {}; return {};
@ -67,14 +62,13 @@ export function validateCredentials(credentials, timestamp, log) {
* @param {object} log - logging object * @param {object} log - logging object
* @return {object} object containing extracted query params for authV4 * @return {object} object containing extracted query params for authV4
*/ */
export function extractQueryParams(queryObj, log) { function extractQueryParams(queryObj, log) {
const authParams = {}; const authParams = {};
// Do not need the algorithm sent back // Do not need the algorithm sent back
if (queryObj['X-Amz-Algorithm'] !== 'AWS4-HMAC-SHA256') { if (queryObj['X-Amz-Algorithm'] !== 'AWS4-HMAC-SHA256') {
log.warn('algorithm param incorrect', { log.warn('algorithm param incorrect',
algo: queryObj['X-Amz-Algorithm'], { algo: queryObj['X-Amz-Algorithm'] });
});
return authParams; return authParams;
} }
@ -87,6 +81,7 @@ export function extractQueryParams(queryObj, log) {
return authParams; return authParams;
} }
const signature = queryObj['X-Amz-Signature']; const signature = queryObj['X-Amz-Signature'];
if (signature && signature.length === 64) { if (signature && signature.length === 64) {
authParams.signatureFromRequest = signature; authParams.signatureFromRequest = signature;
@ -99,15 +94,14 @@ export function extractQueryParams(queryObj, log) {
if (timestamp && timestamp.length === 16) { if (timestamp && timestamp.length === 16) {
authParams.timestamp = timestamp; authParams.timestamp = timestamp;
} else { } else {
log.warn('missing or invalid timestamp', { log.warn('missing or invalid timestamp',
timestamp: queryObj['X-Amz-Date'], { timestamp: queryObj['X-Amz-Date'] });
});
return authParams; return authParams;
} }
const expiry = Number.parseInt(queryObj['X-Amz-Expires'], 10); const expiry = Number.parseInt(queryObj['X-Amz-Expires'], 10);
const sevenDays = 604800; const sevenDays = 604800;
if (expiry && expiry > 0 && expiry <= sevenDays) { if (expiry && (expiry > 0 && expiry <= sevenDays)) {
authParams.expiry = expiry; authParams.expiry = expiry;
} else { } else {
log.warn('invalid expiry', { expiry }); log.warn('invalid expiry', { expiry });
@ -124,15 +118,17 @@ export function extractQueryParams(queryObj, log) {
return authParams; return authParams;
} }
/** /**
* Extract and validate components from auth header * Extract and validate components from auth header
* @param {string} authHeader - authorization header from request * @param {string} authHeader - authorization header from request
* @param {object} log - logging object * @param {object} log - logging object
* @return {object} object containing extracted auth header items for authV4 * @return {object} object containing extracted auth header items for authV4
*/ */
export function extractAuthItems(authHeader, log) { function extractAuthItems(authHeader, log) {
const authItems = {}; const authItems = {};
const authArray = authHeader.replace('AWS4-HMAC-SHA256 ', '').split(','); const authArray = authHeader
.replace('AWS4-HMAC-SHA256 ', '').split(',');
if (authArray.length < 3) { if (authArray.length < 3) {
return authItems; return authItems;
@ -142,34 +138,25 @@ export function extractAuthItems(authHeader, log) {
const signedHeadersStr = authArray[1]; const signedHeadersStr = authArray[1];
const signatureStr = authArray[2]; const signatureStr = authArray[2];
log.trace('credentials from request', { credentialStr }); log.trace('credentials from request', { credentialStr });
if ( if (credentialStr && credentialStr.trim().startsWith('Credential=')
credentialStr && && credentialStr.indexOf('/') > -1) {
credentialStr.trim().startsWith('Credential=') &&
credentialStr.indexOf('/') > -1
) {
authItems.credentialsArr = credentialStr authItems.credentialsArr = credentialStr
.trim() .trim().replace('Credential=', '').split('/');
.replace('Credential=', '')
.split('/');
} else { } else {
log.warn('missing credentials'); log.warn('missing credentials');
} }
log.trace('signed headers from request', { signedHeadersStr }); log.trace('signed headers from request', { signedHeadersStr });
if ( if (signedHeadersStr && signedHeadersStr.trim()
signedHeadersStr && .startsWith('SignedHeaders=')) {
signedHeadersStr.trim().startsWith('SignedHeaders=')
) {
authItems.signedHeaders = signedHeadersStr authItems.signedHeaders = signedHeadersStr
.trim() .trim().replace('SignedHeaders=', '');
.replace('SignedHeaders=', '');
} else { } else {
log.warn('missing signed headers'); log.warn('missing signed headers');
} }
log.trace('signature from request', { signatureStr }); log.trace('signature from request', { signatureStr });
if (signatureStr && signatureStr.trim().startsWith('Signature=')) { if (signatureStr && signatureStr.trim().startsWith('Signature=')) {
authItems.signatureFromRequest = signatureStr authItems.signatureFromRequest = signatureStr
.trim() .trim().replace('Signature=', '');
.replace('Signature=', '');
} else { } else {
log.warn('missing signature'); log.warn('missing signature');
} }
@ -183,20 +170,21 @@ export function extractAuthItems(authHeader, log) {
* @param {object} allHeaders - request.headers * @param {object} allHeaders - request.headers
* @return {boolean} true if all x-amz-headers included and false if not * @return {boolean} true if all x-amz-headers included and false if not
*/ */
export function areSignedHeadersComplete(signedHeaders, allHeaders) { function areSignedHeadersComplete(signedHeaders, allHeaders) {
const signedHeadersList = signedHeaders.split(';'); const signedHeadersList = signedHeaders.split(';');
if (signedHeadersList.indexOf('host') === -1) { if (signedHeadersList.indexOf('host') === -1) {
return false; return false;
} }
const headers = Object.keys(allHeaders); const headers = Object.keys(allHeaders);
for (let i = 0; i < headers.length; i++) { for (let i = 0; i < headers.length; i++) {
if ( if ((headers[i].startsWith('x-amz-')
(headers[i].startsWith('x-amz-') || || headers[i].startsWith('x-scal-'))
headers[i].startsWith('x-scal-')) && && signedHeadersList.indexOf(headers[i]) === -1) {
signedHeadersList.indexOf(headers[i]) === -1
) {
return false; return false;
} }
} }
return true; return true;
} }
module.exports = { validateCredentials, extractQueryParams,
areSignedHeadersComplete, extractAuthItems };

View File

@ -1,4 +1,4 @@
import { LevelDB } from 'level'; 'use strict'; // eslint-disable-line strict
const writeOptions = { sync: true }; const writeOptions = { sync: true };
@ -18,7 +18,7 @@ const writeOptions = { sync: true };
* @param {String} message - the Error message. * @param {String} message - the Error message.
* @returns {Error} the Error object. * @returns {Error} the Error object.
*/ */
function propError(propName: string, message: string): Error { function propError(propName, message) {
const err = new Error(message); const err = new Error(message);
err[propName] = true; err[propName] = true;
return err; return err;
@ -27,7 +27,7 @@ function propError(propName: string, message: string): Error {
/** /**
* Running transaction with multiple updates to be committed atomically * Running transaction with multiple updates to be committed atomically
*/ */
export class IndexTransaction { class IndexTransaction {
/** /**
* Builds a new transaction * Builds a new transaction
* *
@ -36,7 +36,7 @@ export class IndexTransaction {
* *
* @returns {IndexTransaction} a new empty transaction * @returns {IndexTransaction} a new empty transaction
*/ */
constructor(db: LevelDB) { constructor(db) {
this.operations = []; this.operations = [];
this.db = db; this.db = db;
this.closed = false; this.closed = false;
@ -63,17 +63,13 @@ export class IndexTransaction {
*/ */
push(op) { push(op) {
if (this.closed) { if (this.closed) {
throw propError( throw propError('pushOnCommittedTransaction',
'pushOnCommittedTransaction', 'can not add ops to already committed transaction');
'can not add ops to already committed transaction'
);
} }
if (op.type !== 'put' && op.type !== 'del') { if (op.type !== 'put' && op.type !== 'del') {
throw propError( throw propError('invalidTransactionVerb',
'invalidTransactionVerb', `unknown action type: ${op.type}`);
`unknown action type: ${op.type}`
);
} }
if (op.key === undefined) { if (op.key === undefined) {
@ -140,22 +136,14 @@ export class IndexTransaction {
*/ */
addCondition(condition) { addCondition(condition) {
if (this.closed) { if (this.closed) {
throw propError( throw propError('pushOnCommittedTransaction',
'pushOnCommittedTransaction', 'can not add conditions to already committed transaction');
'can not add conditions to already committed transaction'
);
} }
if (condition === undefined || Object.keys(condition).length === 0) { if (condition === undefined || Object.keys(condition).length === 0) {
throw propError( throw propError('missingCondition', 'missing condition for conditional put');
'missingCondition',
'missing condition for conditional put'
);
} }
if (typeof condition.notExists !== 'string') { if (typeof (condition.notExists) !== 'string') {
throw propError( throw propError('unsupportedConditionalOperation', 'missing key or supported condition');
'unsupportedConditionalOperation',
'missing key or supported condition'
);
} }
this.conditions.push(condition); this.conditions.push(condition);
} }
@ -170,21 +158,13 @@ export class IndexTransaction {
*/ */
commit(cb) { commit(cb) {
if (this.closed) { if (this.closed) {
return cb( return cb(propError('alreadyCommitted',
propError( 'transaction was already committed'));
'alreadyCommitted',
'transaction was already committed'
)
);
} }
if (this.operations.length === 0) { if (this.operations.length === 0) {
return cb( return cb(propError('emptyTransaction',
propError( 'tried to commit an empty transaction'));
'emptyTransaction',
'tried to commit an empty transaction'
)
);
} }
this.closed = true; this.closed = true;
@ -196,3 +176,7 @@ export class IndexTransaction {
return this.db.batch(this.operations, writeOptions, cb); return this.db.batch(this.operations, writeOptions, cb);
} }
} }
module.exports = {
IndexTransaction,
};

View File

@ -1,4 +1,4 @@
export function reshapeExceptionError(error) { function reshapeExceptionError(error) {
const { message, code, stack, name } = error; const { message, code, stack, name } = error;
return { return {
message, message,
@ -7,3 +7,7 @@ export function reshapeExceptionError(error) {
name, name,
}; };
} }
module.exports = {
reshapeExceptionError,
};

View File

@ -1,14 +1,11 @@
import errorsObj from '../errors/arsenalErrors.json'; 'use strict'; // eslint-disable-line strict
/** /**
* ArsenalError * ArsenalError
* *
* @extends {Error} * @extends {Error}
*/ */
export class ArsenalError extends Error { class ArsenalError extends Error {
code: number
description: string
/** /**
* constructor. * constructor.
* *
@ -16,7 +13,7 @@ export class ArsenalError extends Error {
* @param {number} code - HTTP status code * @param {number} code - HTTP status code
* @param {string} desc - Verbose description of error * @param {string} desc - Verbose description of error
*/ */
constructor(type: string, code: number, desc: string) { constructor(type, code, desc) {
super(type); super(type);
/** /**
@ -68,12 +65,23 @@ export class ArsenalError extends Error {
} }
} }
const errors: { [key: string]: ArsenalError } = {}; /**
Object.keys(errorsObj) * Generate an Errors instances object.
.filter((index) => index !== '_comment') *
.forEach((index) => { * @returns {Object.<string, ArsenalError>} - object field by arsenalError
const { code, description } = errorsObj[index]; * instances
errors[index] = new ArsenalError(index, code, description); */
}); function errorsGen() {
const errors = {};
const errorsObj = require('../errors/arsenalErrors.json');
export default errors; Object.keys(errorsObj)
.filter(index => index !== '_comment')
.forEach(index => {
errors[index] = new ArsenalError(index, errorsObj[index].code,
errorsObj[index].description);
});
return errors;
}
module.exports = errorsGen();

View File

@ -1,4 +1,6 @@
export const ciphers = [ 'use strict'; // eslint-disable-line strict
const ciphers = [
'DHE-RSA-AES128-GCM-SHA256', 'DHE-RSA-AES128-GCM-SHA256',
'ECDHE-ECDSA-AES128-GCM-SHA256', 'ECDHE-ECDSA-AES128-GCM-SHA256',
'ECDHE-RSA-AES256-GCM-SHA384', 'ECDHE-RSA-AES256-GCM-SHA384',
@ -26,3 +28,7 @@ export const ciphers = [
'!EDH-RSA-DES-CBC3-SHA', '!EDH-RSA-DES-CBC3-SHA',
'!KRB5-DES-CBC3-SHA', '!KRB5-DES-CBC3-SHA',
].join(':'); ].join(':');
module.exports = {
ciphers,
};

