photoncloud-monorepo/docs/por
centra 5c1cd9f9fc test(lightningstor): Add comprehensive S3 auth security tests
Added 9 security tests to verify SigV4 authentication hardening:
- Invalid/malformed auth header rejection
- Signature changes with different secret keys
- Signature changes with different request components (body, URI, headers, query params)
- Credential lookup for unknown keys
- Empty credentials fallback
- Malformed S3_CREDENTIALS handling

Result: 19/19 auth tests passing (10 original + 9 new security tests)

Task: T058.S3 Complete
🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2025-12-12 06:48:15 +09:00
..
T001-stabilize-tests Add T026 practical test + k8shost to flake + workspace files 2025-12-09 06:07:50 +09:00
T002-specifications Add T026 practical test + k8shost to flake + workspace files 2025-12-09 06:07:50 +09:00
T003-feature-gaps Add T026 practical test + k8shost to flake + workspace files 2025-12-09 06:07:50 +09:00
T004-p0-fixes Add T026 practical test + k8shost to flake + workspace files 2025-12-09 06:07:50 +09:00
T005-plasmavmc-spec Add T026 practical test + k8shost to flake + workspace files 2025-12-09 06:07:50 +09:00
T006-p1-features Add T026 practical test + k8shost to flake + workspace files 2025-12-09 06:07:50 +09:00
T007-plasmavmc-impl Add T026 practical test + k8shost to flake + workspace files 2025-12-09 06:07:50 +09:00
T008-lightningstor Add T026 practical test + k8shost to flake + workspace files 2025-12-09 06:07:50 +09:00
T009-flashdns Add T026 practical test + k8shost to flake + workspace files 2025-12-09 06:07:50 +09:00
T010-fiberlb Add T026 practical test + k8shost to flake + workspace files 2025-12-09 06:07:50 +09:00
T011-plasmavmc-deepening Add T026 practical test + k8shost to flake + workspace files 2025-12-09 06:07:50 +09:00
T012-vm-tenancy-persistence Add T026 practical test + k8shost to flake + workspace files 2025-12-09 06:07:50 +09:00
T013-vm-chainfire-persistence Add T026 practical test + k8shost to flake + workspace files 2025-12-09 06:07:50 +09:00
T014-plasmavmc-firecracker Add T026 practical test + k8shost to flake + workspace files 2025-12-09 06:07:50 +09:00
T015-overlay-networking Add T026 practical test + k8shost to flake + workspace files 2025-12-09 06:07:50 +09:00
T016-lightningstor-deepening Add T026 practical test + k8shost to flake + workspace files 2025-12-09 06:07:50 +09:00
T017-flashdns-deepening Add T026 practical test + k8shost to flake + workspace files 2025-12-09 06:07:50 +09:00
T018-fiberlb-deepening Add T026 practical test + k8shost to flake + workspace files 2025-12-09 06:07:50 +09:00
T019-overlay-network-implementation Add T026 practical test + k8shost to flake + workspace files 2025-12-09 06:07:50 +09:00
T020-flaredb-metadata fix(lightningstor): Fix SigV4 canonicalization for AWS S3 auth 2025-12-12 06:23:46 +09:00
T021-flashdns-parity Add T026 practical test + k8shost to flake + workspace files 2025-12-09 06:07:50 +09:00
T022-novanet-control-plane Add T026 practical test + k8shost to flake + workspace files 2025-12-09 06:07:50 +09:00
T023-e2e-tenant-path fix(lightningstor): Fix SigV4 canonicalization for AWS S3 auth 2025-12-12 06:23:46 +09:00
T024-nixos-packaging Add T026 practical test + k8shost to flake + workspace files 2025-12-09 06:07:50 +09:00
T025-k8s-hosting fix(lightningstor): Fix SigV4 canonicalization for AWS S3 auth 2025-12-12 06:23:46 +09:00
T026-practical-test T036: Add VM cluster deployment configs for nixos-anywhere 2025-12-11 09:59:19 +09:00
T027-production-hardening T036: Add VM cluster deployment configs for nixos-anywhere 2025-12-11 09:59:19 +09:00
T028-feature-completion T036: Add VM cluster deployment configs for nixos-anywhere 2025-12-11 09:59:19 +09:00
T029-comprehensive-integration-tests T036: Add VM cluster deployment configs for nixos-anywhere 2025-12-11 09:59:19 +09:00
