Examples with S3ErrorTable.newError org.apache.hadoop.ozone.s3.exception.S3ErrorTable.newError used on opensource projects

Example 1 with S3ErrorTable.newError

use of org.apache.hadoop.ozone.s3.exception.S3ErrorTable.newError in project ozone by apache.

the class OzoneClientProducer method getSignature.

@Produces
public S3Auth getSignature() {
    try {
        SignatureInfo signatureInfo = signatureProcessor.parseSignature();
        String stringToSign = "";
        if (signatureInfo.getVersion() == Version.V4) {
            stringToSign = StringToSignProducer.createSignatureBase(signatureInfo, context);
        }
        String awsAccessId = signatureInfo.getAwsAccessId();
        // ONLY validate aws access id when needed.
        if (awsAccessId == null || awsAccessId.equals("")) {
            LOG.debug("Malformed s3 header. awsAccessID: {}", awsAccessId);
            throw ACCESS_DENIED;
        }
        return new S3Auth(stringToSign, signatureInfo.getSignature(), awsAccessId);
    } catch (OS3Exception ex) {
        LOG.debug("Error during Client Creation: ", ex);
        throw wrapOS3Exception(ex);
    } catch (Exception e) {
        // For any other critical errors during object creation throw Internal
        // error.
        LOG.debug("Error during Client Creation: ", e);
        throw wrapOS3Exception(S3ErrorTable.newError(INTERNAL_ERROR, null, e));
    }
}

Example 2 with S3ErrorTable.newError

use of org.apache.hadoop.ozone.s3.exception.S3ErrorTable.newError in project ozone by apache.

the class S3Acl method s3AclToOzoneNativeAclOnBucket.

public static List<OzoneAcl> s3AclToOzoneNativeAclOnBucket(S3BucketAcl bucketAcl) throws OS3Exception {
    List<OzoneAcl> ozoneAclList = new ArrayList<>();
    List<Grant> grantList = bucketAcl.getAclList().getGrantList();
    for (Grant grant : grantList) {
        // Only "CanonicalUser" is supported, which maps to Ozone "USER"
        ACLIdentityType identityType = ACLIdentityType.getTypeFromGranteeType(grant.getGrantee().getXsiType());
        if (identityType != null && identityType.isSupported()) {
            String permission = grant.getPermission();
            BitSet acls = getOzoneAclOnBucketFromS3Permission(permission);
            OzoneAcl defaultOzoneAcl = new OzoneAcl(IAccessAuthorizer.ACLIdentityType.USER, grant.getGrantee().getId(), acls, OzoneAcl.AclScope.DEFAULT);
            OzoneAcl accessOzoneAcl = new OzoneAcl(IAccessAuthorizer.ACLIdentityType.USER, grant.getGrantee().getId(), acls, OzoneAcl.AclScope.ACCESS);
            ozoneAclList.add(defaultOzoneAcl);
            ozoneAclList.add(accessOzoneAcl);
        } else {
            LOG.error("Grantee type {} is not supported", grant.getGrantee().getXsiType());
            throw S3ErrorTable.newError(NOT_IMPLEMENTED, grant.getGrantee().getXsiType());
        }
    }
    return ozoneAclList;
}

Example 3 with S3ErrorTable.newError

use of org.apache.hadoop.ozone.s3.exception.S3ErrorTable.newError in project ozone by apache.

the class ContinueToken method checkHash.

private static void checkHash(String key, String hex, String digest) throws OS3Exception {
    String digestActualKey = DigestUtils.sha256Hex(hex);
    if (!digest.equals(digestActualKey)) {
        OS3Exception ex = S3ErrorTable.newError(S3ErrorTable.INVALID_ARGUMENT, key);
        ex.setErrorMessage("The continuation token provided is incorrect");
        throw ex;
    }
}

Example 4 with S3ErrorTable.newError

use of org.apache.hadoop.ozone.s3.exception.S3ErrorTable.newError in project ozone by apache.

the class S3Acl method s3AclToOzoneNativeAclOnVolume.

public static List<OzoneAcl> s3AclToOzoneNativeAclOnVolume(S3BucketAcl bucketAcl) throws OS3Exception {
    List<OzoneAcl> ozoneAclList = new ArrayList<>();
    List<Grant> grantList = bucketAcl.getAclList().getGrantList();
    for (Grant grant : grantList) {
        // Only "CanonicalUser" is supported, which maps to Ozone "USER"
        ACLIdentityType identityType = ACLIdentityType.getTypeFromGranteeType(grant.getGrantee().getXsiType());
        if (identityType != null && identityType.isSupported()) {
            String permission = grant.getPermission();
            BitSet acls = getOzoneAclOnVolumeFromS3Permission(permission);
            OzoneAcl accessOzoneAcl = new OzoneAcl(IAccessAuthorizer.ACLIdentityType.USER, grant.getGrantee().getId(), acls, OzoneAcl.AclScope.ACCESS);
            ozoneAclList.add(accessOzoneAcl);
        } else {
            LOG.error("Grantee type {} is not supported", grant.getGrantee().getXsiType());
            throw S3ErrorTable.newError(NOT_IMPLEMENTED, grant.getGrantee().getXsiType());
        }
    }
    return ozoneAclList;
}

Example 5 with S3ErrorTable.newError

use of org.apache.hadoop.ozone.s3.exception.S3ErrorTable.newError in project ozone by apache.

the class ContinueToken method decodeFromString.

/**
 * Decode a continuation token which is used in get Bucket.
 *
 * @param key
 * @return if key is not null return decoded token, otherwise returns null.
 * @throws OS3Exception
 */
public static ContinueToken decodeFromString(String key) throws OS3Exception {
    if (key != null) {
        int indexSeparator = key.indexOf(CONTINUE_TOKEN_SEPARATOR);
        if (indexSeparator == -1) {
            throw S3ErrorTable.newError(S3ErrorTable.INVALID_ARGUMENT, key);
        }
        String hex = key.substring(0, indexSeparator);
        String digest = key.substring(indexSeparator + 1);
        try {
            checkHash(key, hex, digest);
            ByteBuffer buffer = ByteBuffer.wrap(Hex.decodeHex(hex));
            int keySize = buffer.getInt();
            byte[] actualKeyBytes = new byte[keySize];
            buffer.get(actualKeyBytes);
            byte[] actualDirBytes = new byte[buffer.remaining()];
            buffer.get(actualDirBytes);
            return new ContinueToken(new String(actualKeyBytes, StandardCharsets.UTF_8), new String(actualDirBytes, StandardCharsets.UTF_8));
        } catch (DecoderException ex) {
            OS3Exception os3Exception = S3ErrorTable.newError(S3ErrorTable.INVALID_ARGUMENT, key, ex);
            os3Exception.setErrorMessage("The continuation token provided is " + "incorrect");
            throw os3Exception;
        }
    } else {
        return null;
    }
}