View File

@ -29,11 +29,16 @@ c2CNfUEqyRbJF4pE9ZcdQReT5p/llmyhQdvq6cHH+cKJk63C6DHRVoStsnsUcvKe
bLxKsygK77ttjr61cxLoDJeGd5L5h1CPmwIBAg== bLxKsygK77ttjr61cxLoDJeGd5L5h1CPmwIBAg==
-----END DH PARAMETERS----- -----END DH PARAMETERS-----
*/ */
'use strict'; // eslint-disable-line strict
export const dhparam = const dhparam =
'MIIBCAKCAQEAh99T77KGNuiY9N6xrCJ3QNv4SFADTa3CD+1VMTAdRJLHUNpglB+i' + 'MIIBCAKCAQEAh99T77KGNuiY9N6xrCJ3QNv4SFADTa3CD+1VMTAdRJLHUNpglB+i' +
'AoTYiLDFZgtTCpx0ZZUD+JM3qiCZy0OK5/ZGlVD7sZmxjRtdpVK4qIPtwav8t0J7' + 'AoTYiLDFZgtTCpx0ZZUD+JM3qiCZy0OK5/ZGlVD7sZmxjRtdpVK4qIPtwav8t0J7' +
'c2CNfUEqyRbJF4pE9ZcdQReT5p/llmyhQdvq6cHH+cKJk63C6DHRVoStsnsUcvKe' + 'c2CNfUEqyRbJF4pE9ZcdQReT5p/llmyhQdvq6cHH+cKJk63C6DHRVoStsnsUcvKe' +
'23PLGZulKg8H3eRBxHamHkmyuEVDtoNhMIoJONsdXSpo5GgcD4EQMM8xb/qsnCxn' + '23PLGZulKg8H3eRBxHamHkmyuEVDtoNhMIoJONsdXSpo5GgcD4EQMM8xb/qsnCxn' +
'6QIGTBvcHskxtlTZOfUPk4XQ6Yb3tQi2TurzkQHLln4U7p/GZs+D+6D3SgSPqr6P' + '6QIGTBvcHskxtlTZOfUPk4XQ6Yb3tQi2TurzkQHLln4U7p/GZs+D+6D3SgSPqr6P' +
'bLxKsygK77ttjr61cxLoDJeGd5L5h1CPmwIBAg=='; 'bLxKsygK77ttjr61cxLoDJeGd5L5h1CPmwIBAg==';
module.exports = {
dhparam,
};

View File

@ -1,2 +0,0 @@
export * as ciphers from './ciphers'
export * as dhparam from './dh2048'

View File

@ -1,4 +1,6 @@
import ipaddr from 'ipaddr.js'; 'use strict'; // eslint-disable-line strict
const ipaddr = require('ipaddr.js');
/** /**
* checkIPinRangeOrMatch checks whether a given ip address is in an ip address * checkIPinRangeOrMatch checks whether a given ip address is in an ip address
@ -7,7 +9,7 @@ import ipaddr from 'ipaddr.js';
* @param {object} ip - parsed ip address * @param {object} ip - parsed ip address
* @return {boolean} true if in range, false if not * @return {boolean} true if in range, false if not
*/ */
export function checkIPinRangeOrMatch(cidr, ip) { function checkIPinRangeOrMatch(cidr, ip) {
// If there is an exact match of the ip address, no need to check ranges // If there is an exact match of the ip address, no need to check ranges
if (ip.toString() === cidr) { if (ip.toString() === cidr) {
return true; return true;
@ -37,7 +39,7 @@ export function checkIPinRangeOrMatch(cidr, ip) {
* @param {string} ip - IPV4/IPV6/IPV4-mapped IPV6 address * @param {string} ip - IPV4/IPV6/IPV4-mapped IPV6 address
* @return {object} parsedIp - Object representation of parsed IP * @return {object} parsedIp - Object representation of parsed IP
*/ */
export function parseIp(ip) { function parseIp(ip) {
if (ipaddr.IPv4.isValid(ip)) { if (ipaddr.IPv4.isValid(ip)) {
return ipaddr.parse(ip); return ipaddr.parse(ip);
} }
@ -58,7 +60,7 @@ export function parseIp(ip) {
* @param {string} ip - IP address * @param {string} ip - IP address
* @return {boolean} - true if there is match or false for no match * @return {boolean} - true if there is match or false for no match
*/ */
export function ipMatchCidrList(cidrList, ip) { function ipMatchCidrList(cidrList, ip) {
const parsedIp = parseIp(ip); const parsedIp = parseIp(ip);
return cidrList.some(item => { return cidrList.some(item => {
let cidr; let cidr;
@ -73,3 +75,9 @@ export function ipMatchCidrList(cidrList, ip) {
return checkIPinRangeOrMatch(cidr || item, parsedIp); return checkIPinRangeOrMatch(cidr || item, parsedIp);
}); });
} }
module.exports = {
checkIPinRangeOrMatch,
ipMatchCidrList,
parseIp,
};

View File

@ -1,5 +1,6 @@
import { debuglog } from 'util'; 'use strict'; // eslint-disable-line
const debug = debuglog('jsutil');
const debug = require('util').debuglog('jsutil');
// JavaScript utility functions // JavaScript utility functions
@ -16,7 +17,7 @@ const debug = debuglog('jsutil');
* @return {function} a callable wrapper mirroring <tt>func</tt> but * @return {function} a callable wrapper mirroring <tt>func</tt> but
* only calls <tt>func</tt> at first invocation. * only calls <tt>func</tt> at first invocation.
*/ */
export function once(func) { module.exports.once = function once(func) {
const state = { called: false, res: undefined }; const state = { called: false, res: undefined };
return function wrapper(...args) { return function wrapper(...args) {
if (!state.called) { if (!state.called) {

View File

@ -1,8 +1,6 @@
import Redis from 'ioredis'; const Redis = require('ioredis');
export default class RedisClient {
_client: Redis
class RedisClient {
/** /**
* @constructor * @constructor
* @param {Object} config - config * @param {Object} config - config
@ -13,7 +11,7 @@ export default class RedisClient {
*/ */
constructor(config, logger) { constructor(config, logger) {
this._client = new Redis(config); this._client = new Redis(config);
this._client.on('error', (err) => this._client.on('error', err =>
logger.trace('error from redis', { logger.trace('error from redis', {
error: err, error: err,
method: 'RedisClient.constructor', method: 'RedisClient.constructor',
@ -31,12 +29,12 @@ export default class RedisClient {
* @param {callback} cb - callback (error, result) * @param {callback} cb - callback (error, result)
* @return {undefined} * @return {undefined}
*/ */
scan(pattern: string, count = 10, cb) { scan(pattern, count = 10, cb) {
const params = { match: pattern, count }; const params = { match: pattern, count };
const keys = []; const keys = [];
const stream = this._client.scanStream(params); const stream = this._client.scanStream(params);
stream.on('data', (resultKeys) => { stream.on('data', resultKeys => {
for (let i = 0; i < resultKeys.length; i++) { for (let i = 0; i < resultKeys.length; i++) {
keys.push(resultKeys[i]); keys.push(resultKeys[i]);
} }
@ -53,12 +51,9 @@ export default class RedisClient {
* @param {callback} cb - callback * @param {callback} cb - callback
* @return {undefined} * @return {undefined}
*/ */
incrEx(key: string, expiry: number, cb) { incrEx(key, expiry, cb) {
return this._client return this._client
.multi([ .multi([['incr', key], ['expire', key, expiry]])
['incr', key],
['expire', key, expiry],
])
.exec(cb); .exec(cb);
} }
@ -69,7 +64,7 @@ export default class RedisClient {
* @param {callback} cb - callback * @param {callback} cb - callback
* @return {undefined} * @return {undefined}
*/ */
incrby(key: string, amount: number, cb) { incrby(key, amount, cb) {
return this._client.incrby(key, amount, cb); return this._client.incrby(key, amount, cb);
} }
@ -81,12 +76,9 @@ export default class RedisClient {
* @param {callback} cb - callback * @param {callback} cb - callback
* @return {undefined} * @return {undefined}
*/ */
incrbyEx(key: string, amount: number, expiry: number, cb) { incrbyEx(key, amount, expiry, cb) {
return this._client return this._client
.multi([ .multi([['incrby', key, amount], ['expire', key, expiry]])
['incrby', key, amount],
['expire', key, expiry],
])
.exec(cb); .exec(cb);
} }
@ -97,7 +89,7 @@ export default class RedisClient {
* @param {callback} cb - callback * @param {callback} cb - callback
* @return {undefined} * @return {undefined}
*/ */
decrby(key: string, amount: number, cb) { decrby(key, amount, cb) {
return this._client.decrby(key, amount, cb); return this._client.decrby(key, amount, cb);
} }
@ -107,7 +99,7 @@ export default class RedisClient {
* @param {callback} cb - callback * @param {callback} cb - callback
* @return {undefined} * @return {undefined}
*/ */
get(key: string, cb) { get(key, cb) {
return this._client.get(key, cb); return this._client.get(key, cb);
} }
@ -119,7 +111,7 @@ export default class RedisClient {
* If cb response returns 1, key exists. * If cb response returns 1, key exists.
* @return {undefined} * @return {undefined}
*/ */
exists(key: string, cb) { exists(key, cb) {
return this._client.exists(key, cb); return this._client.exists(key, cb);
} }
@ -129,7 +121,7 @@ export default class RedisClient {
* @param {callback} cb - callback * @param {callback} cb - callback
* @return {undefined} * @return {undefined}
*/ */
batch(cmds: string[], cb) { batch(cmds, cb) {
return this._client.pipeline(cmds).exec(cb); return this._client.pipeline(cmds).exec(cb);
} }
@ -142,7 +134,7 @@ export default class RedisClient {
* @param {callback} cb - callback * @param {callback} cb - callback
* @return {undefined} * @return {undefined}
*/ */
zadd(key: string, score: number, value: string, cb) { zadd(key, score, value, cb) {
return this._client.zadd(key, score, value, cb); return this._client.zadd(key, score, value, cb);
} }
@ -155,7 +147,7 @@ export default class RedisClient {
* @param {function} cb - callback * @param {function} cb - callback
* @return {undefined} * @return {undefined}
*/ */
zcard(key: string, cb) { zcard(key, cb) {
return this._client.zcard(key, cb); return this._client.zcard(key, cb);
} }
@ -169,7 +161,7 @@ export default class RedisClient {
* @param {function} cb - callback * @param {function} cb - callback
* @return {undefined} * @return {undefined}
*/ */
zscore(key: string, value: string, cb) { zscore(key, value, cb) {
return this._client.zscore(key, value, cb); return this._client.zscore(key, value, cb);
} }
@ -182,7 +174,7 @@ export default class RedisClient {
* The cb response returns number of values removed * The cb response returns number of values removed
* @return {undefined} * @return {undefined}
*/ */
zrem(key: string, value: string | any[], cb) { zrem(key, value, cb) {
return this._client.zrem(key, value, cb); return this._client.zrem(key, value, cb);
} }
@ -194,7 +186,7 @@ export default class RedisClient {
* @param {function} cb - callback * @param {function} cb - callback
* @return {undefined} * @return {undefined}
*/ */
zrange(key: string, start: number, end: number, cb) { zrange(key, start, end, cb) {
return this._client.zrange(key, start, end, cb); return this._client.zrange(key, start, end, cb);
} }
@ -208,7 +200,7 @@ export default class RedisClient {
* @param {function} cb - callback * @param {function} cb - callback
* @return {undefined} * @return {undefined}
*/ */
zrangebyscore(key: string, min: number | string, max: number | string, cb) { zrangebyscore(key, min, max, cb) {
return this._client.zrangebyscore(key, min, max, cb); return this._client.zrangebyscore(key, min, max, cb);
} }
@ -218,7 +210,7 @@ export default class RedisClient {
* @param {function} cb - callback * @param {function} cb - callback
* @return {undefined} * @return {undefined}
*/ */
ttl(key: string, cb) { ttl(key, cb) {
return this._client.ttl(key, cb); return this._client.ttl(key, cb);
} }
@ -234,3 +226,5 @@ export default class RedisClient {
return this._client.client('list', cb); return this._client.client('list', cb);
} }
} }
module.exports = RedisClient;

