14199: Require "X-Keep-Signature: local[, ...]" to invoke signing.

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tclegg@veritasgenetics.com>

diff --git a/services/keepstore/proxy_remote.go b/services/keepstore/proxy_remote.go
index 9f4a8ef1a1937c5b8103ded4e51f431222279f3f..4b5c1cc7ede9a1744c3c6ec9468e873ac22d6734 100644 (file)
--- a/services/keepstore/proxy_remote.go
+++ b/services/keepstore/proxy_remote.go
@@ -36,7 +36,7 @@ func (rp *remoteProxy) Get(ctx context.Context, w http.ResponseWriter, r *http.R
                http.Error(w, "no token provided in Authorization header", http.StatusUnauthorized)
                return
        }
-       if sign := r.Header.Get("X-Keep-Signature"); sign != "" {
+       if strings.SplitN(r.Header.Get("X-Keep-Signature"), ",", 2)[0] == "local" {
                buf, err := getBufferWithContext(ctx, bufs, BlockSize)
                if err != nil {
                        http.Error(w, err.Error(), http.StatusServiceUnavailable)