INNER CODE UNIT · Go

func

minio/kes · auth.go:35

func (v *verifyIdentity) Authenticate(req *http.Request) (*api.Request, api.Error) {
	s := (*atomic.Pointer[serverState])(v).Load()
	identity, err := identifyRequest(req.TLS)
	if err != nil {
		s.Log.DebugContext(req.Context(), err.Error(), "req", req)
		return nil, err
	}
	if identity == s.Admin {
		return &api.Request{
			Request:  req,
			Identity: identity,
		}, nil
	}

	policy, ok := s.Identities[identity]
	if !ok {
		s.Log.DebugContext(req.Context(), "access denied: identity not found", "req", req)
		return nil, kes.ErrNotAllowed

View source record →