View File

@ -1,18 +1,13 @@
import async from 'async'; const async = require('async');
import RedisClient from './RedisClient';
export default class StatsClient {
_redis?: RedisClient;
_interval: number;
_expiry: number;
class StatsClient {
/** /**
* @constructor * @constructor
* @param {object} redisClient - RedisClient instance * @param {object} redisClient - RedisClient instance
* @param {number} interval - sampling interval by seconds * @param {number} interval - sampling interval by seconds
* @param {number} expiry - sampling duration by seconds * @param {number} expiry - sampling duration by seconds
*/ */
constructor(redisClient: RedisClient, interval: number, expiry: number) { constructor(redisClient, interval, expiry) {
this._redis = redisClient; this._redis = redisClient;
this._interval = interval; this._interval = interval;
this._expiry = expiry; this._expiry = expiry;
@ -29,9 +24,9 @@ export default class StatsClient {
* @param {object} d - Date instance * @param {object} d - Date instance
* @return {number} timestamp - normalized to the nearest interval * @return {number} timestamp - normalized to the nearest interval
*/ */
_normalizeTimestamp(d: Date): number { _normalizeTimestamp(d) {
const s = d.getSeconds(); const s = d.getSeconds();
return d.setSeconds(s - (s % this._interval), 0); return d.setSeconds(s - s % this._interval, 0);
} }
/** /**
@ -39,7 +34,7 @@ export default class StatsClient {
* @param {object} d - Date instance * @param {object} d - Date instance
* @return {number} timestamp - set to the previous interval * @return {number} timestamp - set to the previous interval
*/ */
_setPrevInterval(d: Date): number { _setPrevInterval(d) {
return d.setSeconds(d.getSeconds() - this._interval); return d.setSeconds(d.getSeconds() - this._interval);
} }
@ -49,7 +44,7 @@ export default class StatsClient {
* @param {Date} date - Date instance * @param {Date} date - Date instance
* @return {string} key - key for redis * @return {string} key - key for redis
*/ */
buildKey(name: string, date: Date): string { buildKey(name, date) {
return `${name}:${this._normalizeTimestamp(date)}`; return `${name}:${this._normalizeTimestamp(date)}`;
} }
@ -59,7 +54,7 @@ export default class StatsClient {
* @param {array} arr - Date instance * @param {array} arr - Date instance
* @return {string} key - key for redis * @return {string} key - key for redis
*/ */
_getCount(arr: any[]): string { _getCount(arr) {
return arr.reduce((prev, a) => { return arr.reduce((prev, a) => {
let num = parseInt(a[1], 10); let num = parseInt(a[1], 10);
num = Number.isNaN(num) ? 0 : num; num = Number.isNaN(num) ? 0 : num;
@ -74,7 +69,7 @@ export default class StatsClient {
* @param {function} cb - callback * @param {function} cb - callback
* @return {undefined} * @return {undefined}
*/ */
reportNewRequest(id: string, incr: number, cb) { reportNewRequest(id, incr, cb) {
if (!this._redis) { if (!this._redis) {
return undefined; return undefined;
} }
@ -86,8 +81,8 @@ export default class StatsClient {
callback = incr; callback = incr;
amount = 1; amount = 1;
} else { } else {
callback = cb && typeof cb === 'function' ? cb : this._noop; callback = (cb && typeof cb === 'function') ? cb : this._noop;
amount = typeof incr === 'number' ? incr : 1; amount = (typeof incr === 'number') ? incr : 1;
} }
const key = this.buildKey(`${id}:requests`, new Date()); const key = this.buildKey(`${id}:requests`, new Date());
@ -102,7 +97,7 @@ export default class StatsClient {
* @param {function} [cb] - callback * @param {function} [cb] - callback
* @return {undefined} * @return {undefined}
*/ */
incrementKey(key: string, incr: number, cb) { incrementKey(key, incr, cb) {
const callback = cb || this._noop; const callback = cb || this._noop;
return this._redis.incrby(key, incr, callback); return this._redis.incrby(key, incr, callback);
} }
@ -114,7 +109,7 @@ export default class StatsClient {
* @param {function} [cb] - callback * @param {function} [cb] - callback
* @return {undefined} * @return {undefined}
*/ */
decrementKey(key: string, decr: number, cb) { decrementKey(key, decr, cb) {
const callback = cb || this._noop; const callback = cb || this._noop;
return this._redis.decrby(key, decr, callback); return this._redis.decrby(key, decr, callback);
} }
@ -125,7 +120,7 @@ export default class StatsClient {
* @param {callback} cb - callback * @param {callback} cb - callback
* @return {undefined} * @return {undefined}
*/ */
report500(id: string, cb) { report500(id, cb) {
if (!this._redis) { if (!this._redis) {
return undefined; return undefined;
} }
@ -141,24 +136,21 @@ export default class StatsClient {
* @param {callback} cb - callback to call with the err/result * @param {callback} cb - callback to call with the err/result
* @return {undefined} * @return {undefined}
*/ */
getAllStats(log, ids: any[], cb) { getAllStats(log, ids, cb) {
if (!this._redis) { if (!this._redis) {
return cb(null, {}); return cb(null, {});
} }
const statsRes = { const statsRes = {
requests: 0, 'requests': 0,
'500s': 0, '500s': 0,
sampleDuration: this._expiry, 'sampleDuration': this._expiry,
}; };
let requests = 0; let requests = 0;
let errors = 0; let errors = 0;
// for now set concurrency to default of 10 // for now set concurrency to default of 10
return async.eachLimit( return async.eachLimit(ids, 10, (id, done) => {
ids,
10,
(id, done) => {
this.getStats(log, id, (err, res) => { this.getStats(log, id, (err, res) => {
if (err) { if (err) {
return done(err); return done(err);
@ -167,8 +159,7 @@ export default class StatsClient {
errors += res['500s']; errors += res['500s'];
return done(); return done();
}); });
}, }, error => {
(error) => {
if (error) { if (error) {
log.error('error getting stats', { log.error('error getting stats', {
error, error,
@ -179,8 +170,7 @@ export default class StatsClient {
statsRes.requests = requests; statsRes.requests = requests;
statsRes['500s'] = errors; statsRes['500s'] = errors;
return cb(null, statsRes); return cb(null, statsRes);
} });
);
} }
/** /**
@ -190,7 +180,7 @@ export default class StatsClient {
* @param {callback} cb - callback to call with the err/result * @param {callback} cb - callback to call with the err/result
* @return {undefined} * @return {undefined}
*/ */
getStats(log, id: string, cb) { getStats(log, id, cb) {
if (!this._redis) { if (!this._redis) {
return cb(null, {}); return cb(null, {});
} }
@ -215,9 +205,9 @@ export default class StatsClient {
* index 1 contains the result * index 1 contains the result
*/ */
const statsRes = { const statsRes = {
requests: 0, 'requests': 0,
'500s': 0, '500s': 0,
sampleDuration: this._expiry, 'sampleDuration': this._expiry,
}; };
if (err) { if (err) {
log.error('error getting stats', { log.error('error getting stats', {
@ -237,3 +227,5 @@ export default class StatsClient {
}); });
} }
} }
module.exports = StatsClient;

View File

@ -1,5 +1,6 @@
import async from 'async'; const async = require('async');
import StatsClient from './StatsClient';
const StatsClient = require('./StatsClient');
/** /**
* @class StatsModel * @class StatsModel
@ -7,16 +8,17 @@ import StatsClient from './StatsClient';
* @classdesc Extend and overwrite how timestamps are normalized by minutes * @classdesc Extend and overwrite how timestamps are normalized by minutes
* rather than by seconds * rather than by seconds
*/ */
export default class StatsModel extends StatsClient { class StatsModel extends StatsClient {
/** /**
* Utility method to convert 2d array rows to columns, and vice versa * Utility method to convert 2d array rows to columns, and vice versa
* See also: https://docs.ruby-lang.org/en/2.0.0/Array.html#method-i-zip * See also: https://docs.ruby-lang.org/en/2.0.0/Array.html#method-i-zip
* @param {array} arrays - 2d array of integers * @param {array} arrays - 2d array of integers
* @return {array} converted array * @return {array} converted array
*/ */
_zip(arrays: number[][]) { _zip(arrays) {
if (arrays.length > 0 && arrays.every((a) => Array.isArray(a))) { if (arrays.length > 0 && arrays.every(a => Array.isArray(a))) {
return arrays[0].map((_, i) => arrays.map((a) => a[i])); return arrays[0].map((_, i) => arrays.map(a => a[i]));
} }
return []; return [];
} }
@ -26,9 +28,9 @@ export default class StatsModel extends StatsClient {
* @param {object} d - Date instance * @param {object} d - Date instance
* @return {number} timestamp - normalized to the nearest interval * @return {number} timestamp - normalized to the nearest interval
*/ */
_normalizeTimestamp(d: Date) { _normalizeTimestamp(d) {
const m = d.getMinutes(); const m = d.getMinutes();
return d.setMinutes(m - (m % Math.floor(this._interval / 60)), 0, 0); return d.setMinutes(m - m % (Math.floor(this._interval / 60)), 0, 0);
} }
/** /**
@ -63,16 +65,16 @@ export default class StatsModel extends StatsClient {
* @param {callback} cb - callback to call with the err/result * @param {callback} cb - callback to call with the err/result
* @return {undefined} * @return {undefined}
*/ */
getAllStats(log, ids: string[], cb) { getAllStats(log, ids, cb) {
if (!this._redis) { if (!this._redis) {
return cb(null, {}); return cb(null, {});
} }
const size = Math.floor(this._expiry / this._interval); const size = Math.floor(this._expiry / this._interval);
const statsRes = { const statsRes = {
requests: Array(size).fill(0), 'requests': Array(size).fill(0),
'500s': Array(size).fill(0), '500s': Array(size).fill(0),
sampleDuration: this._expiry, 'sampleDuration': this._expiry,
}; };
const requests = []; const requests = [];
const errors = []; const errors = [];
@ -116,9 +118,9 @@ export default class StatsModel extends StatsClient {
* @param {function} cb - Callback * @param {function} cb - Callback
* @return {undefined} * @return {undefined}
*/ */
getAllGlobalStats(ids: string[], log, cb) { getAllGlobalStats(ids, log, cb) {
const reqsKeys = ids.map((key) => ['get', key]); const reqsKeys = ids.map(key => (['get', key]));
return this._redis!.batch(reqsKeys, (err, res) => { return this._redis.batch(reqsKeys, (err, res) => {
const statsRes = { requests: 0 }; const statsRes = { requests: 0 };
if (err) { if (err) {
log.error('error getting metrics', { log.error('error getting metrics', {
@ -147,7 +149,7 @@ export default class StatsModel extends StatsClient {
* @param {Date} d - Date instance * @param {Date} d - Date instance
* @return {number} timestamp - normalized to the nearest hour * @return {number} timestamp - normalized to the nearest hour
*/ */
normalizeTimestampByHour(d: Date) { normalizeTimestampByHour(d) {
return d.setMinutes(0, 0, 0); return d.setMinutes(0, 0, 0);
} }
@ -156,7 +158,7 @@ export default class StatsModel extends StatsClient {
* @param {Date} d - Date instance * @param {Date} d - Date instance
* @return {number} timestamp - one hour prior to date passed * @return {number} timestamp - one hour prior to date passed
*/ */
_getDatePreviousHour(d: Date) { _getDatePreviousHour(d) {
return d.setHours(d.getHours() - 1); return d.setHours(d.getHours() - 1);
} }
@ -165,8 +167,8 @@ export default class StatsModel extends StatsClient {
* @param {number} epoch - epoch time * @param {number} epoch - epoch time
* @return {array} array of sorted set key timestamps * @return {array} array of sorted set key timestamps
*/ */
getSortedSetHours(epoch: number) { getSortedSetHours(epoch) {
const timestamps: number[] = []; const timestamps = [];
let date = this.normalizeTimestampByHour(new Date(epoch)); let date = this.normalizeTimestampByHour(new Date(epoch));
while (timestamps.length < 24) { while (timestamps.length < 24) {
timestamps.push(date); timestamps.push(date);
@ -180,7 +182,7 @@ export default class StatsModel extends StatsClient {
* @param {number} epoch - epoch time * @param {number} epoch - epoch time
* @return {string} normalized hour timestamp for given time * @return {string} normalized hour timestamp for given time
*/ */
getSortedSetCurrentHour(epoch: number) { getSortedSetCurrentHour(epoch) {
return this.normalizeTimestampByHour(new Date(epoch)); return this.normalizeTimestampByHour(new Date(epoch));
} }
@ -192,8 +194,8 @@ export default class StatsModel extends StatsClient {
* @param {callback} cb - callback * @param {callback} cb - callback
* @return {undefined} * @return {undefined}
*/ */
addToSortedSet(key: string, score: number, value: string, cb) { addToSortedSet(key, score, value, cb) {
this._redis!.exists(key, (err, resCode) => { this._redis.exists(key, (err, resCode) => {
if (err) { if (err) {
return cb(err); return cb(err);
} }
@ -202,7 +204,8 @@ export default class StatsModel extends StatsClient {
const msInADay = 24 * 60 * 60 * 1000; const msInADay = 24 * 60 * 60 * 1000;
const nearestHour = this.normalizeTimestampByHour(new Date()); const nearestHour = this.normalizeTimestampByHour(new Date());
// in seconds // in seconds
const ttl = Math.ceil((msInADay - (Date.now() - nearestHour)) / 1000); const ttl = Math.ceil(
(msInADay - (Date.now() - nearestHour)) / 1000);
const cmds = [ const cmds = [
['zadd', key, score, value], ['zadd', key, score, value],
['expire', key, ttl], ['expire', key, ttl],
@ -211,7 +214,7 @@ export default class StatsModel extends StatsClient {
if (err) { if (err) {
return cb(err); return cb(err);
} }
const cmdErr = res.find((r) => r[0] !== null); const cmdErr = res.find(r => r[0] !== null);
if (cmdErr) { if (cmdErr) {
return cb(cmdErr); return cb(cmdErr);
} }
@ -219,7 +222,9 @@ export default class StatsModel extends StatsClient {
return cb(null, successResponse); return cb(null, successResponse);
}); });
} }
return this._redis!.zadd(key, score, value, cb); return this._redis.zadd(key, score, value, cb);
}); });
} }
} }
module.exports = StatsModel;