T029-practical-app-demo fix(lightningstor): Fix SigV4 canonicalization for AWS S3 auth 2025-12-12 06:23:46 +09:00
T030-multinode-raft-join-fix T036: Add VM cluster deployment configs for nixos-anywhere 2025-12-11 09:59:19 +09:00
T031-security-hardening-phase2 T036: Add VM cluster deployment configs for nixos-anywhere 2025-12-11 09:59:19 +09:00
T032-baremetal-provisioning fix(lightningstor): Fix SigV4 canonicalization for AWS S3 auth 2025-12-12 06:23:46 +09:00
T033-metricstor fix(lightningstor): Fix SigV4 canonicalization for AWS S3 auth 2025-12-12 06:23:46 +09:00
T034-test-drift-fix T036: Add VM cluster deployment configs for nixos-anywhere 2025-12-11 09:59:19 +09:00
T035-vm-integration-test fix(lightningstor): Fix SigV4 canonicalization for AWS S3 auth 2025-12-12 06:23:46 +09:00
T036-vm-cluster-deployment fix(lightningstor): Fix SigV4 canonicalization for AWS S3 auth 2025-12-12 06:23:46 +09:00
T037-flaredb-sql-layer T036: Add VM cluster deployment configs for nixos-anywhere 2025-12-11 09:59:19 +09:00
T038-code-drift-cleanup fix(lightningstor): Fix SigV4 canonicalization for AWS S3 auth 2025-12-12 06:23:46 +09:00
T039-production-deployment fix(lightningstor): Fix SigV4 canonicalization for AWS S3 auth 2025-12-12 06:23:46 +09:00
T040-ha-validation fix(lightningstor): Fix SigV4 canonicalization for AWS S3 auth 2025-12-12 06:23:46 +09:00
T041-chainfire-cluster-join-fix fix(lightningstor): Fix SigV4 canonicalization for AWS S3 auth 2025-12-12 06:23:46 +09:00
T042-creditservice fix(lightningstor): Fix SigV4 canonicalization for AWS S3 auth 2025-12-12 06:23:46 +09:00
T043-naming-cleanup fix(lightningstor): Fix SigV4 canonicalization for AWS S3 auth 2025-12-12 06:23:46 +09:00
T044-por-accuracy-fix fix(lightningstor): Fix SigV4 canonicalization for AWS S3 auth 2025-12-12 06:23:46 +09:00
T045-service-integration fix(lightningstor): Fix SigV4 canonicalization for AWS S3 auth 2025-12-12 06:23:46 +09:00
T046-multi-raft-design fix(lightningstor): Fix SigV4 canonicalization for AWS S3 auth 2025-12-12 06:23:46 +09:00
T047-lightningstor-s3 fix(lightningstor): Fix SigV4 canonicalization for AWS S3 auth 2025-12-12 06:23:46 +09:00
T048-sdk-improvements fix(lightningstor): Fix SigV4 canonicalization for AWS S3 auth 2025-12-12 06:23:46 +09:00
T049-component-audit fix(lightningstor): Fix SigV4 canonicalization for AWS S3 auth 2025-12-12 06:23:46 +09:00
T050-rest-api fix(lightningstor): Fix SigV4 canonicalization for AWS S3 auth 2025-12-12 06:23:46 +09:00
T051-fiberlb-integration fix(lightningstor): Fix SigV4 canonicalization for AWS S3 auth 2025-12-12 06:23:46 +09:00
T052-creditservice-persistence fix(lightningstor): Fix SigV4 canonicalization for AWS S3 auth 2025-12-12 06:23:46 +09:00
T053-chainfire-core-finalization fix(lightningstor): Fix SigV4 canonicalization for AWS S3 auth 2025-12-12 06:23:46 +09:00
T054-plasmavmc-ops fix(lightningstor): Fix SigV4 canonicalization for AWS S3 auth 2025-12-12 06:23:46 +09:00
T055-fiberlb-features fix(lightningstor): Fix SigV4 canonicalization for AWS S3 auth 2025-12-12 06:23:46 +09:00
T056-flashdns-pagination fix(lightningstor): Fix SigV4 canonicalization for AWS S3 auth 2025-12-12 06:23:46 +09:00
T057-k8shost-resource-management fix(lightningstor): Fix SigV4 canonicalization for AWS S3 auth 2025-12-12 06:23:46 +09:00
T058-s3-auth-hardening feat(lightningstor): Add multi-credential S3 auth support 2025-12-12 06:41:09 +09:00
T059-audit-fix feat(lightningstor): Add multi-credential S3 auth support 2025-12-12 06:41:09 +09:00
T060-iam-credentials feat(lightningstor): Add multi-credential S3 auth support 2025-12-12 06:41:09 +09:00
POR.md test(lightningstor): Add comprehensive S3 auth security tests 2025-12-12 06:48:15 +09:00
scope.yaml feat(lightningstor): Add multi-credential S3 auth support 2025-12-12 06:41:09 +09:00