minio/internal/http
Andreas Auernhammer e438dccf19
sts: add support for certificate-based authentication (#12748)
This commit adds a new STS API for X.509 certificate
authentication.

A client can make an HTTP POST request over a TLS connection
and MinIO will verify the provided client certificate, map it to an 
S3 policy and return temp. S3 credentials to the client.

So, this STS API allows clients to authenticate with X.509
certificates over TLS and obtain temp. S3 credentials.

For more details and examples refer to the docs/sts/tls.md
documentation.

Signed-off-by: Andreas Auernhammer <hi@aead.dev>
2021-09-07 19:03:48 -07:00
..
stats Fix TrafficMeter data race (#13041) 2021-08-23 09:19:14 -07:00
close.go rename all remaining packages to internal/ (#12418) 2021-06-01 14:59:40 -07:00
dial_dnscache.go use sync map instead of local DNS cache (#12925) 2021-08-10 21:20:09 -07:00
dial_dnscache_test.go use sync map instead of local DNS cache (#12925) 2021-08-10 21:20:09 -07:00
dial_linux.go fix: enable go1.17 github ci/cd (#12997) 2021-08-18 18:35:22 -07:00
dial_others.go fix: enable go1.17 github ci/cd (#12997) 2021-08-18 18:35:22 -07:00
headers.go s3: Force a prefix removal using a special header (#12504) 2021-06-15 18:43:14 -07:00
listen_nix.go fix: enable go1.17 github ci/cd (#12997) 2021-08-18 18:35:22 -07:00
listen_others.go fix: enable go1.17 github ci/cd (#12997) 2021-08-18 18:35:22 -07:00
listener.go rename all remaining packages to internal/ (#12418) 2021-06-01 14:59:40 -07:00
listener_test.go rename all remaining packages to internal/ (#12418) 2021-06-01 14:59:40 -07:00
server.go sts: add support for certificate-based authentication (#12748) 2021-09-07 19:03:48 -07:00
server_test.go rename all remaining packages to internal/ (#12418) 2021-06-01 14:59:40 -07:00