View File

@ -1,13 +1,13 @@
import promClient from 'prom-client'; const promClient = require('prom-client');
const collectDefaultMetricsIntervalMs = const collectDefaultMetricsIntervalMs =
process.env.COLLECT_DEFAULT_METRICS_INTERVAL_MS !== undefined process.env.COLLECT_DEFAULT_METRICS_INTERVAL_MS !== undefined ?
? Number.parseInt(process.env.COLLECT_DEFAULT_METRICS_INTERVAL_MS, 10) Number.parseInt(process.env.COLLECT_DEFAULT_METRICS_INTERVAL_MS, 10) :
: 10000; 10000;
promClient.collectDefaultMetrics({ timeout: collectDefaultMetricsIntervalMs }); promClient.collectDefaultMetrics({ timeout: collectDefaultMetricsIntervalMs });
export default class ZenkoMetrics { class ZenkoMetrics {
static createCounter(params) { static createCounter(params) {
return new promClient.Counter(params); return new promClient.Counter(params);
} }
@ -36,3 +36,5 @@ export default class ZenkoMetrics {
return promClient.register.contentType; return promClient.register.contentType;
} }
} }
module.exports = ZenkoMetrics;

View File

@ -1,17 +1,11 @@
import errors from '../errors'; const errors = require('../errors');
const validServices = { const validServices = {
aws: ['s3', 'iam', 'sts', 'ring'], aws: ['s3', 'iam', 'sts', 'ring'],
scality: ['utapi', 'sso'], scality: ['utapi', 'sso'],
}; };
export default class ARN { class ARN {
_partition: string;
_service: string;
_region: string | null;
_accountId: string | null;
_resource: string;
/** /**
* *
* Create an ARN object from its individual components * Create an ARN object from its individual components
@ -23,7 +17,7 @@ export default class ARN {
* @param {string} [accountId] - AWS 12-digit account ID * @param {string} [accountId] - AWS 12-digit account ID
* @param {string} resource - AWS resource path (e.g. 'foo/bar') * @param {string} resource - AWS resource path (e.g. 'foo/bar')
*/ */
constructor(partition: string, service: string, region: string, accountId: string, resource: string) { constructor(partition, service, region, accountId, resource) {
this._partition = partition; this._partition = partition;
this._service = service; this._service = service;
this._region = region || null; this._region = region || null;
@ -31,7 +25,7 @@ export default class ARN {
this._resource = resource; this._resource = resource;
} }
static createFromString(arnStr: string) { static createFromString(arnStr) {
const [arn, partition, service, region, accountId, const [arn, partition, service, region, accountId,
resourceType, resource] = arnStr.split(':'); resourceType, resource] = arnStr.split(':');
@ -63,8 +57,8 @@ export default class ARN {
`bad ARN: bad account ID "${accountId}": ` + `bad ARN: bad account ID "${accountId}": ` +
'must be a 12-digit number or "*"') }; 'must be a 12-digit number or "*"') };
} }
const fullResource = resource !== undefined ? const fullResource = (resource !== undefined ?
`${resourceType}:${resource}` : resourceType; `${resourceType}:${resource}` : resourceType);
return new ARN(partition, service, region, accountId, fullResource); return new ARN(partition, service, region, accountId, fullResource);
} }
@ -85,21 +79,21 @@ export default class ARN {
} }
isIAMAccount() { isIAMAccount() {
return this.getService() === 'iam' && return this.getService() === 'iam'
this.getAccountId() !== null && && this.getAccountId() !== null
this.getAccountId() !== '*' && && this.getAccountId() !== '*'
this.getResource() === 'root'; && this.getResource() === 'root';
} }
isIAMUser() { isIAMUser() {
return this.getService() === 'iam' && return this.getService() === 'iam'
this.getAccountId() !== null && && this.getAccountId() !== null
this.getAccountId() !== '*' && && this.getAccountId() !== '*'
this.getResource().startsWith('user/'); && this.getResource().startsWith('user/');
} }
isIAMRole() { isIAMRole() {
return this.getService() === 'iam' && return this.getService() === 'iam'
this.getAccountId() !== null && && this.getAccountId() !== null
this.getResource().startsWith('role'); && this.getResource().startsWith('role');
} }
toString() { toString() {
@ -108,3 +102,5 @@ export default class ARN {
.join(':'); .join(':');
} }
} }
module.exports = ARN;

View File

@ -1,13 +1,7 @@
import { legacyLocations } from '../constants'; const { legacyLocations } = require('../constants');
import escapeForXml from '../s3middleware/escapeForXml'; const escapeForXml = require('../s3middleware/escapeForXml');
export default class BackendInfo {
_config;
_objectLocationConstraint;
_bucketLocationConstraint;
_requestEndpoint;
_legacyLocationConstraint;
class BackendInfo {
/** /**
* Represents the info necessary to evaluate which data backend to use * Represents the info necessary to evaluate which data backend to use
* on a data put call. * on a data put call.
@ -242,3 +236,5 @@ export default class BackendInfo {
return this._config.backends.data; return this._config.backends.data;
} }
} }
module.exports = BackendInfo;

View File

@ -2,9 +2,7 @@
* Helper class to ease access to the Azure specific information for * Helper class to ease access to the Azure specific information for
* storage accounts mapped to buckets. * storage accounts mapped to buckets.
*/ */
export default class BucketAzureInfo { class BucketAzureInfo {
_data
/** /**
* @constructor * @constructor
* @param {object} obj - Raw structure for the Azure info on storage account * @param {object} obj - Raw structure for the Azure info on storage account
@ -235,3 +233,5 @@ export default class BucketAzureInfo {
return this._data; return this._data;
} }
} }
module.exports = BucketAzureInfo;

View File

@ -1,44 +1,19 @@
import assert from 'assert'; const assert = require('assert');
import uuid from 'uuid/v4'; const uuid = require('uuid/v4');
import { WebsiteConfiguration } from './WebsiteConfiguration'; const { WebsiteConfiguration } = require('./WebsiteConfiguration');
import ReplicationConfiguration from './ReplicationConfiguration'; const ReplicationConfiguration = require('./ReplicationConfiguration');
import LifecycleConfiguration from './LifecycleConfiguration'; const LifecycleConfiguration = require('./LifecycleConfiguration');
import ObjectLockConfiguration from './ObjectLockConfiguration'; const ObjectLockConfiguration = require('./ObjectLockConfiguration');
import BucketPolicy from './BucketPolicy'; const BucketPolicy = require('./BucketPolicy');
import NotificationConfiguration from './NotificationConfiguration'; const NotificationConfiguration = require('./NotificationConfiguration');
// WHEN UPDATING THIS NUMBER, UPDATE BucketInfoModelVersion.md CHANGELOG // WHEN UPDATING THIS NUMBER, UPDATE BucketInfoModelVersion.md CHANGELOG
// BucketInfoModelVersion.md can be found in documentation/ at the root // BucketInfoModelVersion.md can be found in documentation/ at the root
// of this repository // of this repository
const modelVersion = 14; const modelVersion = 14;
export default class BucketInfo { class BucketInfo {
_acl;
_name;
_owner;
_ownerDisplayName;
_creationDate;
_mdBucketModelVersion;
_transient;
_deleted;
_serverSideEncryption;
_versioningConfiguration;
_locationConstraint;
_readLocationConstraint;
_websiteConfiguration;
_replicationConfiguration;
_cors;
_lifecycleConfiguration;
_bucketPolicy;
_uid;
_isNFS;
_ingestion;
_azureInfo;
_objectLockEnabled;
_objectLockConfiguration;
_notificationConfiguration;
/** /**
* Represents all bucket information. * Represents all bucket information.
* @constructor * @constructor
@ -793,3 +768,5 @@ export default class BucketInfo {
return this; return this;
} }
} }
module.exports = BucketInfo;

View File

@ -1,7 +1,7 @@
import assert from 'assert'; const assert = require('assert');
import errors from '../errors'; const errors = require('../errors');
import { validateResourcePolicy } from '../policy/policyValidator'; const { validateResourcePolicy } = require('../policy/policyValidator');
/** /**
* Format of json policy: * Format of json policy:
@ -49,10 +49,7 @@ const objectActions = [
's3:PutObjectTagging', 's3:PutObjectTagging',
]; ];
export default class BucketPolicy { class BucketPolicy {
_json
_policy
/** /**
* Create a Bucket Policy instance * Create a Bucket Policy instance
* @param {string} json - the json policy * @param {string} json - the json policy
@ -78,11 +75,8 @@ export default class BucketPolicy {
*/ */
_getPolicy() { _getPolicy() {
if (!this._json || this._json === '') { if (!this._json || this._json === '') {
return { return { error: errors.MalformedPolicy.customizeDescription(
error: errors.MalformedPolicy.customizeDescription( 'request json is empty or undefined') };
'request json is empty or undefined'
),
};
} }
const validSchema = validateResourcePolicy(this._json); const validSchema = validateResourcePolicy(this._json);
if (validSchema.error) { if (validSchema.error) {
@ -110,32 +104,25 @@ export default class BucketPolicy {
* @return {error} - contains error or empty obj * @return {error} - contains error or empty obj
*/ */
_validateActionResource() { _validateActionResource() {
const invalid = this._policy.Statement.every((s) => { const invalid = this._policy.Statement.every(s => {
const actions = const actions = typeof s.Action === 'string' ?
typeof s.Action === 'string' ? [s.Action] : s.Action; [s.Action] : s.Action;
const resources = const resources = typeof s.Resource === 'string' ?
typeof s.Resource === 'string' ? [s.Resource] : s.Resource; [s.Resource] : s.Resource;
const objectAction = actions.some( const objectAction = actions.some(a =>
(a) => a.includes('Object') || objectActions.includes(a) a.includes('Object') || objectActions.includes(a));
);
// wildcardObjectAction checks for actions such as 's3:*' or // wildcardObjectAction checks for actions such as 's3:*' or
// 's3:Put*' but will return false for actions such as // 's3:Put*' but will return false for actions such as
// 's3:PutBucket*' // 's3:PutBucket*'
const wildcardObjectAction = actions.some( const wildcardObjectAction = actions.some(
(a) => a.includes('*') && !a.includes('Bucket') a => a.includes('*') && !a.includes('Bucket'));
); const objectResource = resources.some(r => r.includes('/'));
const objectResource = resources.some((r) => r.includes('/')); return ((objectAction && !objectResource) ||
return ( (objectResource && !objectAction && !wildcardObjectAction));
(objectAction && !objectResource) ||
(objectResource && !objectAction && !wildcardObjectAction)
);
}); });
if (invalid) { if (invalid) {
return { return { error: errors.MalformedPolicy.customizeDescription(
error: errors.MalformedPolicy.customizeDescription( 'Action does not apply to any resource(s) in statement') };
'Action does not apply to any resource(s) in statement'
),
};
} }
return {}; return {};
} }
@ -152,3 +139,5 @@ export default class BucketPolicy {
assert.deepStrictEqual(validated, { error: null, valid: true }); assert.deepStrictEqual(validated, { error: null, valid: true });
} }
} }
module.exports = BucketPolicy;

