rgw: RGWAnonymousAuthEngine accepts now only requests without a token.

Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>

diff --git a/src/rgw/rgw_auth.h b/src/rgw/rgw_auth.h
index dd25a67fbe8f37cb4156953b05a428912cd1b94c..efcd654425fe1c08431a5ba308faf56fa58da7bf 100644 (file)
--- a/src/rgw/rgw_auth.h
+++ b/src/rgw/rgw_auth.h
@@ -318,18 +318,19 @@ public:
 
 
 /* Anonymous */
-class RGWAnonymousAuthEngine : public RGWAuthEngine {
+class RGWAnonymousAuthEngine : public RGWTokenBasedAuthEngine {
   const RGWLocalAuthApplier::Factory * const apl_factory;
 
 public:
   RGWAnonymousAuthEngine(CephContext * const cct,
+                         const Extractor& extr,
                          const RGWLocalAuthApplier::Factory * const apl_factory)
-    : RGWAuthEngine(cct),
+    : RGWTokenBasedAuthEngine(cct, extr),
       apl_factory(apl_factory) {
   }
 
   bool is_applicable() const noexcept override {
-    return true;
+    return token.empty();
   }
 
   const char* get_name() const noexcept override {

diff --git a/src/rgw/rgw_rest_swift.cc b/src/rgw/rgw_rest_swift.cc
index 3918603288a2a27f6a84c1e6f5986eaae08bbe54..9ed0c03ba973377fed14ab870ff396e74def85e9 100644 (file)
--- a/src/rgw/rgw_rest_swift.cc
+++ b/src/rgw/rgw_rest_swift.cc
@@ -1515,7 +1515,7 @@ int RGWHandler_REST_SWIFT::authorize()
   RGWSignedTokenAuthEngine rgwtk(s->cct, store, token_extr, &aplfact);
   RGWKeystoneAuthEngine keystone(s->cct,        token_extr, &aplfact);
   RGWExternalTokenAuthEngine ext(s->cct, store, token_extr, &aplfact);
-  RGWAnonymousAuthEngine anoneng(s->cct,                    &aplfact);
+  RGWAnonymousAuthEngine anoneng(s->cct,        token_extr, &aplfact);
 
   /* Pipeline. */
   constexpr size_t ENGINES_NUM = 5;