From 782d382ca7ba228d97bc5d9486bdd598ef5319b6 Mon Sep 17 00:00:00 2001 From: hzrd149 Date: Mon, 17 Mar 2025 21:41:34 +0000 Subject: [PATCH] Clarify authorization requirements in BUD-04: change `MUST` to `MAY` for the `Authorization` header and specify auth type --- buds/04.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/buds/04.md b/buds/04.md index eb1d19f..474fce8 100644 --- a/buds/04.md +++ b/buds/04.md @@ -19,11 +19,11 @@ Clients MUST pass the URL of the remote blob as a stringified JSON object in the } ``` -Clients MUST set the `Authorization` header to an upload authorization event defined in [BUD-02](./02.md#upload-authorization-required) +Clients MAY set the `Authorization` header to an upload authorization event defined in [BUD-02](./02.md#upload-authorization-required). When using authorization, the event MUST be of type "upload". The `/mirror` endpoint MUST download the blob from the specified URL and verify that there is at least one `x` tag in the authorization event matching the sha256 hash of the download blob -**Multiple `x` tags MUST NOT be interpreted as the user requesting a bulk mirror.** +**Multiple `x` tags in the authorization event MUST NOT be interpreted as the user requesting a bulk mirror.** The endpoint MUST return a [Blob Descriptor](#blob-descriptor) if the mirroring was successful or an error object if it was not