4

What's Changed

• Return proxied response body for all status codes by @mosiac1 in #153
• Add configurable in-memory caching to the HTTP Credentials Provider by @vagaerg in #155
• Return XML formatted error messages by @mosiac1 in #156
• Refactor TestHttpCredentialsProvider by @pranavr12 in #159
• Add status resource with public access by @mosiac1 in #158
• Update airlift/airbase versions by @Randgalt in #162
• Make RemoteS3Facade a plugin by @Laonel in #163
• Add Airlift JMX modules by @andythsu in #164
• Fix RequestLoggerController concurrency issues by @pranavr12 in #167
• Refactor to support Glue protocol (separate PR) by @Randgalt in #168
• Introduce Glue protocol module by @Randgalt in #169
• Bind testing server to 0.0.0.0 by @Randgalt in #172
• Should be @afterall by @Randgalt in #173

New Contributors

• @Laonel made their first contribution in #163
• @andythsu made their first contribution in #164

Full Changelog: 3...4

3

What's Changed

• Update to latest airlift/airbase by @Randgalt in #152

Full Changelog: 2...3

2

What's Changed

• Support S3 request rewriting by @vagaerg in #147
• Add OpaS3SecurityFacade by @pranavr12 in #149
• Add support for AWS logs endpoints by @Randgalt in #120
• Add opa container host by @pranavr12 in #150

Full Changelog: 1...2

1

What's Changed

• Initial Maven structure by @Randgalt in #1
• Initial server stub by @Randgalt in #2
• Create maven.yml by @Randgalt in #7
• Fix some project issues by @Randgalt in #12
• Implement support for request signing by @Randgalt in #6
• Introduce config and clock drift max to check for old requests by @Randgalt in #15
• Beginnings of S3 request proxying by @Randgalt in #11
• Introduce testing harness by @Randgalt in #13
• Should be bucket, region not bucket, bucket by @Randgalt in #28
• A few bug fixes by @Randgalt in #29
• Refine and test StreamingResponseHandler by @Randgalt in #27
• Use inputStream.transferTo instead of Guava by @Randgalt in #33
• Change to Minio's test container by @Randgalt in #31
• Use AwsS3V4Signer instead of the more generic signer by @Randgalt in #32
• Replace endpoint builder with ObjectStore abstraction by @Randgalt in #36
• Separate the TestingControllers and our specific implementations of them by @vagaerg in #40
• Support emulated assumed roles for the purpose of session tokens by @Randgalt in #38
• Standardise VHost support and add tests for VHost-addressing on the storage side by @vagaerg in #47
• Support remote IAM/assumed-role sessions by @Randgalt in #42
• Some fixups and cleanups by @Randgalt in #52
• Use the term "remote" instead of "real" everywhere by @Randgalt in #53
• Support serving of Virtual Host requests by @vagaerg in #51
• Add support for put/delete object by @Randgalt in #45
• Some minor cleanups by @Randgalt in #58
• Introduce security facade to manages allowing/disallowing operations by @Randgalt in #54
• Add simple plugin mechanism by @Randgalt in #56
• Introduce SigningHeaders to manage which headers get signed by @Randgalt in #68
• Support for multi-part put object via POST by @Randgalt in #48
• Validate signatures for AWS chunked input streams by @Randgalt in #67
• Refactoring the request fields by @vagaerg in #74
• Validate the hash for standard, non-chunked input streams by @Randgalt in #71
• Support custom prefixes for S3 and STS by @vagaerg in #75
• 01 - Additional testing containers, etc. by @Randgalt in #69
• Replace Jersey specific collections with our own by @vagaerg in #80
• Sanity check - ensure the URL is prefixed adequately by @vagaerg in #81
• 02 - Introduce SPI module by @Randgalt in #64
• 01 - Add request logging mechanism by @Randgalt in #82
• 02 - Rename classes, directories, modules, etc. by @Randgalt in #79
• 03 - Inject and manage common objects via a request filter by @Randgalt in #83
• 04 - Refactor TrinoAwsProxyModuleBuilder by @Randgalt in #84
• Introduce database security by @Randgalt in #85
• Ensure 'Credentials not found' is only logged if the credentials do not exist by @vagaerg in #89
• Remove duplicated session field by @vagaerg in #90
• Update Airlift/Airbase to 249/157 by @Randgalt in #93
• Implement support for presigned requests by @vagaerg in #91
• Rewrite of AWS Chunked support by @Randgalt in #105
• Cleanup aws-chunked decoded-content-length handling by @vagaerg in #107
• Remove ADJUSTED_HEADERS hack now that Airlift has been updated by @Randgalt in #104
• Update README for running LocalServers by @Randgalt in #97
• Add more thorough tests for aws-chunked by @vagaerg in #110
• Add .gitignore by @pranavr12 in #113
• Upgrade minio version by @pranavr12 in #112
• Added file based credentials provider plugin by @pranavr12 in #111
• Rename and move TrinoS3ProxyConfig to TrinoAwsProxyConfig by @Randgalt in #114
• Improve the design of SecurityResponse by @Randgalt in #117
• Temporary fix for jetty/jetty.project#11841 by @Randgalt in #115
• Remote S3 configs by @pranavr12 in #116
• Have metastore connect directly to remote by @Randgalt in #92
• Spark 3 support by @Randgalt in #94
• Properly parse Content-Type and Content-Encoding by @vagaerg in #101
• Added identity to Credentials by @pranavr12 in #123
• Add Spark 4 module by @Randgalt in #122
• Enhance plugin mechanism by @mosiac1 in #118
• Improve S3 DB security config/binding by @Randgalt in #125
• Split forwardable and internal request headers by @vagaerg in #127
• Simplify DB security by @Randgalt in #128
• Add saved entries to request logger by @Randgalt in #119
• Improve FileBasedCredentialsProvider binding and test by @Randgalt in #126
• Add strict signature validation of aws-chunked streams by @vagaerg in #130
• Support for OPA policy security by @Randgalt in #129
• Fix HTTP chunked uploads by @vagaerg in #131
• Fix UNSIGNED-PAYLOAD request handling by @vagaerg in #134
• Put config values in spark-defaults.conf by @Randgalt in #135
• Improve tests for remote session credentials by @vagaerg in #137
• Add http credentials provider by @pranavr12 in #136
• Add OPA config test by @pranavr12 in #140
• Use host from Jetty provided URI instead of Host header by @mosiac1 in #143
• Fixed OPA baseUri path by @pranavr12 in #144
• Added headers to http credentials provider by @pranavr12 in #139
• Improved Credentials deserialisation by @pranavr12 in #141
• Bind Identity to S3SecurityController by @pranavr12 in #145
• Support max bytes quota for requests by @Randgalt in #96
• Allow path-style addressing when proxy is using virtual host by @mosiac1 in #146

Full Changelog: https://github.com/trinodb/aws-proxy/commits/1