search

oxyno-zeta / s3-proxy

S3 Reverse Proxy with GET, PUT and DELETE methods and authentication (OpenID Connect and Basic Auth)
https://oxyno-zeta.github.io/s3-proxy/
Apache License 2.0
304 stars 34 forks source link

Consider supporting ranger authorization systems? #113

Open cloudkey opened 3 years ago

cloudkey commented 3 years ago

Is your feature request related to a problem? Please describe. Ranger is a popular solution for big data permission verification, but it does not support AWS-S3 permission verification at present.

Describe the solution you'd like At present, I have an idea that the Proxy intercepts the S3 request, sends the request to ranger-S3-Plugin for authorization verification, and then sends the request to AWS-S3 Server after verification.

This way, if my data is stored on S3, I can use proxy to do request interception and permission authentication as well.

Reference link: https://github.com/apache/ranger

oxyno-zeta commented 3 years ago

Hello !

Thanks for your feature request. This could be interesting ! I will have a look when I will have time.

Just a information for you: this project doesn't implement the S3 api. It isn't that kind of proxy. It has it's own API. You will need specific development to access it in order to get your data. I hope I'm clear, tell me if not. Moreover, to be authenticated, the actual code need an OpenID Connect connection (basic auth is considered has authorized directly).

cloudkey commented 3 years ago

Hello !

Thanks for your feature request. This could be interesting ! I will have a look when I will have time.

Just a information for you: this project doesn't implement the S3 api. It isn't that kind of proxy. It has it's own API. You will need specific development to access it in order to get your data. I hope I'm clear, tell me if not. Moreover, to be authenticated, the actual code need an OpenID Connect connection (basic auth is considered has authorized directly).

Thank you for your reply.

Yesterday, I thought about it again. In fact, I only need to do S3 permission authentication. So maybe I just need to be a proxy, intercept the request, and then do permission authentication, and if the authentication passes, send the request directly to AWS. So that I don't have to implement the specific S3 api.

github-actions[bot] commented 3 years ago

This issue is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 10 days