View File

@ -1,9 +1,9 @@
import assert from 'assert'; const assert = require('assert');
import UUID from 'uuid'; const UUID = require('uuid');
import errors from '../errors'; const errors = require('../errors');
import LifecycleRule from './LifecycleRule'; const LifecycleRule = require('./LifecycleRule');
import escapeForXml from '../s3middleware/escapeForXml'; const escapeForXml = require('../s3middleware/escapeForXml');
const MAX_DAYS = 2147483647; // Max 32-bit signed binary integer. const MAX_DAYS = 2147483647; // Max 32-bit signed binary integer.
@ -83,7 +83,7 @@ const MAX_DAYS = 2147483647; // Max 32-bit signed binary integer.
}; };
*/ */
export default class LifecycleConfiguration { class LifecycleConfiguration {
/** /**
* Create a Lifecycle Configuration instance * Create a Lifecycle Configuration instance
* @param {string} xml - the parsed xml * @param {string} xml - the parsed xml
@ -1128,7 +1128,7 @@ export default class LifecycleConfiguration {
`<NoncurrentDays>${noncurrentDays}` + `<NoncurrentDays>${noncurrentDays}` +
'</NoncurrentDays>', '</NoncurrentDays>',
`<StorageClass>${storageClass}</StorageClass>`, `<StorageClass>${storageClass}</StorageClass>`,
`</${actionName}>`, `</${actionName}>`
); );
}); });
Action = xml.join(''); Action = xml.join('');
@ -1148,7 +1148,7 @@ export default class LifecycleConfiguration {
`<${actionName}>`, `<${actionName}>`,
element, element,
`<StorageClass>${storageClass}</StorageClass>`, `<StorageClass>${storageClass}</StorageClass>`,
`</${actionName}>`, `</${actionName}>`
); );
}); });
Action = xml.join(''); Action = xml.join('');
@ -1220,3 +1220,5 @@ export default class LifecycleConfiguration {
return { Rules: rulesJSON }; return { Rules: rulesJSON };
} }
} }
module.exports = LifecycleConfiguration;

View File

@ -1,11 +1,11 @@
import uuid from 'uuid/v4'; const uuid = require('uuid/v4');
/** /**
* @class LifecycleRule * @class LifecycleRule
* *
* @classdesc Simple get/set class to build a single Rule * @classdesc Simple get/set class to build a single Rule
*/ */
export default class LifecycleRule { class LifecycleRule {
constructor(id, status) { constructor(id, status) {
// defaults // defaults
this.id = id || uuid(); this.id = id || uuid();
@ -134,3 +134,5 @@ export default class LifecycleRule {
return this; return this;
} }
} }
module.exports = LifecycleRule;

View File

@ -1,11 +1,11 @@
import assert from 'assert'; const assert = require('assert');
import UUID from 'uuid'; const UUID = require('uuid');
import { const {
supportedNotificationEvents, supportedNotificationEvents,
notificationArnPrefix, notificationArnPrefix,
} from '../constants'; } = require('../constants');
import errors from '../errors'; const errors = require('../errors');
/** /**
* Format of xml request: * Format of xml request:
@ -27,7 +27,7 @@ import errors from '../errors';
* </NotificationConfiguration> * </NotificationConfiguration>
*/ */
/** /**
* Format of config: * Format of config:
* *
* config = { * config = {
@ -51,7 +51,7 @@ import errors from '../errors';
* } * }
*/ */
export default class NotificationConfiguration { class NotificationConfiguration {
/** /**
* Create a Notification Configuration instance * Create a Notification Configuration instance
* @param {string} xml - parsed configuration xml * @param {string} xml - parsed configuration xml
@ -307,3 +307,5 @@ export default class NotificationConfiguration {
return; return;
} }
} }
module.exports = NotificationConfiguration;

View File

@ -1,5 +1,6 @@
import assert from 'assert'; const assert = require('assert');
import errors from '../errors';
const errors = require('../errors');
/** /**
* Format of xml request: * Format of xml request:
@ -16,7 +17,7 @@ import errors from '../errors';
* </ObjectLockConfiguration> * </ObjectLockConfiguration>
*/ */
/** /**
* Format of config: * Format of config:
* *
* config = { * config = {
@ -26,7 +27,7 @@ import errors from '../errors';
* } * }
* } * }
*/ */
export default class ObjectLockConfiguration { class ObjectLockConfiguration {
/** /**
* Create an Object Lock Configuration instance * Create an Object Lock Configuration instance
* @param {string} xml - the parsed configuration xml * @param {string} xml - the parsed configuration xml
@ -233,3 +234,5 @@ export default class ObjectLockConfiguration {
'</ObjectLockConfiguration>'; '</ObjectLockConfiguration>';
} }
} }
module.exports = ObjectLockConfiguration;

View File

@ -1,15 +1,16 @@
import * as crypto from 'crypto'; const crypto = require('crypto');
import * as constants from '../constants'; const constants = require('../constants');
import * as VersionIDUtils from '../versioning/VersionID'; const VersionIDUtils = require('../versioning/VersionID');
import ObjectMDLocation from './ObjectMDLocation'; const ObjectMDLocation = require('./ObjectMDLocation');
/** /**
* Class to manage metadata object for regular s3 objects (instead of * Class to manage metadata object for regular s3 objects (instead of
* mpuPart metadata for example) * mpuPart metadata for example)
*/ */
export default class ObjectMD { class ObjectMD {
/** /**
* Create a new instance of ObjectMD. Parameter <tt>objMd</tt> is * Create a new instance of ObjectMD. Parameter <tt>objMd</tt> is
* reserved for internal use, users should call * reserved for internal use, users should call
@ -1189,3 +1190,5 @@ export default class ObjectMD {
return this._data; return this._data;
} }
} }
module.exports = ObjectMD;

View File

@ -2,7 +2,7 @@
* Helper class to ease access to the Azure specific information for * Helper class to ease access to the Azure specific information for
* Blob and Container objects. * Blob and Container objects.
*/ */
export default class ObjectMDAzureInfo { class ObjectMDAzureInfo {
/** /**
* @constructor * @constructor
* @param {object} obj - Raw structure for the Azure info on Blob/Container * @param {object} obj - Raw structure for the Azure info on Blob/Container
@ -158,3 +158,5 @@ export default class ObjectMDAzureInfo {
return this._data; return this._data;
} }
} }
module.exports = ObjectMDAzureInfo;

View File

@ -2,7 +2,8 @@
* Helper class to ease access to a single data location in metadata * Helper class to ease access to a single data location in metadata
* 'location' array * 'location' array
*/ */
export default class ObjectMDLocation { class ObjectMDLocation {
/** /**
* @constructor * @constructor
* @param {object} locationObj - single data location info * @param {object} locationObj - single data location info
@ -126,3 +127,5 @@ export default class ObjectMDLocation {
return this._data; return this._data;
} }
} }
module.exports = ObjectMDLocation;

View File

@ -1,9 +1,9 @@
import assert from 'assert'; const assert = require('assert');
import UUID from 'uuid'; const UUID = require('uuid');
import escapeForXml from '../s3middleware/escapeForXml'; const escapeForXml = require('../s3middleware/escapeForXml');
import errors from '../errors'; const errors = require('../errors');
import { isValidBucketName } from '../s3routes/routesUtils'; const { isValidBucketName } = require('../s3routes/routesUtils');
const MAX_RULES = 1000; const MAX_RULES = 1000;
const RULE_ID_LIMIT = 255; const RULE_ID_LIMIT = 255;
@ -37,19 +37,7 @@ const validStorageClasses = [
</ReplicationConfiguration> </ReplicationConfiguration>
*/ */
export default class ReplicationConfiguration { class ReplicationConfiguration {
_parsedXML
_log
_config
_configPrefixes
_configIDs
_role
_destination
_rules
_prevStorageClass
_hasScalityDestination
_preferredReadLocation
/** /**
* Create a ReplicationConfiguration instance * Create a ReplicationConfiguration instance
* @param {string} xml - The parsed XML * @param {string} xml - The parsed XML
@ -481,3 +469,5 @@ export default class ReplicationConfiguration {
}); });
} }
} }
module.exports = ReplicationConfiguration;

View File

@ -1,7 +1,4 @@
export class RoutingRule { class RoutingRule {
_redirect;
_condition;
/** /**
* Represents a routing rule in a website configuration. * Represents a routing rule in a website configuration.
* @constructor * @constructor
@ -55,12 +52,7 @@ export class RoutingRule {
} }
} }
export class WebsiteConfiguration { class WebsiteConfiguration {
_indexDocument;
_errorDocument;
_redirectAllRequestsTo;
_routingRules;
/** /**
* Object that represents website configuration * Object that represents website configuration
* @constructor * @constructor
@ -196,3 +188,8 @@ export class WebsiteConfiguration {
return this._routingRules; return this._routingRules;
} }
} }
module.exports = {
RoutingRule,
WebsiteConfiguration,
};

View File

@ -17,7 +17,7 @@ function shuffle(array) {
} }
} }
export default class RoundRobin { class RoundRobin {
/** /**
* @constructor * @constructor
* @param {object[]|string[]} hostsList - list of hosts to query * @param {object[]|string[]} hostsList - list of hosts to query
@ -167,3 +167,5 @@ export default class RoundRobin {
} }
} }
} }
module.exports = RoundRobin;

View File

@ -1,13 +1,16 @@
import * as http from 'http'; 'use strict'; // eslint-disable-line
import * as https from 'https';
import assert from 'assert'; const http = require('http');
import { dhparam } from '../../https/dh2048'; const https = require('https');
import { ciphers } from '../../https/ciphers'; const assert = require('assert');
import errors from '../../errors'; const dhparam = require('../../https/dh2048').dhparam;
import { checkSupportIPv6 } from './utils'; const ciphers = require('../../https/ciphers').ciphers;
const errors = require('../../errors');
const { checkSupportIPv6 } = require('./utils');
export default class Server { class Server {
/** /**
* @constructor * @constructor
* *
@ -456,3 +459,5 @@ export default class Server {
return this; return this;
} }
} }
module.exports = Server;

View File

@ -1,5 +1,7 @@
import * as os from 'os'; 'use strict'; // eslint-disable-line
import errors from '../../errors';
const os = require('os');
const errors = require('../../errors');
/** /**
* Parse the Range header into an object * Parse the Range header into an object
@ -14,7 +16,7 @@ import errors from '../../errors';
* - an error attribute of type errors.InvalidArgument if the range * - an error attribute of type errors.InvalidArgument if the range
* syntax is invalid * syntax is invalid
*/ */
export function parseRangeSpec(rangeHeader) { function parseRangeSpec(rangeHeader) {
const rangeMatch = /^bytes=([0-9]+)?-([0-9]+)?$/.exec(rangeHeader); const rangeMatch = /^bytes=([0-9]+)?-([0-9]+)?$/.exec(rangeHeader);
if (rangeMatch) { if (rangeMatch) {
const rangeValues = rangeMatch.slice(1, 3); const rangeValues = rangeMatch.slice(1, 3);
@ -53,7 +55,7 @@ export function parseRangeSpec(rangeHeader) {
* - or an 'error' attribute of type errors.InvalidRange if the * - or an 'error' attribute of type errors.InvalidRange if the
* requested range is out of object's boundaries. * requested range is out of object's boundaries.
*/ */
export function getByteRangeFromSpec(rangeSpec, objectSize) { function getByteRangeFromSpec(rangeSpec, objectSize) {
if (rangeSpec.suffix !== undefined) { if (rangeSpec.suffix !== undefined) {
if (rangeSpec.suffix === 0) { if (rangeSpec.suffix === 0) {
// 0-byte suffix is always invalid (even on empty objects) // 0-byte suffix is always invalid (even on empty objects)
@ -93,7 +95,7 @@ export function getByteRangeFromSpec(rangeSpec, objectSize) {
* - or an 'error' attribute instead of type errors.InvalidRange if * - or an 'error' attribute instead of type errors.InvalidRange if
* the requested range is out of object's boundaries. * the requested range is out of object's boundaries.
*/ */
export function parseRange(rangeHeader, objectSize) { function parseRange(rangeHeader, objectSize) {
const rangeSpec = parseRangeSpec(rangeHeader); const rangeSpec = parseRangeSpec(rangeHeader);
if (rangeSpec.error) { if (rangeSpec.error) {
// invalid range syntax is silently ignored in HTTP spec, // invalid range syntax is silently ignored in HTTP spec,
@ -103,8 +105,15 @@ export function parseRange(rangeHeader, objectSize) {
return getByteRangeFromSpec(rangeSpec, objectSize); return getByteRangeFromSpec(rangeSpec, objectSize);
} }
export function checkSupportIPv6() { function checkSupportIPv6() {
const niList = os.networkInterfaces(); const niList = os.networkInterfaces();
return Object.keys(niList).some(network => return Object.keys(niList).some(network =>
niList[network].some(intfc => intfc.family === 'IPv6')); niList[network].some(intfc => intfc.family === 'IPv6'));
} }
module.exports = {
parseRangeSpec,
getByteRangeFromSpec,
parseRange,
checkSupportIPv6,
};

