Extend further validation of config values (#8469)

- This PR allows config KVS to be validated properly
  without being affected by ENV overrides, rejects
  invalid values during set operation

- Expands unit tests and refactors the error handling
  for notification targets, returns error instead of
  ignoring targets for invalid KVS

- Does all the prep-work for implementing safe-mode
  style operation for MinIO server, introduces a new
  global variable to toggle safe mode based operations
  NOTE: this PR itself doesn't provide safe mode operations

cmd/config/identity/openid/jwt.go

@@ -284,7 +284,7 @@ func LookupConfig(kv config.KVS, transport *http.Transport, closeRespFn func(io.
 
 	configURL := env.Get(EnvIdentityOpenIDURL, kv.Get(ConfigURL))
 	if configURL != "" {
-		c.URL, err = xnet.ParseURL(configURL)
+		c.URL, err = xnet.ParseHTTPURL(configURL)
 		if err != nil {
 			return c, err
 		}
@@ -315,7 +315,7 @@ func LookupConfig(kv config.KVS, transport *http.Transport, closeRespFn func(io.
 		closeRespFn: closeRespFn,
 	}
 
-	c.JWKS.URL, err = xnet.ParseURL(jwksURL)
+	c.JWKS.URL, err = xnet.ParseHTTPURL(jwksURL)
 	if err != nil {
 		return c, err
 	}

cmd/config/identity/openid/jwt_test.go

@@ -53,7 +53,7 @@ func TestJWT(t *testing.T) {
 		}
 	}
 
-	u1, err := xnet.ParseURL("http://localhost:8443")
+	u1, err := xnet.ParseHTTPURL("http://localhost:8443")
 	if err != nil {
 		t.Fatal(err)
 	}

cmd/config/identity/openid/validators_test.go

@@ -87,7 +87,7 @@ func TestValidators(t *testing.T) {
 		t.Fatalf("Unexpected number of vids %v", vids)
 	}
 
-	u, err := xnet.ParseURL(ts.URL)
+	u, err := xnet.ParseHTTPURL(ts.URL)
 	if err != nil {
 		t.Fatal(err)
 	}