Function routeBackbeatAPIProxy

lib/routes/routeBackbeat.js:1642–1686

(request, response, requestContexts, log)

}

function routeBackbeatAPIProxy(request, response, requestContexts, log) {
    const path = request.url.replace('/_/backbeat/api/', '/_/');
    const { host, port } = config.backbeat;
    const target = `http://${host}:${port}${path}`;

    auth.server.doAuth(
        request,
        log,
        (err, userInfo, authorizationResults, streamingV4Params, infos) => {
            if (err) {
                log.debug('authentication error', {
                    error: err,
                    method: request.method,
                    bucketName: request.bucketName,
                    objectKey: request.objectKey,
                });
                return responseJSONBody(err, null, response, log);
            }
            // We don't use the authorization results for now
            // as the UI uses the external Cloudserver instance
            // as a proxy to access the Backbeat API service.

            // eslint-disable-next-line no-param-reassign
            request.accountQuotas = infos?.accountQuota;
            // FIXME for now, any authenticated user can access API
            // routes. We should introduce admin accounts or accounts
            // with admin privileges, and restrict access to those
            // only.
            if (userInfo.getCanonicalID() === constants.publicId) {
                log.debug('unauthenticated access to API routes', {
                    method: request.method,
                    bucketName: request.bucketName,
                    objectKey: request.objectKey,
                });
                return responseJSONBody(errors.AccessDenied, null, response, log);
            }
            return backbeatProxy.web(request, response, { target }, err => {
                log.error('error proxying request to api server', { error: err.message });
                return responseJSONBody(errors.ServiceUnavailable, null, response, log);
            });
        },
        's3',
        requestContexts,
    );
}

function routeNonObjectRequest(request, response, userInfo, log, callback) {
    if (userInfo.getCanonicalID() === constants.publicId) {