View File

@ -1,8 +1,12 @@
import async from 'async'; 'use strict'; // eslint-disable-line
import errors from '../../errors'; /* eslint new-cap: "off" */
import TTLVCodec from './codec/ttlv';
import TlsTransport from './transport/tls'; const async = require('async');
import KMIP from '.';
const errors = require('../../errors');
const TTLVCodec = require('./codec/ttlv.js');
const TlsTransport = require('./transport/tls.js');
const KMIP = require('.');
const CRYPTOGRAPHIC_OBJECT_TYPE = 'Symmetric Key'; const CRYPTOGRAPHIC_OBJECT_TYPE = 'Symmetric Key';
const CRYPTOGRAPHIC_ALGORITHM = 'AES'; const CRYPTOGRAPHIC_ALGORITHM = 'AES';
@ -51,12 +55,7 @@ function _arsenalError(err) {
if (typeof err === 'string') { if (typeof err === 'string') {
return errors.InternalError return errors.InternalError
.customizeDescription(`${messagePrefix} ${err}`); .customizeDescription(`${messagePrefix} ${err}`);
} else if ( } else if (err instanceof Error) {
err instanceof Error ||
// INFO: The second part is here only for Jest, to remove when we'll be
// fully migrated to TS
(err && typeof err.message === 'string')
) {
return errors.InternalError return errors.InternalError
.customizeDescription(`${messagePrefix} ${err.message}`); .customizeDescription(`${messagePrefix} ${err.message}`);
} }
@ -237,7 +236,8 @@ function _queryOperationsAndObjects(client, logger, cb) {
}); });
} }
export default class Client {
class Client {
/** /**
* Construct a high level KMIP driver suitable for cloudserver * Construct a high level KMIP driver suitable for cloudserver
* @param {Object} options - Instance options * @param {Object} options - Instance options
@ -599,3 +599,5 @@ export default class Client {
}); });
} }
} }
module.exports = Client;

View File

@ -1,4 +1,6 @@
import assert from 'assert'; 'use strict'; // eslint-disable-line
const assert = require('assert');
function _lookup(decodedTTLV, path) { function _lookup(decodedTTLV, path) {
@ -29,7 +31,7 @@ function _lookup(decodedTTLV, path) {
return res; return res;
} }
export default class Message { class Message {
/** /**
* Construct a new abstract Message * Construct a new abstract Message
* @param {Object} content - the content of the message * @param {Object} content - the content of the message
@ -48,3 +50,5 @@ export default class Message {
return _lookup(this.content, path); return _lookup(this.content, path);
} }
} }
module.exports = Message;

View File

@ -1,5 +1,8 @@
import KMIPTags from '../tags.json'; 'use strict'; // eslint-disable-line
import KMIPMessage from '../Message'; /* eslint dot-notation: "off" */
const KMIPTags = require('../tags.json');
const KMIPMessage = require('../Message.js');
const UINT32_MAX = Math.pow(2, 32); const UINT32_MAX = Math.pow(2, 32);
@ -23,7 +26,7 @@ function _throwError(logger, msg, data) {
throw Error(msg); throw Error(msg);
} }
export default function TTLVCodec() { function TTLVCodec() {
if (!new.target) { if (!new.target) {
return new TTLVCodec(); return new TTLVCodec();
} }
@ -427,3 +430,5 @@ export default function TTLVCodec() {
}; };
return this; return this;
} }
module.exports = TTLVCodec;

View File

@ -1,6 +1,9 @@
import uuidv4 from 'uuid/v4'; 'use strict'; // eslint-disable-line
/* eslint new-cap: "off" */
import Message from './Message'; const uuidv4 = require('uuid/v4');
const Message = require('./Message.js');
/* This client requires at least a KMIP 1.2 compatible server */ /* This client requires at least a KMIP 1.2 compatible server */
const DEFAULT_PROTOCOL_VERSION_MAJOR = 1; const DEFAULT_PROTOCOL_VERSION_MAJOR = 1;
@ -19,7 +22,7 @@ function _PrimitiveType(tagName, type, value) {
return { [tagName]: { type, value } }; return { [tagName]: { type, value } };
} }
export default class KMIP { class KMIP {
/** /**
* Construct a new KMIP Object * Construct a new KMIP Object
* @param {Class} Codec - * @param {Class} Codec -
@ -339,4 +342,9 @@ export default class KMIP {
return cb(null, response); return cb(null, response);
}); });
} }
} }
module.exports = KMIP;

View File

@ -1,9 +1,11 @@
import assert from 'assert'; 'use strict'; // eslint-disable-line
const assert = require('assert');
const DEFAULT_PIPELINE_DEPTH = 8; const DEFAULT_PIPELINE_DEPTH = 8;
const DEFAULT_KMIP_PORT = 5696; const DEFAULT_KMIP_PORT = 5696;
export default class TransportTemplate { class TransportTemplate {
/** /**
* Construct a new object of the TransportTemplate class * Construct a new object of the TransportTemplate class
* @param {Object} channel - Typically the tls object * @param {Object} channel - Typically the tls object
@ -168,3 +170,5 @@ export default class TransportTemplate {
conversation.end(); conversation.end();
} }
} }
module.exports = TransportTemplate;

View File

@ -1,3 +1,5 @@
'use strict'; // eslint-disable-line
const tls = require('tls'); const tls = require('tls');
const TransportTemplate = require('./TransportTemplate.js'); const TransportTemplate = require('./TransportTemplate.js');
@ -7,4 +9,4 @@ class TlsTransport extends TransportTemplate {
} }
} }
module.exports = TlsTra module.exports = TlsTransport;

View File

@ -1,14 +1,14 @@
import httpServer from '../http/server'; const httpServer = require('../http/server');
import werelogs from 'werelogs'; const werelogs = require('werelogs');
import errors from '../../errors'; const errors = require('../../errors');
import ZenkoMetrics from '../../metrics/ZenkoMetrics'; const ZenkoMetrics = require('../../metrics/ZenkoMetrics');
import { sendSuccess, sendError } from './Utils'; const { sendSuccess, sendError } = require('./Utils');
function checkStub(log) { // eslint-disable-line function checkStub(log) { // eslint-disable-line
return true; return true;
} }
export default class HealthProbeServer extends httpServer { class HealthProbeServer extends httpServer {
constructor(params) { constructor(params) {
const logging = new werelogs.Logger('HealthProbeServer'); const logging = new werelogs.Logger('HealthProbeServer');
super(params.port, logging); super(params.port, logging);
@ -72,3 +72,5 @@ export default class HealthProbeServer extends httpServer {
res.end(ZenkoMetrics.asPrometheus()); res.end(ZenkoMetrics.asPrometheus());
} }
} }
module.exports = HealthProbeServer;

View File

@ -1,10 +1,10 @@
import httpServer from '../http/server'; const httpServer = require('../http/server');
import werelogs from 'werelogs'; const werelogs = require('werelogs');
import errors from '../../errors'; const errors = require('../../errors');
export const DEFAULT_LIVE_ROUTE = '/_/live'; const DEFAULT_LIVE_ROUTE = '/_/live';
export const DEFAULT_READY_ROUTE = '/_/ready'; const DEFAULT_READY_ROUTE = '/_/ready';
export const DEFAULT_METRICS_ROUTE = '/metrics'; const DEFAULT_METRICS_ROUTE = '/metrics';
/** /**
* ProbeDelegate is used to handle probe checks. * ProbeDelegate is used to handle probe checks.
@ -28,7 +28,7 @@ export const DEFAULT_METRICS_ROUTE = '/metrics';
* *
* @extends {httpServer} * @extends {httpServer}
*/ */
export class ProbeServer extends httpServer { class ProbeServer extends httpServer {
/** /**
* Create a new ProbeServer with parameters * Create a new ProbeServer with parameters
* *
@ -92,3 +92,10 @@ export class ProbeServer extends httpServer {
this._handlers.get(req.url)(res, log); this._handlers.get(req.url)(res, log);
} }
} }
module.exports = {
ProbeServer,
DEFAULT_LIVE_ROUTE,
DEFAULT_READY_ROUTE,
DEFAULT_METRICS_ROUTE,
};

View File

@ -5,7 +5,7 @@
* @param {string} [message] - Message to send as response, defaults to OK * @param {string} [message] - Message to send as response, defaults to OK
* @returns {undefined} * @returns {undefined}
*/ */
export function sendSuccess(res, log, message = 'OK') { function sendSuccess(res, log, message = 'OK') {
log.debug('replying with success'); log.debug('replying with success');
res.writeHead(200); res.writeHead(200);
res.end(message); res.end(message);
@ -19,14 +19,14 @@ export function sendSuccess(res, log, message = 'OK') {
* @param {string} [optMessage] - Message to use instead of the errors message * @param {string} [optMessage] - Message to use instead of the errors message
* @returns {undefined} * @returns {undefined}
*/ */
export function sendError(res, log, error, optMessage) { function sendError(res, log, error, optMessage) {
const message = optMessage || error.description || ''; const message = optMessage || error.description || '';
log.debug('sending back error response', log.debug('sending back error response',
{ {
httpCode: error.code, httpCode: error.code,
errorType: error.message, errorType: error.message,
error: message, error: message,
}, }
); );
res.writeHead(error.code); res.writeHead(error.code);
res.end(JSON.stringify({ res.end(JSON.stringify({
@ -34,3 +34,8 @@ export function sendError(res, log, error, optMessage) {
errorMessage: message, errorMessage: message,
})); }));
} }
module.exports = {
sendSuccess,
sendError,
};

View File

@ -1,10 +1,12 @@
import assert from 'assert'; 'use strict'; // eslint-disable-line
import http from 'http';
import werelogs from 'werelogs';
import * as constants from '../../constants'; const assert = require('assert');
import * as utils from './utils'; const http = require('http');
import errors from '../../errors'; const werelogs = require('werelogs');
const constants = require('../../constants');
const utils = require('./utils');
const errors = require('../../errors');
const HttpAgent = require('agentkeepalive'); const HttpAgent = require('agentkeepalive');
@ -62,7 +64,7 @@ function makeErrorFromHTTPResponse(response) {
* *
* The API is usable when the object is constructed. * The API is usable when the object is constructed.
*/ */
export default class RESTClient { class RESTClient {
/** /**
* Interface to the data file server * Interface to the data file server
* @constructor * @constructor
@ -309,3 +311,5 @@ export default class RESTClient {
* @callback RESTClient~deleteCallback * @callback RESTClient~deleteCallback
* @param {Error} - The encountered error * @param {Error} - The encountered error
*/ */
module.exports = RESTClient;

View File

@ -1,13 +1,15 @@
import assert from 'assert'; 'use strict'; // eslint-disable-line
import url from 'url';
import werelogs from 'werelogs'; const assert = require('assert');
const url = require('url');
import httpServer from '../http/server'; const werelogs = require('werelogs');
import * as constants from '../../constants';
import { parseURL } from './utils'; const httpServer = require('../http/server');
import * as httpUtils from '../http/utils'; const constants = require('../../constants');
import errors from '../../errors'; const { parseURL } = require('./utils');
const httpUtils = require('../http/utils');
const errors = require('../../errors');
function setContentLength(response, contentLength) { function setContentLength(response, contentLength) {
response.setHeader('Content-Length', contentLength.toString()); response.setHeader('Content-Length', contentLength.toString());
@ -42,7 +44,8 @@ function sendError(res, log, error, optMessage) {
* You have to call setup() to initialize the storage backend, then * You have to call setup() to initialize the storage backend, then
* start() to start listening to the configured port. * start() to start listening to the configured port.
*/ */
export default class RESTServer extends httpServer { class RESTServer extends httpServer {
/** /**
* @constructor * @constructor
* @param {Object} params - constructor params * @param {Object} params - constructor params
@ -271,3 +274,5 @@ export default class RESTServer extends httpServer {
return undefined; return undefined;
} }
} }
module.exports = RESTServer;

