A colon (:) in the "Authorization" header causes exception

Bug #770312 reported by Lior Goikhburg
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Object Storage (swift)
Invalid
Undecided
Unassigned

Bug Description

To reproduce
curl -D - -H 'Authorization: AWS foo:bar' -L http://10.10.1.29:8080/
against a proxy

https://answers.launchpad.net/swift/+question/154177

Trunk package version 1.4-dev+bzr286-0ubuntu0ppa1~maverick1

Changed in swift:
assignee: nobody → Andrey Brindeyev (abrindeyev)
assignee: Andrey Brindeyev (abrindeyev) → openstack-gd (openstack-gd)
Eldar Nugaev (reldan)
Changed in swift:
assignee: openstack-gd (openstack-gd) → nobody
Revision history for this message
Chmouel Boudjnah (chmouel) wrote :

I have just tried the same thing on a recent swift checkout and this doesn't seem to be reproducible :

chmouel@linuxlap:~$ curl -D - -H 'Authorization: AWS foo:bar' http://devstack.chmouel.com:8080/auth/v1.0/
HTTP/1.1 401 Unauthorized
Content-Length: 358
Content-Type: text/html; charset=UTF-8
Date: Thu, 19 Jan 2012 19:51:54 GMT

<html>
 <head>
  <title>401 Unauthorized</title>
 </head>
 <body>
  <h1>401 Unauthorized</h1>
  This server could not verify that you are authorized to access the document you requested. Either you supplied the wrong credentials (e.g., bad password), or your browser does not understand how to supply the credentials required.<br /><br />

 </body>
</html>

and the proxy log confirm me just a proper 401 :

Jan 19 19:51:54 devstack swift - 64.39.4.135 19/Jan/2012/19/51/54 GET /auth/v1.0/ HTTP/1.0 401 - curl/7.21.6%20%28x86_64-pc-linux-gnu%29%20libcurl/7.21.6%20OpenSSL/1.0.0e%20zlib/1.2.3.4%20libidn/1.22%20librtmp/2.3 - - - - - - 0.0075

Changed in swift:
status: New → Invalid
Revision history for this message
Chmouel Boudjnah (chmouel) wrote :

Just realise that it was speking about the swift3 middleware and after configuring it I am still getting a proper 403 a la s3 way:

chmouel@linuxcurl -D - -H 'Authorization: AWS foo:bar' http://devstack.chmouel.com:8080/auth/v1.0/
HTTP/1.1 403 Forbidden
Content-Type: text/xml; charset=UTF-8
Content-Length: 124
Date: Thu, 19 Jan 2012 19:56:32 GMT

<?xml version="1.0" encoding="UTF-8"?>
<Error>
  <Code>AccessDenied</Code>
  <Message>Access denied</Message>
</Error>

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Related questions

Remote bug watches

Bug watches keep track of this bug in other bug trackers.