alternative ssl check approach proposal

scality · Mar 14, 2024 · b652cc9 · b652cc9
1 parent c5e5fcf
commit b652cc9
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/lib/api/apiUtils/authorization/permissionChecks.js b/lib/api/apiUtils/authorization/permissionChecks.js
@@ -247,10 +247,14 @@ function _checkBucketPolicyConditions(request, conditions, log) {
     if (!conditions) {
         return true;
     }
+    const extractProtoFromHeader = config.requests.extractProtoFromHeader;
+
+    const sslEnabled = (extractProtoFromHeader ?
+        extractProtoFromHeader === 'https' : request.connection.encrypted);
     // build request context from the request!
     const requestContext = new RequestContext(request.headers, request.query,
         request.bucketName, request.objectKey, ip,
-        request.connection.encrypted, request.resourceType, 's3', null, null,
+        sslEnabled, request.resourceType, 's3', null, null,
         null, null, null, null, null, null, null, null, null,
         request.objectLockRetentionDays);
     return evaluators.meetConditions(requestContext, conditions, log);