目 录CONTENT

文章目录

nginx 代理 minio 接口返回 AccessDenied 问题解决

hideonheart
2024-08-18 / 0 评论 / 2 点赞 / 193 阅读 / 0 字

在1panel 上使用 OpenResty 代理 minio api 接口,请求发现返回 AccessDenied,一下是 picgo 插件的 log

2024-08-18 15:22:02 [PicGo WARN] {
  "name": "S3Error",
  "code": "AccessDenied",
  "amzRequestid": "17ECC1B0EEA0A1C5",
  "amzId2": "dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8"
}

翻了下github 看了个 issure

https://github.com/1Panel-dev/1Panel/issues/3924#issuecomment-2259104374

说是 OpenResty默认配置了反代缓存,而反代缓存会将HEAD请求转换为GET请求进行缓存,导致HEAD请求403从而引发问题点

nginx 日志如下

192.168.0.8 - - [18/Aug/2024:15:29:42 +0800] "GET /halo?location HTTP/1.1" 200 128 "-" "MinIO (darwin; arm64) minio-js/7.1.3" "-"
192.168.0.8 - - [18/Aug/2024:15:29:42 +0800] "HEAD /halo HTTP/1.1" 403 0 "-" "MinIO (darwin; arm64) minio-js/7.1.3" "-"
192.168.0.8 - - [18/Aug/2024:15:29:49 +0800] "GET /halo?location HTTP/1.1" 200 128 "-" "MinIO (darwin; arm64) minio-js/7.1.3" "-"
192.168.0.8 - - [18/Aug/2024:15:29:49 +0800] "HEAD /halo HTTP/1.1" 403 0 "-" "MinIO (darwin; arm64) minio-js/7.1.3" "-"

把这玩意加上一切OK

proxy_cache_convert_head off;

2

评论区