Method checkAdminAuthenticationOnly

rest/handler.go:1124–1147

checkAdminAuthenticationOnly simply checks whether a username / password combination is authenticated pulling the credentials from the handler

()

// checkAdminAuthenticationOnly simply checks whether a username / password combination is authenticated pulling the
// credentials from the handler
func (h *handler) checkAdminAuthenticationOnly() (bool, error) {
	managementEndpoints, httpClient, err := h.server.ObtainManagementEndpointsAndHTTPClient()
	if err != nil {
		return false, base.HTTPErrorf(http.StatusInternalServerError, "Error getting management endpoints: %v", err)
	}

	username, password := h.getBasicAuth()
	if username == "" {
		h.response.Header().Set("WWW-Authenticate", wwwAuthenticateHeader)
		return false, ErrLoginRequired
	}

	statusCode, _, err := doHTTPAuthRequest(h.ctx(), httpClient, username, password, "POST", "/pools/default/checkPermissions", managementEndpoints, nil)
	if err != nil {
		return false, base.HTTPErrorf(http.StatusInternalServerError, "Error performing HTTP auth request: %v", err)
	}

	if statusCode == http.StatusUnauthorized {
		base.Audit(h.ctx(), base.AuditIDAdminUserAuthenticationFailed, base.AuditFields{base.AuditFieldUserName: username})
		return false, nil
	}

	return true, nil
}

func checkAdminAuth(ctx context.Context, bucketName, basicAuthUsername, basicAuthPassword string, attemptedHTTPOperation string, httpClient *http.Client, managementEndpoints []string, shouldCheckPermissions bool, accessPermissions []Permission, responsePermissions []Permission) (responsePermissionResults map[string]bool, statusCode int, err error) {
	anyResponsePermFailed := false