Function AWSAuthMiddleware

pkg/operator/endpoints/middleware.go:62–90

(next http.Handler)

}

func AWSAuthMiddleware(next http.Handler) http.Handler {
	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
		authHeader := r.Header.Get(consts.AuthHeader)

		if authHeader == "" {
			respondError(w, r, ErrorAuthHeaderMissing(consts.AuthHeader, r.Host, r.RequestURI))
			return
		}

		accountID, err := aws.ExecuteIdentityRequestFromHeader(authHeader)
		if err != nil {
			respondError(w, r, err)
			return
		}

		operatorAccountID, _, err := config.AWS.GetCachedAccountID()
		if err != nil {
			respondError(w, r, ErrorAuthAPIError())
			return
		}

		if accountID != operatorAccountID {
			respondErrorCode(w, r, http.StatusForbidden, ErrorAuthOtherAccount())
			return
		}

		next.ServeHTTP(w, r)
	})
}

func APIVersionCheckMiddleware(next http.Handler) http.Handler {
	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {