/*

* MinIO Cloud Storage, (C) 2015, 2016, 2017, 2018 MinIO, Inc.

*

* Licensed under the Apache License, Version 2.0 (the "License");

* you may not use this file except in compliance with the License.

* You may obtain a copy of the License at

*

* http://www.apache.org/licenses/LICENSE-2.0

*

* Unless required by applicable law or agreed to in writing, software

* distributed under the License is distributed on an "AS IS" BASIS,

* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

* See the License for the specific language governing permissions and

* limitations under the License.

*/

package cmd

import (

"context"

"encoding/xml"

"fmt"

"net/http"

"net/url"

"strings"

"github.com/Azure/azure-storage-blob-go/azblob"

"google.golang.org/api/googleapi"

minio "github.com/minio/minio-go/v7"

"github.com/minio/minio-go/v7/pkg/tags"

"github.com/minio/minio/cmd/config/dns"

"github.com/minio/minio/cmd/crypto"

"github.com/minio/minio/cmd/logger"

"github.com/minio/minio/pkg/auth"

"github.com/minio/minio/pkg/bucket/lifecycle"

"github.com/minio/minio/pkg/bucket/replication"

objectlock "github.com/minio/minio/pkg/bucket/object/lock"

"github.com/minio/minio/pkg/bucket/policy"

"github.com/minio/minio/pkg/bucket/versioning"

"github.com/minio/minio/pkg/event"

"github.com/minio/minio/pkg/hash"

)

// APIError structure

type APIError struct {

Code string

Description string

HTTPStatusCode int

}

// APIErrorResponse - error response format

type APIErrorResponse struct {

XMLName xml.Name `xml:"Error" json:"-"`

Code string

Message string

Key string `xml:"Key,omitempty" json:"Key,omitempty"`

BucketName string `xml:"BucketName,omitempty" json:"BucketName,omitempty"`

Resource string

Region string `xml:"Region,omitempty" json:"Region,omitempty"`

RequestID string `xml:"RequestId" json:"RequestId"`

HostID string `xml:"HostId" json:"HostId"`

}

// APIErrorCode type of error status.

type APIErrorCode int

// Error codes, non exhaustive list - http://docs.aws.amazon.com/AmazonS3/latest/API/ErrorResponses.html

