Andreas Auernhammer 9fb94e6aa8 ensure authenticated request bodies for Admin-API (#5984) ...

This commit adds a check to the server's admin-API such that it only
accepts Admin-API requests with authenticated bodies. Further this
commit updates the `madmin` package to always add the
`X-Amz-Content-Sha256` header.

This change improves the Admin-API security since the server does not
accept unauthenticated request bodies anymore.

After this commit `mc` must be updated to the new `madmin` api because
requests over TLS connections will fail.

2018-05-30 14:49:03 -07:00

9.0 KiB

Raw Blame History

View Raw