From 48b7ad5fa84be4b57ab09a1309245a21f4efaed2 Mon Sep 17 00:00:00 2001
From: Chris Lu <chris.lu@gmail.com>
Date: Sat, 22 Feb 2020 14:01:04 -0800
Subject: [PATCH] s3: deny anonymous type

---
 weed/s3api/auth_credentials.go | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/weed/s3api/auth_credentials.go b/weed/s3api/auth_credentials.go
index b7a8dbf95..6d3363232 100644
--- a/weed/s3api/auth_credentials.go
+++ b/weed/s3api/auth_credentials.go
@@ -134,10 +134,14 @@ func (iam *IdentityAccessManagement) authRequest(r *http.Request, actions []Acti
 		glog.V(3).Infof("v4 auth type")
 		identity, s3Err = iam.reqSignatureV4Verify(r)
 	case authTypePostPolicy:
-		return ErrNotImplemented;
+		glog.V(3).Infof("post policy auth type")
+		return ErrNotImplemented
 	case authTypeJWT:
-		return ErrNotImplemented;
+		glog.V(3).Infof("jwt auth type")
+		return ErrNotImplemented
 	case authTypeAnonymous:
+		return ErrAccessDenied
+	default:
 		return ErrNotImplemented
 	}