const (

ErrNone APIErrorCode = iota

ErrAccessDenied

ErrBadDigest

ErrEntityTooSmall

ErrEntityTooLarge

ErrPolicyTooLarge

ErrIncompleteBody

ErrInternalError

ErrInvalidAccessKeyID

ErrInvalidBucketName

ErrInvalidDigest

ErrInvalidRange

ErrInvalidCopyPartRange

ErrInvalidCopyPartRangeSource

ErrInvalidMaxKeys

ErrInvalidEncodingMethod

ErrInvalidMaxUploads

ErrInvalidMaxParts

ErrInvalidPartNumberMarker

ErrInvalidRequestBody

ErrInvalidCopySource

ErrInvalidMetadataDirective

ErrInvalidCopyDest

ErrInvalidPolicyDocument

ErrInvalidObjectState

ErrMalformedXML

ErrMissingContentLength

ErrMissingContentMD5

ErrMissingRequestBodyError

ErrMissingSecurityHeader

ErrNoSuchBucket

ErrNoSuchBucketPolicy

ErrNoSuchBucketLifecycle

ErrNoSuchLifecycleConfiguration

ErrNoSuchBucketSSEConfig

ErrNoSuchCORSConfiguration

ErrNoSuchWebsiteConfiguration

ErrReplicationConfigurationNotFoundError

ErrRemoteDestinationNotFoundError

ErrReplicationDestinationMissingLock

ErrRemoteTargetNotFoundError

ErrReplicationRemoteConnectionError

ErrBucketRemoteIdenticalToSource

ErrBucketRemoteAlreadyExists

ErrBucketRemoteLabelInUse

ErrBucketRemoteArnTypeInvalid

ErrBucketRemoteArnInvalid

ErrBucketRemoteRemoveDisallowed

ErrRemoteTargetNotVersionedError

ErrReplicationSourceNotVersionedError

ErrReplicationNeedsVersioningError

ErrReplicationBucketNeedsVersioningError

ErrBucketReplicationDisabledError

ErrObjectRestoreAlreadyInProgress

ErrNoSuchKey

ErrNoSuchUpload

ErrNoSuchVersion

ErrNotImplemented

ErrPreconditionFailed

ErrRequestTimeTooSkewed

ErrSignatureDoesNotMatch

ErrMethodNotAllowed

ErrInvalidPart

ErrInvalidPartOrder

ErrAuthorizationHeaderMalformed

ErrMalformedPOSTRequest

ErrPOSTFileRequired

ErrSignatureVersionNotSupported

ErrBucketNotEmpty

ErrAllAccessDisabled

ErrMalformedPolicy

ErrMissingFields

ErrMissingCredTag

ErrCredMalformed

ErrInvalidRegion

ErrInvalidServiceS3

ErrInvalidServiceSTS

ErrInvalidRequestVersion

ErrMissingSignTag

ErrMissingSignHeadersTag

ErrMalformedDate

ErrMalformedPresignedDate

ErrMalformedCredentialDate

ErrMalformedCredentialRegion

ErrMalformedExpires

ErrNegativeExpires

ErrAuthHeaderEmpty

ErrExpiredPresignRequest

ErrRequestNotReadyYet

ErrUnsignedHeaders

ErrMissingDateHeader

ErrInvalidQuerySignatureAlgo

ErrInvalidQueryParams

ErrBucketAlreadyOwnedByYou

ErrInvalidDuration

ErrBucketAlreadyExists

ErrMetadataTooLarge

ErrUnsupportedMetadata

ErrMaximumExpires

ErrSlowDown

ErrInvalidPrefixMarker

ErrBadRequest

ErrKeyTooLongError

ErrInvalidBucketObjectLockConfiguration

ErrObjectLockConfigurationNotFound

ErrObjectLockConfigurationNotAllowed

ErrNoSuchObjectLockConfiguration

ErrObjectLocked

ErrInvalidRetentionDate

ErrPastObjectLockRetainDate

ErrUnknownWORMModeDirective

ErrBucketTaggingNotFound

ErrObjectLockInvalidHeaders

ErrInvalidTagDirective

// Add new error codes here.

// SSE-S3 related API errors

ErrInvalidEncryptionMethod

// Server-Side-Encryption (with Customer provided key) related API errors.

ErrInsecureSSECustomerRequest

ErrSSEMultipartEncrypted

ErrSSEEncryptedObject

ErrInvalidEncryptionParameters

ErrInvalidSSECustomerAlgorithm

ErrInvalidSSECustomerKey

ErrMissingSSECustomerKey

ErrMissingSSECustomerKeyMD5

ErrSSECustomerKeyMD5Mismatch

ErrInvalidSSECustomerParameters

ErrIncompatibleEncryptionMethod

ErrKMSNotConfigured

ErrKMSAuthFailure

ErrNoAccessKey

ErrInvalidToken

// Bucket notification related errors.

ErrEventNotification

ErrARNNotification

ErrRegionNotification

ErrOverlappingFilterNotification

ErrFilterNameInvalid

ErrFilterNamePrefix

ErrFilterNameSuffix

ErrFilterValueInvalid

ErrOverlappingConfigs

ErrUnsupportedNotification

// S3 extended errors.

ErrContentSHA256Mismatch

// Add new extended error codes here.

// MinIO extended errors.

ErrReadQuorum

ErrWriteQuorum

ErrParentIsObject

ErrStorageFull

ErrRequestBodyParse

ErrObjectExistsAsDirectory

ErrInvalidObjectName

ErrInvalidObjectNamePrefixSlash

ErrInvalidResourceName

ErrServerNotInitialized

ErrOperationTimedOut

ErrClientDisconnected

ErrOperationMaxedOut

ErrInvalidRequest

// MinIO storage class error codes

ErrInvalidStorageClass

ErrBackendDown

// Add new extended error codes here.

// Please open a https://github.com/minio/minio/issues before adding

// new error codes here.