View File

@ -1,10 +1,12 @@
import errors from '../../errors'; 'use strict'; // eslint-disable-line
import * as constants from '../../constants';
import * as url from 'url'; const errors = require('../../errors');
const constants = require('../../constants');
const url = require('url');
const passthroughPrefixLength = constants.passthroughFileURL.length; const passthroughPrefixLength = constants.passthroughFileURL.length;
export function explodePath(path) { function explodePath(path) {
if (path.startsWith(constants.passthroughFileURL)) { if (path.startsWith(constants.passthroughFileURL)) {
const key = path.slice(passthroughPrefixLength + 1); const key = path.slice(passthroughPrefixLength + 1);
return { return {
@ -35,7 +37,7 @@ export function explodePath(path) {
* - pathInfo.service {String} - The name of REST service ("DataFile") * - pathInfo.service {String} - The name of REST service ("DataFile")
* - pathInfo.key {String} - The requested key * - pathInfo.key {String} - The requested key
*/ */
export function parseURL(urlStr, expectKey) { function parseURL(urlStr, expectKey) {
const urlObj = url.parse(urlStr); const urlObj = url.parse(urlStr);
const pathInfo = explodePath(decodeURI(urlObj.path)); const pathInfo = explodePath(decodeURI(urlObj.path));
if ((pathInfo.service !== constants.dataFileURL) if ((pathInfo.service !== constants.dataFileURL)
@ -59,3 +61,8 @@ export function parseURL(urlStr, expectKey) {
} }
return pathInfo; return pathInfo;
} }
module.exports = {
explodePath,
parseURL,
};

View File

@ -1,6 +1,8 @@
import assert from 'assert'; 'use strict'; // eslint-disable-line
import * as rpc from './rpc'; const assert = require('assert');
const rpc = require('./rpc.js');
/** /**
* @class * @class
@ -15,6 +17,7 @@ import * as rpc from './rpc';
* RPC client object accessing the sub-level transparently. * RPC client object accessing the sub-level transparently.
*/ */
class LevelDbClient extends rpc.BaseClient { class LevelDbClient extends rpc.BaseClient {
/** /**
* @constructor * @constructor
* *
@ -75,6 +78,7 @@ class LevelDbClient extends rpc.BaseClient {
* env.subDb (env is passed as first parameter of received RPC calls). * env.subDb (env is passed as first parameter of received RPC calls).
*/ */
class LevelDbService extends rpc.BaseService { class LevelDbService extends rpc.BaseService {
/** /**
* @constructor * @constructor
* *

View File

@ -1,14 +1,17 @@
import http from 'http'; 'use strict'; // eslint-disable-line
import io from 'socket.io';
import ioClient from 'socket.io-client';
import * as sioStream from './sio-stream';
import async from 'async';
import assert from 'assert';
import { EventEmitter } from 'events';
import { flattenError, reconstructError } from './utils'; const http = require('http');
import errors from '../../errors'; const io = require('socket.io');
import * as jsutil from '../../jsutil'; const ioClient = require('socket.io-client');
const sioStream = require('./sio-stream');
const async = require('async');
const assert = require('assert');
const EventEmitter = require('events').EventEmitter;
const flattenError = require('./utils').flattenError;
const reconstructError = require('./utils').reconstructError;
const errors = require('../../errors');
const jsutil = require('../../jsutil');
const DEFAULT_CALL_TIMEOUT_MS = 30000; const DEFAULT_CALL_TIMEOUT_MS = 30000;
@ -33,7 +36,8 @@ let streamRPCJSONObj;
* - the return value is passed as callback's second argument (unless * - the return value is passed as callback's second argument (unless
* an error occurred). * an error occurred).
*/ */
export class BaseClient extends EventEmitter { class BaseClient extends EventEmitter {
/** /**
* @constructor * @constructor
* *
@ -246,7 +250,8 @@ export class BaseClient extends EventEmitter {
* method. * method.
* *
*/ */
export class BaseService { class BaseService {
/** /**
* @constructor * @constructor
* *
@ -464,8 +469,7 @@ export class BaseService {
* @return {Object} a server object, not yet listening on a TCP port * @return {Object} a server object, not yet listening on a TCP port
* (you must call listen(port) on the returned object) * (you must call listen(port) on the returned object)
*/ */
function RPCServer(params) {
export function RPCServer(params) {
assert(params.logger); assert(params.logger);
const httpServer = http.createServer(); const httpServer = http.createServer();
@ -664,7 +668,7 @@ streamRPCJSONObj = function _streamRPCJSONObj(obj, wstream, cb) {
* @return {Object} a HTTP server object, not yet listening on a TCP * @return {Object} a HTTP server object, not yet listening on a TCP
* port (you must call listen(port) on the returned object) * port (you must call listen(port) on the returned object)
*/ */
export function RESTServer(params) { function RESTServer(params) {
assert(params); assert(params);
assert(params.logger); assert(params.logger);
const httpServer = http.createServer((req, res) => { const httpServer = http.createServer((req, res) => {
@ -735,3 +739,11 @@ export function RESTServer(params) {
return httpServer; return httpServer;
} }
module.exports = {
BaseClient,
BaseService,
RPCServer,
RESTServer,
};

View File

@ -1,11 +1,13 @@
import uuid from 'uuid'; 'use strict'; // eslint-disable-line
import stream from 'stream';
import debug_ from 'debug';
import assert from 'assert';
import async from 'async';
import { flattenError, reconstructError } from './utils';
const debug = debug_('sio-stream');
const uuid = require('uuid');
const stream = require('stream');
const debug = require('debug')('sio-stream');
const assert = require('assert');
const async = require('async');
const flattenError = require('./utils').flattenError;
const reconstructError = require('./utils').reconstructError;
const DEFAULT_MAX_PENDING_ACK = 4; const DEFAULT_MAX_PENDING_ACK = 4;
const DEFAULT_ACK_TIMEOUT_MS = 5000; const DEFAULT_ACK_TIMEOUT_MS = 5000;
@ -431,7 +433,7 @@ class SIOStreamSocket {
} }
} }
export function createSocket( module.exports.createSocket = function createSocket(
socket, socket,
logger, logger,
maxPendingAck = DEFAULT_MAX_PENDING_ACK, maxPendingAck = DEFAULT_MAX_PENDING_ACK,

View File

@ -1,3 +1,5 @@
'use strict'; // eslint-disable-line
/** /**
* @brief turn all <tt>err</tt> own and prototype attributes into own attributes * @brief turn all <tt>err</tt> own and prototype attributes into own attributes
* *
@ -7,7 +9,7 @@
* @param {Error} err error object * @param {Error} err error object
* @return {Object} flattened object containing <tt>err</tt> attributes * @return {Object} flattened object containing <tt>err</tt> attributes
*/ */
export function flattenError(err) { module.exports.flattenError = function flattenError(err) {
if (!err) { if (!err) {
return err; return err;
} }
@ -33,7 +35,7 @@ export function flattenError(err) {
* @return {Error} a reconstructed Error object inheriting <tt>err</tt> * @return {Error} a reconstructed Error object inheriting <tt>err</tt>
* attributes * attributes
*/ */
export function reconstructError(err) { module.exports.reconstructError = function reconstructError(err) {
if (!err) { if (!err) {
return err; return err;
} }

View File

@ -1,7 +1,9 @@
import { URL } from 'url'; 'use strict'; // eslint-disable-line strict
import { decryptSecret } from '../executables/pensieveCreds/utils';
export function patchLocations(overlayLocations, creds, log) { const { URL } = require('url');
const { decryptSecret } = require('../executables/pensieveCreds/utils');
function patchLocations(overlayLocations, creds, log) {
if (!overlayLocations) { if (!overlayLocations) {
return {}; return {};
} }
@ -151,3 +153,7 @@ export function patchLocations(overlayLocations, creds, log) {
}); });
return locations; return locations;
} }
module.exports = {
patchLocations,
};

View File

@ -1,7 +1,9 @@
import Ajv from 'ajv'; 'use strict'; // eslint-disable-line strict
import userPolicySchema from './userPolicySchema.json';
import resourcePolicySchema from './resourcePolicySchema.json'; const Ajv = require('ajv');
import errors from '../errors'; const userPolicySchema = require('./userPolicySchema');
const resourcePolicySchema = require('./resourcePolicySchema');
const errors = require('../errors');
const ajValidate = new Ajv({ allErrors: true }); const ajValidate = new Ajv({ allErrors: true });
ajValidate.addMetaSchema(require('ajv/lib/refs/json-schema-draft-06.json')); ajValidate.addMetaSchema(require('ajv/lib/refs/json-schema-draft-06.json'));
@ -115,7 +117,7 @@ function _validatePolicy(type, policy) {
* @returns {Object} - returns object with properties error and value * @returns {Object} - returns object with properties error and value
* @returns {ValidationResult} - result of the validation * @returns {ValidationResult} - result of the validation
*/ */
export function validateUserPolicy(policy) { function validateUserPolicy(policy) {
return _validatePolicy('user', policy); return _validatePolicy('user', policy);
} }
@ -125,6 +127,11 @@ export function validateUserPolicy(policy) {
* @returns {Object} - returns object with properties error and value * @returns {Object} - returns object with properties error and value
* @returns {ValidationResult} - result of the validation * @returns {ValidationResult} - result of the validation
*/ */
export function validateResourcePolicy(policy) { function validateResourcePolicy(policy) {
return _validatePolicy('resource', policy); return _validatePolicy('resource', policy);
} }
module.exports = {
validateUserPolicy,
validateResourcePolicy,
};

View File

@ -1,17 +1,19 @@
import { parseIp } from '../ipCheck'; 'use strict'; // eslint-disable-line strict
const parseIp = require('../ipCheck').parseIp;
// http://docs.aws.amazon.com/IAM/latest/UserGuide/list_s3.html // http://docs.aws.amazon.com/IAM/latest/UserGuide/list_s3.html
// For MPU actions: // For MPU actions:
// http://docs.aws.amazon.com/AmazonS3/latest/dev/mpuAndPermissions.html // http://docs.aws.amazon.com/AmazonS3/latest/dev/mpuAndPermissions.html
// For bucket head and object head: // For bucket head and object head:
// http://docs.aws.amazon.com/AmazonS3/latest/dev/ // http://docs.aws.amazon.com/AmazonS3/latest/dev/
// using-with-s3-actions.html // using-with-s3-actions.html
import { const {
actionMapRQ, actionMapRQ,
actionMapIAM, actionMapIAM,
actionMapSSO, actionMapSSO,
actionMapSTS, actionMapSTS,
actionMapMetadata, actionMapMetadata,
} from './utils/actionMaps'; } = require('./utils/actionMaps');
const _actionNeedQuotaCheck = { const _actionNeedQuotaCheck = {
objectPut: true, objectPut: true,
@ -127,7 +129,7 @@ function _buildArn(service, generalResource, specificResource, requesterInfo) {
* @return {RequestContext} a RequestContext instance * @return {RequestContext} a RequestContext instance
*/ */
export default class RequestContext { class RequestContext {
constructor(headers, query, generalResource, specificResource, constructor(headers, query, generalResource, specificResource,
requesterIp, sslEnabled, apiMethod, requesterIp, sslEnabled, apiMethod,
awsService, locationConstraint, requesterInfo, awsService, locationConstraint, requesterInfo,
@ -646,3 +648,5 @@ export default class RequestContext {
return this._needTagEval; return this._needTagEval;
} }
} }
module.exports = RequestContext;

