Skip to content

Support unsigned object GET/HEAD responses #3406

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
roman-khimov merged 6 commits into from
Jun 25, 2025
Merged

Support unsigned object GET/HEAD responses #3406

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
041cdce
go.mod: Upgrade `github.com/nspcc-dev/neofs-sdk-go` to the latest
cthulhu-rider Jun 25, 2025
fc2728c
sn/object: Do not sign object GET/HEAD responses for new requests
cthulhu-rider Jun 23, 2025
4080349
sn/object: Ignore signatures of proxied GET/HEAD responses
cthulhu-rider Jun 23, 2025
debfe6e
sn/object: Verify header against ID in GET/HEAD proxy
cthulhu-rider Jun 25, 2025
edd1dd9
sn/object: Verify payload checksum in GET proxy
cthulhu-rider Jun 25, 2025
ec7c76e
CHANGELOG: Fix whitespace error
cthulhu-rider Jun 25, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 7 additions & 1 deletion CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,18 +6,24 @@ Changelog for NeoFS Node
### Added

### Fixed
- IR exponentially retries updating SN lists in the Container contract in error cases (#3344)
- IR exponentially retries updating SN lists in the Container contract in error cases (#3344)
- Epoch stale after NEO RPC connection loss by IR (#3397)

### Changed
- SN caches up to 1000 bearer token verification results until the next epoch (#3369)
- SN caches up to 1000 session token verification results until the next epoch (#3369)
- SN no longer wastes memory for logger in ACL and GET/HEAD/RANGE handlers (#3408, #3412)
- Inner ring ticks epoch based on real time, not blocks count (#3402)
- IR, CLI and SN ignore signatures of object GET/HEAD responses (#3406)
- IR, CLI and SN verify object checksums from GET/HEAD responses (except SN proxy case) (#3406)
- SN does not sign object GET/HEAD responses to requests with API version > v2.17 (#3406)
- SN now verifies object header from proxy GET/HEAD responses against requested ID (#3406)
- SN now verifies payload from proxy GET responses against in-header checksum (#3406)

### Removed

### Updated
- `github.com/nspcc-dev/neofs-sdk-go` dependency to `v1.0.0-rc.13.0.20250623124459-a9cfab652dc0` (#3406)

### Updating from v0.47.1

Expand Down
2 changes: 1 addition & 1 deletion go.mod
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@ require (
github.com/nspcc-dev/neo-go v0.110.0
github.com/nspcc-dev/neofs-api-go/v2 v2.14.1-0.20240827150555-5ce597aa14ea
github.com/nspcc-dev/neofs-contract v0.23.0
github.com/nspcc-dev/neofs-sdk-go v1.0.0-rc.13.0.20250610144537-4b8bd696a7eb
github.com/nspcc-dev/neofs-sdk-go v1.0.0-rc.13.0.20250623124459-a9cfab652dc0
github.com/nspcc-dev/tzhash v1.8.2
github.com/olekukonko/tablewriter v0.0.5
github.com/panjf2000/ants/v2 v2.9.0
Expand Down
4 changes: 2 additions & 2 deletions go.sum
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -201,8 +201,8 @@ github.com/nspcc-dev/neofs-api-go/v2 v2.14.1-0.20240827150555-5ce597aa14ea h1:mK
github.com/nspcc-dev/neofs-api-go/v2 v2.14.1-0.20240827150555-5ce597aa14ea/go.mod h1:YzhD4EZmC9Z/PNyd7ysC7WXgIgURc9uCG1UWDeV027Y=
github.com/nspcc-dev/neofs-contract v0.23.0 h1:F5ciU0wPqSbycPY8qOtb4PvgnSZBNQ5Jp9tdeVSKu4o=
github.com/nspcc-dev/neofs-contract v0.23.0/go.mod h1:it6Su92UvEFQDsMOfDIXapLu0j5TQSOvkS2YdUlPdgo=
github.com/nspcc-dev/neofs-sdk-go v1.0.0-rc.13.0.20250610144537-4b8bd696a7eb h1:aQ6W8/8SIvcJwH1QF+NuwB8Uvt6LYFCOcRHLgynejeA=
github.com/nspcc-dev/neofs-sdk-go v1.0.0-rc.13.0.20250610144537-4b8bd696a7eb/go.mod h1:j/NUu5iOGFkOVYM42XoC1X9DZD0/y89Pws++w5vxtQk=
github.com/nspcc-dev/neofs-sdk-go v1.0.0-rc.13.0.20250623124459-a9cfab652dc0 h1:cWNNmSe0fJd81URPq8dp/8nkJywuO655/M8gdFgfVWg=
github.com/nspcc-dev/neofs-sdk-go v1.0.0-rc.13.0.20250623124459-a9cfab652dc0/go.mod h1:j/NUu5iOGFkOVYM42XoC1X9DZD0/y89Pws++w5vxtQk=
github.com/nspcc-dev/rfc6979 v0.2.3 h1:QNVykGZ3XjFwM/88rGfV3oj4rKNBy+nYI6jM7q19hDI=
github.com/nspcc-dev/rfc6979 v0.2.3/go.mod h1:q3sCL1Ed7homjqYK8KmFSzEmm+7Ngyo7PePbZanhaDE=
github.com/nspcc-dev/tzhash v1.8.2 h1:ebRCbPoEuoqrhC6sSZmrT/jI3h1SzCWakxxV6gp5QAg=
Expand Down
Loading
Loading