ErrMalformedJSON

ErrAdminNoSuchUser

ErrAdminNoSuchGroup

ErrAdminGroupNotEmpty

ErrAdminNoSuchPolicy

ErrAdminInvalidArgument

ErrAdminInvalidAccessKey

ErrAdminInvalidSecretKey

ErrAdminConfigNoQuorum

ErrAdminConfigTooLarge

ErrAdminConfigBadJSON

ErrAdminConfigDuplicateKeys

ErrAdminCredentialsMismatch

ErrInsecureClientRequest

ErrObjectTampered

// Bucket Quota error codes

ErrAdminBucketQuotaExceeded

ErrAdminNoSuchQuotaConfiguration

ErrAdminBucketQuotaDisabled

ErrHealNotImplemented

ErrHealNoSuchProcess

ErrHealInvalidClientToken

ErrHealMissingBucket

ErrHealAlreadyRunning

ErrHealOverlappingPaths

ErrIncorrectContinuationToken

// S3 Select Errors

ErrEmptyRequestBody

ErrUnsupportedFunction

ErrInvalidExpressionType

ErrBusy

ErrUnauthorizedAccess

ErrExpressionTooLong

ErrIllegalSQLFunctionArgument

ErrInvalidKeyPath

ErrInvalidCompressionFormat

ErrInvalidFileHeaderInfo

ErrInvalidJSONType

ErrInvalidQuoteFields

ErrInvalidRequestParameter

ErrInvalidDataType

ErrInvalidTextEncoding

ErrInvalidDataSource

ErrInvalidTableAlias

ErrMissingRequiredParameter

ErrObjectSerializationConflict

ErrUnsupportedSQLOperation

ErrUnsupportedSQLStructure

ErrUnsupportedSyntax

ErrUnsupportedRangeHeader

ErrLexerInvalidChar

ErrLexerInvalidOperator

ErrLexerInvalidLiteral

ErrLexerInvalidIONLiteral

ErrParseExpectedDatePart

ErrParseExpectedKeyword

ErrParseExpectedTokenType

ErrParseExpected2TokenTypes

ErrParseExpectedNumber

ErrParseExpectedRightParenBuiltinFunctionCall

ErrParseExpectedTypeName

ErrParseExpectedWhenClause

ErrParseUnsupportedToken

ErrParseUnsupportedLiteralsGroupBy

ErrParseExpectedMember

ErrParseUnsupportedSelect

ErrParseUnsupportedCase

ErrParseUnsupportedCaseClause

ErrParseUnsupportedAlias

ErrParseUnsupportedSyntax

ErrParseUnknownOperator

ErrParseMissingIdentAfterAt

ErrParseUnexpectedOperator

ErrParseUnexpectedTerm

ErrParseUnexpectedToken

ErrParseUnexpectedKeyword

ErrParseExpectedExpression

ErrParseExpectedLeftParenAfterCast

ErrParseExpectedLeftParenValueConstructor

ErrParseExpectedLeftParenBuiltinFunctionCall

ErrParseExpectedArgumentDelimiter

ErrParseCastArity

ErrParseInvalidTypeParam

ErrParseEmptySelect

ErrParseSelectMissingFrom

ErrParseExpectedIdentForGroupName

ErrParseExpectedIdentForAlias

ErrParseUnsupportedCallWithStar

ErrParseNonUnaryAgregateFunctionCall

ErrParseMalformedJoin

ErrParseExpectedIdentForAt

ErrParseAsteriskIsNotAloneInSelectList

ErrParseCannotMixSqbAndWildcardInSelectList

ErrParseInvalidContextForWildcardInSelectList

ErrIncorrectSQLFunctionArgumentType

ErrValueParseFailure

ErrEvaluatorInvalidArguments

ErrIntegerOverflow

ErrLikeInvalidInputs

ErrCastFailed

ErrInvalidCast

ErrEvaluatorInvalidTimestampFormatPattern

ErrEvaluatorInvalidTimestampFormatPatternSymbolForParsing

ErrEvaluatorTimestampFormatPatternDuplicateFields

ErrEvaluatorTimestampFormatPatternHourClockAmPmMismatch

ErrEvaluatorUnterminatedTimestampFormatPatternToken

ErrEvaluatorInvalidTimestampFormatPatternToken

ErrEvaluatorInvalidTimestampFormatPatternSymbol

ErrEvaluatorBindingDoesNotExist

ErrMissingHeaders

ErrInvalidColumnIndex

ErrAdminConfigNotificationTargetsFailed

ErrAdminProfilerNotEnabled

ErrInvalidDecompressedSize

ErrAddUserInvalidArgument

ErrAdminAccountNotEligible

ErrServiceAccountNotFound

ErrPostPolicyConditionInvalidFormat

)

type errorCodeMap map[APIErrorCode]APIError

func (e errorCodeMap) ToAPIErrWithErr(errCode APIErrorCode, err error) APIError {

apiErr, ok := e[errCode]

if !ok {

apiErr = e[ErrInternalError]

}

if err != nil {

apiErr.Description = fmt.Sprintf("%s (%s)", apiErr.Description, err)

}

return apiErr

}

func (e errorCodeMap) ToAPIErr(errCode APIErrorCode) APIError {

return e.ToAPIErrWithErr(errCode, nil)

}

// error code to APIError structure, these fields carry respective

// descriptions for all the error responses.

var errorCodes = errorCodeMap{

ErrInvalidCopyDest: {

Code: "InvalidRequest",

Description: "This copy request is illegal because it is trying to copy an object to itself without changing the object's metadata, storage class, website redirect location or encryption attributes.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrInvalidCopySource: {

Code: "InvalidArgument",

Description: "Copy Source must mention the source bucket and key: sourcebucket/sourcekey.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrInvalidMetadataDirective: {

Code: "InvalidArgument",

Description: "Unknown metadata directive.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrInvalidStorageClass: {

Code: "InvalidStorageClass",

Description: "Invalid storage class.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrInvalidRequestBody: {

Code: "InvalidArgument",

Description: "Body shouldn't be set for this request.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrInvalidMaxUploads: {

Code: "InvalidArgument",

Description: "Argument max-uploads must be an integer between 0 and 2147483647",

HTTPStatusCode: http.StatusBadRequest,

},

ErrInvalidMaxKeys: {

Code: "InvalidArgument",

Description: "Argument maxKeys must be an integer between 0 and 2147483647",

HTTPStatusCode: http.StatusBadRequest,

},

ErrInvalidEncodingMethod: {

Code: "InvalidArgument",

Description: "Invalid Encoding Method specified in Request",

HTTPStatusCode: http.StatusBadRequest,

},

ErrInvalidMaxParts: {

Code: "InvalidArgument",

Description: "Argument max-parts must be an integer between 0 and 2147483647",

HTTPStatusCode: http.StatusBadRequest,

},

ErrInvalidPartNumberMarker: {

Code: "InvalidArgument",

Description: "Argument partNumberMarker must be an integer.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrInvalidPolicyDocument: {

Code: "InvalidPolicyDocument",

Description: "The content of the form does not meet the conditions specified in the policy document.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrAccessDenied: {

Code: "AccessDenied",

Description: "Access Denied.",

HTTPStatusCode: http.StatusForbidden,

},

ErrBadDigest: {

Code: "BadDigest",

Description: "The Content-Md5 you specified did not match what we received.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrEntityTooSmall: {

Code: "EntityTooSmall",

Description: "Your proposed upload is smaller than the minimum allowed object size.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrEntityTooLarge: {

Code: "EntityTooLarge",

Description: "Your proposed upload exceeds the maximum allowed object size.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrPolicyTooLarge: {

Code: "PolicyTooLarge",

Description: "Policy exceeds the maximum allowed document size.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrIncompleteBody: {

Code: "IncompleteBody",

Description: "You did not provide the number of bytes specified by the Content-Length HTTP header.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrInternalError: {

Code: "InternalError",

Description: "We encountered an internal error, please try again.",

HTTPStatusCode: http.StatusInternalServerError,

},

ErrInvalidAccessKeyID: {

Code: "InvalidAccessKeyId",

Description: "The Access Key Id you provided does not exist in our records.",

HTTPStatusCode: http.StatusForbidden,

},

ErrInvalidBucketName: {

Code: "InvalidBucketName",

Description: "The specified bucket is not valid.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrInvalidDigest: {

Code: "InvalidDigest",

Description: "The Content-Md5 you specified is not valid.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrInvalidRange: {

Code: "InvalidRange",

Description: "The requested range is not satisfiable",

HTTPStatusCode: http.StatusRequestedRangeNotSatisfiable,

},

ErrMalformedXML: {

Code: "MalformedXML",

Description: "The XML you provided was not well-formed or did not validate against our published schema.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrMissingContentLength: {

Code: "MissingContentLength",

Description: "You must provide the Content-Length HTTP header.",

HTTPStatusCode: http.StatusLengthRequired,

},

ErrMissingContentMD5: {

Code: "MissingContentMD5",

Description: "Missing required header for this request: Content-Md5.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrMissingSecurityHeader: {

Code: "MissingSecurityHeader",

Description: "Your request was missing a required header",

HTTPStatusCode: http.StatusBadRequest,

},

ErrMissingRequestBodyError: {

Code: "MissingRequestBodyError",

Description: "Request body is empty.",

HTTPStatusCode: http.StatusLengthRequired,

},

ErrNoSuchBucket: {

Code: "NoSuchBucket",

Description: "The specified bucket does not exist",

HTTPStatusCode: http.StatusNotFound,

},

ErrNoSuchBucketPolicy: {

Code: "NoSuchBucketPolicy",

Description: "The bucket policy does not exist",

HTTPStatusCode: http.StatusNotFound,

},

ErrNoSuchBucketLifecycle: {

Code: "NoSuchBucketLifecycle",

Description: "The bucket lifecycle configuration does not exist",

HTTPStatusCode: http.StatusNotFound,

},

ErrNoSuchLifecycleConfiguration: {

Code: "NoSuchLifecycleConfiguration",

Description: "The lifecycle configuration does not exist",

HTTPStatusCode: http.StatusNotFound,

},

ErrNoSuchBucketSSEConfig: {

Code: "ServerSideEncryptionConfigurationNotFoundError",

Description: "The server side encryption configuration was not found",

HTTPStatusCode: http.StatusNotFound,

},

ErrNoSuchKey: {

Code: "NoSuchKey",

Description: "The specified key does not exist.",

HTTPStatusCode: http.StatusNotFound,

},

ErrNoSuchUpload: {

Code: "NoSuchUpload",

Description: "The specified multipart upload does not exist. The upload ID may be invalid, or the upload may have been aborted or completed.",

HTTPStatusCode: http.StatusNotFound,

},

ErrNoSuchVersion: {

Code: "InvalidArgument",

Description: "Invalid version id specified",

HTTPStatusCode: http.StatusBadRequest,

},

ErrNotImplemented: {

Code: "NotImplemented",

Description: "A header you provided implies functionality that is not implemented",

HTTPStatusCode: http.StatusNotImplemented,

},

ErrPreconditionFailed: {

Code: "PreconditionFailed",

Description: "At least one of the pre-conditions you specified did not hold",

HTTPStatusCode: http.StatusPreconditionFailed,

},

ErrRequestTimeTooSkewed: {

Code: "RequestTimeTooSkewed",

Description: "The difference between the request time and the server's time is too large.",

HTTPStatusCode: http.StatusForbidden,

},

ErrSignatureDoesNotMatch: {

Code: "SignatureDoesNotMatch",

Description: "The request signature we calculated does not match the signature you provided. Check your key and signing method.",

HTTPStatusCode: http.StatusForbidden,

},

ErrMethodNotAllowed: {

Code: "MethodNotAllowed",

Description: "The specified method is not allowed against this resource.",

HTTPStatusCode: http.StatusMethodNotAllowed,

},

ErrInvalidPart: {

Code: "InvalidPart",

Description: "One or more of the specified parts could not be found. The part may not have been uploaded, or the specified entity tag may not match the part's entity tag.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrInvalidPartOrder: {

Code: "InvalidPartOrder",

Description: "The list of parts was not in ascending order. The parts list must be specified in order by part number.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrInvalidObjectState: {

Code: "InvalidObjectState",

Description: "The operation is not valid for the current state of the object.",

HTTPStatusCode: http.StatusForbidden,

},

ErrAuthorizationHeaderMalformed: {

Code: "AuthorizationHeaderMalformed",

Description: "The authorization header is malformed; the region is wrong; expecting 'us-east-1'.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrMalformedPOSTRequest: {

Code: "MalformedPOSTRequest",

Description: "The body of your POST request is not well-formed multipart/form-data.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrPOSTFileRequired: {

Code: "InvalidArgument",

Description: "POST requires exactly one file upload per request.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrSignatureVersionNotSupported: {

Code: "InvalidRequest",

Description: "The authorization mechanism you have provided is not supported. Please use AWS4-HMAC-SHA256.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrBucketNotEmpty: {

Code: "BucketNotEmpty",

Description: "The bucket you tried to delete is not empty",

HTTPStatusCode: http.StatusConflict,

},

ErrBucketAlreadyExists: {

Code: "BucketAlreadyExists",

Description: "The requested bucket name is not available. The bucket namespace is shared by all users of the system. Please select a different name and try again.",

HTTPStatusCode: http.StatusConflict,

},

ErrAllAccessDisabled: {

Code: "AllAccessDisabled",

Description: "All access to this bucket has been disabled.",

HTTPStatusCode: http.StatusForbidden,

},

ErrMalformedPolicy: {

Code: "MalformedPolicy",

Description: "Policy has invalid resource.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrMissingFields: {

Code: "MissingFields",

Description: "Missing fields in request.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrMissingCredTag: {

Code: "InvalidRequest",

Description: "Missing Credential field for this request.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrCredMalformed: {

Code: "AuthorizationQueryParametersError",

Description: "Error parsing the X-Amz-Credential parameter; the Credential is mal-formed; expecting \"<YOUR-AKID>/YYYYMMDD/REGION/SERVICE/aws4_request\".",

HTTPStatusCode: http.StatusBadRequest,

},

ErrMalformedDate: {

Code: "MalformedDate",

Description: "Invalid date format header, expected to be in ISO8601, RFC1123 or RFC1123Z time format.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrMalformedPresignedDate: {

Code: "AuthorizationQueryParametersError",

Description: "X-Amz-Date must be in the ISO8601 Long Format \"yyyyMMdd'T'HHmmss'Z'\"",

HTTPStatusCode: http.StatusBadRequest,

},

ErrMalformedCredentialDate: {

Code: "AuthorizationQueryParametersError",

Description: "Error parsing the X-Amz-Credential parameter; incorrect date format. This date in the credential must be in the format \"yyyyMMdd\".",

HTTPStatusCode: http.StatusBadRequest,

},

ErrInvalidRegion: {

Code: "InvalidRegion",

Description: "Region does not match.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrInvalidServiceS3: {

Code: "AuthorizationParametersError",

Description: "Error parsing the Credential/X-Amz-Credential parameter; incorrect service. This endpoint belongs to \"s3\".",

HTTPStatusCode: http.StatusBadRequest,

},

ErrInvalidServiceSTS: {

Code: "AuthorizationParametersError",

Description: "Error parsing the Credential parameter; incorrect service. This endpoint belongs to \"sts\".",

HTTPStatusCode: http.StatusBadRequest,

},

ErrInvalidRequestVersion: {

Code: "AuthorizationQueryParametersError",

Description: "Error parsing the X-Amz-Credential parameter; incorrect terminal. This endpoint uses \"aws4_request\".",

HTTPStatusCode: http.StatusBadRequest,

},

ErrMissingSignTag: {

Code: "AccessDenied",

Description: "Signature header missing Signature field.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrMissingSignHeadersTag: {

Code: "InvalidArgument",

Description: "Signature header missing SignedHeaders field.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrMalformedExpires: {

Code: "AuthorizationQueryParametersError",

Description: "X-Amz-Expires should be a number",

HTTPStatusCode: http.StatusBadRequest,

},

ErrNegativeExpires: {

Code: "AuthorizationQueryParametersError",

Description: "X-Amz-Expires must be non-negative",

HTTPStatusCode: http.StatusBadRequest,

},

ErrAuthHeaderEmpty: {

Code: "InvalidArgument",

Description: "Authorization header is invalid -- one and only one ' ' (space) required.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrMissingDateHeader: {

Code: "AccessDenied",

Description: "AWS authentication requires a valid Date or x-amz-date header",

HTTPStatusCode: http.StatusBadRequest,

},

ErrInvalidQuerySignatureAlgo: {

Code: "AuthorizationQueryParametersError",

Description: "X-Amz-Algorithm only supports \"AWS4-HMAC-SHA256\".",

HTTPStatusCode: http.StatusBadRequest,

},

ErrExpiredPresignRequest: {

Code: "AccessDenied",

Description: "Request has expired",

HTTPStatusCode: http.StatusForbidden,

},

ErrRequestNotReadyYet: {

Code: "AccessDenied",

Description: "Request is not valid yet",

HTTPStatusCode: http.StatusForbidden,

},

ErrSlowDown: {

Code: "SlowDown",

Description: "Please reduce your request",

HTTPStatusCode: http.StatusServiceUnavailable,

},

ErrInvalidPrefixMarker: {

Code: "InvalidPrefixMarker",

Description: "Invalid marker prefix combination",

HTTPStatusCode: http.StatusBadRequest,

},

ErrBadRequest: {

Code: "BadRequest",

Description: "400 BadRequest",

HTTPStatusCode: http.StatusBadRequest,

},

ErrKeyTooLongError: {

Code: "KeyTooLongError",

Description: "Your key is too long",

HTTPStatusCode: http.StatusBadRequest,

},

ErrUnsignedHeaders: {

Code: "AccessDenied",

Description: "There were headers present in the request which were not signed",

HTTPStatusCode: http.StatusBadRequest,

},

ErrInvalidQueryParams: {

Code: "AuthorizationQueryParametersError",

Description: "Query-string authentication version 4 requires the X-Amz-Algorithm, X-Amz-Credential, X-Amz-Signature, X-Amz-Date, X-Amz-SignedHeaders, and X-Amz-Expires parameters.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrBucketAlreadyOwnedByYou: {

Code: "BucketAlreadyOwnedByYou",

Description: "Your previous request to create the named bucket succeeded and you already own it.",

HTTPStatusCode: http.StatusConflict,

},

ErrInvalidDuration: {

Code: "InvalidDuration",

Description: "Duration provided in the request is invalid.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrInvalidBucketObjectLockConfiguration: {

Code: "InvalidRequest",

Description: "Bucket is missing ObjectLockConfiguration",

HTTPStatusCode: http.StatusBadRequest,

},

ErrBucketTaggingNotFound: {

Code: "NoSuchTagSet",

Description: "The TagSet does not exist",

HTTPStatusCode: http.StatusNotFound,

},

ErrObjectLockConfigurationNotFound: {

Code: "ObjectLockConfigurationNotFoundError",

Description: "Object Lock configuration does not exist for this bucket",

HTTPStatusCode: http.StatusNotFound,

},

ErrObjectLockConfigurationNotAllowed: {

Code: "InvalidBucketState",

Description: "Object Lock configuration cannot be enabled on existing buckets",

HTTPStatusCode: http.StatusConflict,

},

ErrNoSuchCORSConfiguration: {

Code: "NoSuchCORSConfiguration",

Description: "The CORS configuration does not exist",

HTTPStatusCode: http.StatusNotFound,

},

ErrNoSuchWebsiteConfiguration: {

Code: "NoSuchWebsiteConfiguration",

Description: "The specified bucket does not have a website configuration",

HTTPStatusCode: http.StatusNotFound,

},

ErrReplicationConfigurationNotFoundError: {

Code: "ReplicationConfigurationNotFoundError",

Description: "The replication configuration was not found",

HTTPStatusCode: http.StatusNotFound,

},

ErrRemoteDestinationNotFoundError: {

Code: "RemoteDestinationNotFoundError",

Description: "The remote destination bucket does not exist",

HTTPStatusCode: http.StatusNotFound,

},

ErrReplicationDestinationMissingLock: {

Code: "ReplicationDestinationMissingLockError",

Description: "The replication destination bucket does not have object locking enabled",

HTTPStatusCode: http.StatusBadRequest,

},

ErrRemoteTargetNotFoundError: {

Code: "XMinioAdminRemoteTargetNotFoundError",

Description: "The remote target does not exist",

HTTPStatusCode: http.StatusNotFound,

},

ErrReplicationRemoteConnectionError: {

Code: "XMinioAdminReplicationRemoteConnectionError",

Description: "Remote service endpoint or target bucket not available",

HTTPStatusCode: http.StatusNotFound,

},

ErrBucketRemoteIdenticalToSource: {

Code: "XMinioAdminRemoteIdenticalToSource",

Description: "The remote target cannot be identical to source",

HTTPStatusCode: http.StatusBadRequest,

},

ErrBucketRemoteAlreadyExists: {

Code: "XMinioAdminBucketRemoteAlreadyExists",

Description: "The remote target already exists",

HTTPStatusCode: http.StatusBadRequest,

},

ErrBucketRemoteLabelInUse: {

Code: "XMinioAdminBucketRemoteLabelInUse",

Description: "The remote target with this label already exists",

HTTPStatusCode: http.StatusBadRequest,

},

ErrBucketRemoteRemoveDisallowed: {

Code: "XMinioAdminRemoteRemoveDisallowed",

Description: "This ARN is in use by an existing configuration",

HTTPStatusCode: http.StatusBadRequest,

},

ErrBucketRemoteArnTypeInvalid: {

Code: "XMinioAdminRemoteARNTypeInvalid",

Description: "The bucket remote ARN type is not valid",

HTTPStatusCode: http.StatusBadRequest,

},

ErrBucketRemoteArnInvalid: {

Code: "XMinioAdminRemoteArnInvalid",

Description: "The bucket remote ARN does not have correct format",

HTTPStatusCode: http.StatusBadRequest,

},

ErrRemoteTargetNotVersionedError: {

Code: "RemoteTargetNotVersionedError",

Description: "The remote target does not have versioning enabled",

HTTPStatusCode: http.StatusBadRequest,

},

ErrReplicationSourceNotVersionedError: {

Code: "ReplicationSourceNotVersionedError",

Description: "The replication source does not have versioning enabled",

HTTPStatusCode: http.StatusBadRequest,

},

ErrReplicationNeedsVersioningError: {

Code: "InvalidRequest",

Description: "Versioning must be 'Enabled' on the bucket to apply a replication configuration",

HTTPStatusCode: http.StatusBadRequest,

},

ErrReplicationBucketNeedsVersioningError: {

Code: "InvalidRequest",

Description: "Versioning must be 'Enabled' on the bucket to add a replication target",

HTTPStatusCode: http.StatusBadRequest,

},

ErrBucketReplicationDisabledError: {

Code: "XMinioAdminBucketReplicationDisabled",

Description: "Replication specified but disk usage crawl is disabled on MinIO server",

HTTPStatusCode: http.StatusBadRequest,

},

ErrNoSuchObjectLockConfiguration: {

Code: "NoSuchObjectLockConfiguration",

Description: "The specified object does not have a ObjectLock configuration",

HTTPStatusCode: http.StatusBadRequest,

},

ErrObjectLocked: {

Code: "InvalidRequest",

Description: "Object is WORM protected and cannot be overwritten",

HTTPStatusCode: http.StatusBadRequest,

},

ErrInvalidRetentionDate: {

Code: "InvalidRequest",

Description: "Date must be provided in ISO 8601 format",

HTTPStatusCode: http.StatusBadRequest,

},

ErrPastObjectLockRetainDate: {

Code: "InvalidRequest",

Description: "the retain until date must be in the future",

HTTPStatusCode: http.StatusBadRequest,

},

ErrUnknownWORMModeDirective: {

Code: "InvalidRequest",

Description: "unknown wormMode directive",

HTTPStatusCode: http.StatusBadRequest,

},

ErrObjectLockInvalidHeaders: {

Code: "InvalidRequest",

Description: "x-amz-object-lock-retain-until-date and x-amz-object-lock-mode must both be supplied",

HTTPStatusCode: http.StatusBadRequest,

},

ErrObjectRestoreAlreadyInProgress: {

Code: "RestoreAlreadyInProgress",

Description: "Object restore is already in progress",

HTTPStatusCode: http.StatusConflict,

},

/// Bucket notification related errors.

ErrEventNotification: {

Code: "InvalidArgument",

Description: "A specified event is not supported for notifications.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrARNNotification: {

Code: "InvalidArgument",

Description: "A specified destination ARN does not exist or is not well-formed. Verify the destination ARN.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrRegionNotification: {

Code: "InvalidArgument",

Description: "A specified destination is in a different region than the bucket. You must use a destination that resides in the same region as the bucket.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrOverlappingFilterNotification: {

Code: "InvalidArgument",

Description: "An object key name filtering rule defined with overlapping prefixes, overlapping suffixes, or overlapping combinations of prefixes and suffixes for the same event types.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrFilterNameInvalid: {

Code: "InvalidArgument",

Description: "filter rule name must be either prefix or suffix",

HTTPStatusCode: http.StatusBadRequest,

},

ErrFilterNamePrefix: {

Code: "InvalidArgument",

Description: "Cannot specify more than one prefix rule in a filter.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrFilterNameSuffix: {

Code: "InvalidArgument",

Description: "Cannot specify more than one suffix rule in a filter.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrFilterValueInvalid: {

Code: "InvalidArgument",

Description: "Size of filter rule value cannot exceed 1024 bytes in UTF-8 representation",

HTTPStatusCode: http.StatusBadRequest,

},

ErrOverlappingConfigs: {

Code: "InvalidArgument",

Description: "Configurations overlap. Configurations on the same bucket cannot share a common event type.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrUnsupportedNotification: {

Code: "UnsupportedNotification",

Description: "MinIO server does not support Topic or Cloud Function based notifications.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrInvalidCopyPartRange: {

Code: "InvalidArgument",

Description: "The x-amz-copy-source-range value must be of the form bytes=first-last where first and last are the zero-based offsets of the first and last bytes to copy",

HTTPStatusCode: http.StatusBadRequest,

},

ErrInvalidCopyPartRangeSource: {

Code: "InvalidArgument",

Description: "Range specified is not valid for source object",

HTTPStatusCode: http.StatusBadRequest,

},

ErrMetadataTooLarge: {

Code: "MetadataTooLarge",

Description: "Your metadata headers exceed the maximum allowed metadata size.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrInvalidTagDirective: {

Code: "InvalidArgument",

Description: "Unknown tag directive.",

HTTPStatusCode: http.StatusBadRequest,

},

ErrInvalidEncryptionMethod: {

Code: "InvalidRequest",

Description: "The encryption method specified is not supported",

HTTPStatusCode: http.StatusBadRequest,

},