View File

@ -1,8 +1,14 @@
import { substituteVariables } from './utils/variables'; 'use strict'; // eslint-disable-line strict
import { handleWildcards } from './utils/wildcards';
import { findConditionKey, convertConditionOperator } from './utils/conditions.js'; const substituteVariables = require('./utils/variables.js');
import checkArnMatch from './utils/checkArnMatch.js'; const handleWildcards = require('./utils/wildcards.js').handleWildcards;
import { transformTagKeyValue } from './utils/objectTags'; const conditions = require('./utils/conditions.js');
const findConditionKey = conditions.findConditionKey;
const convertConditionOperator = conditions.convertConditionOperator;
const checkArnMatch = require('./utils/checkArnMatch.js');
const { transformTagKeyValue } = require('./utils/objectTags');
const evaluators = {};
const operatorsWithVariables = ['StringEquals', 'StringNotEquals', const operatorsWithVariables = ['StringEquals', 'StringNotEquals',
'StringEqualsIgnoreCase', 'StringNotEqualsIgnoreCase', 'StringEqualsIgnoreCase', 'StringNotEqualsIgnoreCase',
@ -22,7 +28,7 @@ const tagConditions = new Set(['s3:ExistingObjectTag', 's3:RequestObjectTagKey',
* @param {object} log - logger * @param {object} log - logger
* @return {boolean} true if applicable, false if not * @return {boolean} true if applicable, false if not
*/ */
export function isResourceApplicable(requestContext, statementResource, log) { evaluators.isResourceApplicable = (requestContext, statementResource, log) => {
const resource = requestContext.getResource(); const resource = requestContext.getResource();
if (!Array.isArray(statementResource)) { if (!Array.isArray(statementResource)) {
// eslint-disable-next-line no-param-reassign // eslint-disable-next-line no-param-reassign
@ -63,7 +69,7 @@ export function isResourceApplicable(requestContext, statementResource, log) {
* @param {Object} log - logger * @param {Object} log - logger
* @return {boolean} true if applicable, false if not * @return {boolean} true if applicable, false if not
*/ */
export function isActionApplicable(requestAction, statementAction, log) { evaluators.isActionApplicable = (requestAction, statementAction, log) => {
if (!Array.isArray(statementAction)) { if (!Array.isArray(statementAction)) {
// eslint-disable-next-line no-param-reassign // eslint-disable-next-line no-param-reassign
statementAction = [statementAction]; statementAction = [statementAction];
@ -95,7 +101,7 @@ export function isActionApplicable(requestAction, statementAction, log) {
* @return {Object} contains whether conditions are allowed and whether they * @return {Object} contains whether conditions are allowed and whether they
* contain any tag condition keys * contain any tag condition keys
*/ */
export function meetConditions(requestContext, statementCondition, log) { evaluators.meetConditions = (requestContext, statementCondition, log) => {
// The Condition portion of a policy is an object with different // The Condition portion of a policy is an object with different
// operators as keys // operators as keys
const conditionEval = {}; const conditionEval = {};
@ -198,7 +204,7 @@ export function meetConditions(requestContext, statementCondition, log) {
* @return {string} Allow if permitted, Deny if not permitted or Neutral * @return {string} Allow if permitted, Deny if not permitted or Neutral
* if not applicable * if not applicable
*/ */
export function evaluatePolicy(requestContext, policy, log) { evaluators.evaluatePolicy = (requestContext, policy, log) => {
// TODO: For bucket policies need to add Principal evaluation // TODO: For bucket policies need to add Principal evaluation
let verdict = 'Neutral'; let verdict = 'Neutral';
@ -210,33 +216,33 @@ export function evaluatePolicy(requestContext, policy, log) {
const currentStatement = policy.Statement[i]; const currentStatement = policy.Statement[i];
// If affirmative resource is in policy and request resource is // If affirmative resource is in policy and request resource is
// not applicable, move on to next statement // not applicable, move on to next statement
if (currentStatement.Resource && !isResourceApplicable(requestContext, if (currentStatement.Resource && !evaluators.isResourceApplicable(requestContext,
currentStatement.Resource, log)) { currentStatement.Resource, log)) {
continue; continue;
} }
// If NotResource is in policy and resource matches NotResource // If NotResource is in policy and resource matches NotResource
// in policy, move on to next statement // in policy, move on to next statement
if (currentStatement.NotResource && if (currentStatement.NotResource &&
isResourceApplicable(requestContext, evaluators.isResourceApplicable(requestContext,
currentStatement.NotResource, log)) { currentStatement.NotResource, log)) {
continue; continue;
} }
// If affirmative action is in policy and request action is not // If affirmative action is in policy and request action is not
// applicable, move on to next statement // applicable, move on to next statement
if (currentStatement.Action && if (currentStatement.Action &&
!isActionApplicable(requestContext.getAction(), !evaluators.isActionApplicable(requestContext.getAction(),
currentStatement.Action, log)) { currentStatement.Action, log)) {
continue; continue;
} }
// If NotAction is in policy and action matches NotAction in policy, // If NotAction is in policy and action matches NotAction in policy,
// move on to next statement // move on to next statement
if (currentStatement.NotAction && if (currentStatement.NotAction &&
isActionApplicable(requestContext.getAction(), evaluators.isActionApplicable(requestContext.getAction(),
currentStatement.NotAction, log)) { currentStatement.NotAction, log)) {
continue; continue;
} }
const conditionEval = currentStatement.Condition ? const conditionEval = currentStatement.Condition ?
meetConditions(requestContext, currentStatement.Condition, log) : evaluators.meetConditions(requestContext, currentStatement.Condition, log) :
null; null;
// If do not meet conditions move on to next statement // If do not meet conditions move on to next statement
if (conditionEval && !conditionEval.allow) { if (conditionEval && !conditionEval.allow) {
@ -270,12 +276,12 @@ export function evaluatePolicy(requestContext, policy, log) {
* @return {string} Allow if permitted, Deny if not permitted. * @return {string} Allow if permitted, Deny if not permitted.
* Default is to Deny. Deny overrides an Allow * Default is to Deny. Deny overrides an Allow
*/ */
export function evaluateAllPolicies(requestContext, allPolicies, log) { evaluators.evaluateAllPolicies = (requestContext, allPolicies, log) => {
log.trace('evaluating all policies'); log.trace('evaluating all policies');
let verdict = 'Deny'; let verdict = 'Deny';
for (let i = 0; i < allPolicies.length; i++) { for (let i = 0; i < allPolicies.length; i++) {
const singlePolicyVerdict = const singlePolicyVerdict =
evaluatePolicy(requestContext, allPolicies[i], log); evaluators.evaluatePolicy(requestContext, allPolicies[i], log);
// If there is any Deny, just return Deny // If there is any Deny, just return Deny
if (singlePolicyVerdict === 'Deny') { if (singlePolicyVerdict === 'Deny') {
return 'Deny'; return 'Deny';
@ -287,3 +293,5 @@ export function evaluateAllPolicies(requestContext, allPolicies, log) {
log.trace('result of evaluating all pollicies', { verdict }); log.trace('result of evaluating all pollicies', { verdict });
return verdict; return verdict;
}; };
module.exports = evaluators;

View File

@ -1,9 +1,9 @@
import { meetConditions } from './evaluator'; const { meetConditions } = require('./evaluator');
/** /**
* Class with methods to manage the policy 'principal' validation * Class with methods to manage the policy 'principal' validation
*/ */
export default class Principal { class Principal {
/** /**
* Function to evaluate conditions if needed * Function to evaluate conditions if needed
* *
@ -176,3 +176,5 @@ export default class Principal {
}; };
} }
} }
module.exports = Principal;

View File

@ -1,4 +1,4 @@
import * as ipCheck from '../ipCheck'; const ipCheck = require('../ipCheck');
/** /**
* getClientIp - Gets the client IP from the request * getClientIp - Gets the client IP from the request
@ -6,7 +6,7 @@ import * as ipCheck from '../ipCheck';
* @param {object} s3config - s3 config * @param {object} s3config - s3 config
* @return {string} - returns client IP from the request * @return {string} - returns client IP from the request
*/ */
export function getClientIp(request, s3config) { function getClientIp(request, s3config) {
const requestConfig = s3config ? s3config.requests : {}; const requestConfig = s3config ? s3config.requests : {};
const remoteAddress = request.socket.remoteAddress; const remoteAddress = request.socket.remoteAddress;
const clientIp = requestConfig ? remoteAddress : request.headers['x-forwarded-for'] || remoteAddress; const clientIp = requestConfig ? remoteAddress : request.headers['x-forwarded-for'] || remoteAddress;
@ -26,3 +26,7 @@ export function getClientIp(request, s3config) {
} }
return clientIp; return clientIp;
} }
module.exports = {
getClientIp,
};

View File

@ -1,4 +1,4 @@
export const sharedActionMap = { const sharedActionMap = {
bucketDelete: 's3:DeleteBucket', bucketDelete: 's3:DeleteBucket',
// the "s3:PutEncryptionConfiguration" action also governs DELETE // the "s3:PutEncryptionConfiguration" action also governs DELETE
bucketDeleteEncryption: 's3:PutEncryptionConfiguration', bucketDeleteEncryption: 's3:PutEncryptionConfiguration',
@ -47,7 +47,7 @@ export const sharedActionMap = {
}; };
// action map used for request context // action map used for request context
export const actionMapRQ = Object.assign({ const actionMapRQ = Object.assign({
bucketPut: 's3:CreateBucket', bucketPut: 's3:CreateBucket',
// for bucketDeleteCors need s3:PutBucketCORS permission // for bucketDeleteCors need s3:PutBucketCORS permission
// see http://docs.aws.amazon.com/AmazonS3/latest/API/ // see http://docs.aws.amazon.com/AmazonS3/latest/API/
@ -73,15 +73,15 @@ export const actionMapRQ = Object.assign({
}, sharedActionMap); }, sharedActionMap);
// action map used for bucket policies // action map used for bucket policies
export const actionMapBP = Object.assign({}, sharedActionMap); const actionMapBP = Object.assign({}, sharedActionMap);
// action map for all relevant s3 actions // action map for all relevant s3 actions
export const actionMapS3 = Object.assign({ const actionMapS3 = Object.assign({
bucketGetNotification: 's3:GetBucketNotification', bucketGetNotification: 's3:GetBucketNotification',
bucketPutNotification: 's3:PutBucketNotification', bucketPutNotification: 's3:PutBucketNotification',
}, sharedActionMap, actionMapRQ, actionMapBP); }, sharedActionMap, actionMapRQ, actionMapBP);
export const actionMonitoringMapS3 = { const actionMonitoringMapS3 = {
bucketDelete: 'DeleteBucket', bucketDelete: 'DeleteBucket',
bucketDeleteCors: 'DeleteBucketCors', bucketDeleteCors: 'DeleteBucketCors',
bucketDeleteEncryption: 'DeleteBucketEncryption', bucketDeleteEncryption: 'DeleteBucketEncryption',
@ -139,7 +139,7 @@ export const actionMonitoringMapS3 = {
serviceGet: 'ListBuckets', serviceGet: 'ListBuckets',
}; };
export const actionMapIAM = { const actionMapIAM = {
attachGroupPolicy: 'iam:AttachGroupPolicy', attachGroupPolicy: 'iam:AttachGroupPolicy',
attachUserPolicy: 'iam:AttachUserPolicy', attachUserPolicy: 'iam:AttachUserPolicy',
createAccessKey: 'iam:CreateAccessKey', createAccessKey: 'iam:CreateAccessKey',
@ -178,15 +178,26 @@ export const actionMapIAM = {
getCredentialReport: 'iam:GetCredentialReport', getCredentialReport: 'iam:GetCredentialReport',
}; };
export const actionMapSSO = { const actionMapSSO = {
SsoAuthorize: 'sso:Authorize', SsoAuthorize: 'sso:Authorize',
}; };
export const actionMapSTS = { const actionMapSTS = {
assumeRole: 'sts:AssumeRole', assumeRole: 'sts:AssumeRole',
}; };
export const actionMapMetadata = { const actionMapMetadata = {
admin: 'metadata:admin', admin: 'metadata:admin',
default: 'metadata:bucketd', default: 'metadata:bucketd',
}; };
module.exports = {
actionMapRQ,
actionMapBP,
actionMapS3,
actionMonitoringMapS3,
actionMapIAM,
actionMapSSO,
actionMapSTS,
actionMapMetadata,
};

View File

@ -1,3 +1,5 @@
'use strict'; // eslint-disable-line strict
const handleWildcardInResource = const handleWildcardInResource =
require('./wildcards.js').handleWildcardInResource; require('./wildcards.js').handleWildcardInResource;
/** /**
@ -10,7 +12,7 @@ const handleWildcardInResource =
* case sensitive * case sensitive
* @return {boolean} true if match, false if not * @return {boolean} true if match, false if not
*/ */
export default function checkArnMatch(policyArn, requestRelativeId, requestArnArr, function checkArnMatch(policyArn, requestRelativeId, requestArnArr,
caseSensitive) { caseSensitive) {
const regExofArn = handleWildcardInResource(policyArn); const regExofArn = handleWildcardInResource(policyArn);
// The relativeId is the last part of the ARN (for instance, a bucket and // The relativeId is the last part of the ARN (for instance, a bucket and
@ -45,3 +47,5 @@ export default function checkArnMatch(policyArn, requestRelativeId, requestArnAr
// If there were matches on all parts of the ARN, return true // If there were matches on all parts of the ARN, return true
return true; return true;
} }
module.exports = checkArnMatch;

Some files were not shown because too many files have changed in this diff Show More