From 5018b22f368731ca5791c73790c63e0e0a3579c7 Mon Sep 17 00:00:00 2001
From: Bl1tz23 <alex3angle@gmail.com>
Date: Tue, 9 Nov 2021 12:19:50 +0300
Subject: [PATCH] s3: fix potencial iam identities data race

---
 weed/s3api/auth_credentials.go | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/weed/s3api/auth_credentials.go b/weed/s3api/auth_credentials.go
index 78b82589e..8d05f2a03 100644
--- a/weed/s3api/auth_credentials.go
+++ b/weed/s3api/auth_credentials.go
@@ -5,6 +5,7 @@ import (
 	"net/http"
 	"os"
 	"strings"
+	"sync"
 
 	"github.com/chrislusf/seaweedfs/weed/filer"
 	"github.com/chrislusf/seaweedfs/weed/glog"
@@ -23,6 +24,8 @@ type Iam interface {
 }
 
 type IdentityAccessManagement struct {
+	m sync.Mutex
+
 	identities []*Identity
 	domain     string
 }
@@ -131,9 +134,12 @@ func (iam *IdentityAccessManagement) loadS3ApiConfiguration(config *iam_pb.S3Api
 		}
 		identities = append(identities, t)
 	}
-
+	iam.m.Lock()
+	
 	// atomically switch
 	iam.identities = identities
+
+	iam.m.Unlock()
 	return nil
 }