object-storage-proxy 0.3.2__tar.gz → 0.3.3__tar.gz

{object_storage_proxy-0.3.2 → object_storage_proxy-0.3.3}/.gitignore

@@ -4,4 +4,5 @@
 .env
 .venv
 .DS_Store
-*.pem
+*.pem
+*/with_*.log

{object_storage_proxy-0.3.2 → object_storage_proxy-0.3.3}/Cargo.lock

@@ -1701,7 +1701,7 @@ dependencies = [
 
 [[package]]
 name = "object-storage-proxy"
-version = "0.3.2"
+version = "0.3.3"
 dependencies = [
  "async-trait",
  "chrono",

{object_storage_proxy-0.3.2 → object_storage_proxy-0.3.3}/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "object-storage-proxy"
-version = "0.3.2"
+version = "0.3.3"
 edition = "2024"
 
 [dependencies]

{object_storage_proxy-0.3.2 → object_storage_proxy-0.3.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: object-storage-proxy
-Version: 0.3.2
+Version: 0.3.3
 Classifier: License :: Other/Proprietary License
 Classifier: Programming Language :: Rust
 Classifier: Programming Language :: Python :: Implementation :: CPython
@@ -176,7 +176,7 @@ s3 =
 ~/.aws/credentials
 ```ini
 [osp]
-aws_access_key_id = MYLOCAL123  # <-- this could be an openid connect/oauth2 token or anything that makes sense for your business
+aws_access_key_id = MYLOCAL123  # <-- this could be an internal client identifier, to fetch openid connect/oauth2 token or anything that makes sense for your business
 aws_secret_access_key = nothingmeaningful # <-- private key to sign original request
 ```
 
@@ -247,7 +247,7 @@ def lookup_secret_key(access_key: str) -> str | None:
 def do_validation(token: str, bucket: str) -> bool:
     """ Authorize the request based on token for the given bucket. 
         You can plug in your own authorization service here.
-        The token is the authorization token passed in the request.
+        The token is a client identifier used to fetch an authorization token and further authenticate/authorize.
         The bucket is the bucket name.
         The function should return True if the request is authorized, False otherwise.
     """

{object_storage_proxy-0.3.2 → object_storage_proxy-0.3.3}/README.md

@@ -156,7 +156,7 @@ s3 =
 ~/.aws/credentials
 ```ini
 [osp]
-aws_access_key_id = MYLOCAL123  # <-- this could be an openid connect/oauth2 token or anything that makes sense for your business
+aws_access_key_id = MYLOCAL123  # <-- this could be an internal client identifier, to fetch openid connect/oauth2 token or anything that makes sense for your business
 aws_secret_access_key = nothingmeaningful # <-- private key to sign original request
 ```
 
@@ -227,7 +227,7 @@ def lookup_secret_key(access_key: str) -> str | None:
 def do_validation(token: str, bucket: str) -> bool:
     """ Authorize the request based on token for the given bucket. 
         You can plug in your own authorization service here.
-        The token is the authorization token passed in the request.
+        The token is a client identifier used to fetch an authorization token and further authenticate/authorize.
         The bucket is the bucket name.
         The function should return True if the request is authorized, False otherwise.
     """

{object_storage_proxy-0.3.2 → object_storage_proxy-0.3.3}/src/lib.rs

@@ -7,6 +7,7 @@ use http::uri::Authority;
 use parsers::cos_map::{CosMapItem, parse_cos_map};
 use parsers::keystore::parse_hmac_list;
 use pingora::http::ResponseHeader;
+use pingora::protocols::ALPN;
 use pingora::Result;
 use pingora::proxy::{ProxyHttp, Session};
 use pingora::server::Server;
@@ -268,6 +269,17 @@ impl ProxyHttp for MyProxy {
         let addr = (endpoint.clone(), port);
 
         let mut peer = Box::new(HttpPeer::new(addr, true, endpoint.clone()));
+        peer.options.alpn = ALPN::H2;
+
+        peer.options.max_h2_streams = 32;
+        peer.options.h2_ping_interval = Some(Duration::from_secs(30));
+
+        // todo: make ths configurable
+
+        // peer.options.idle_timeout          = Some(Duration::from_secs(300));
+        // peer.options.connection_timeout    = Some(Duration::from_secs(30));
+        // peer.options.read_timeout          = Some(Duration::from_secs(300));
+        // peer.options.write_timeout         = Some(Duration::from_secs(300));
 
         debug!("peer: {:#?}", &peer);