object-store

Launcher for the Wavey object storage stack:

• object-api serves HTTP/2 and HTTP/3 object upload/read endpoints.
• hyper-idp provides the local identity/profile service used by object-api for presigned URL creation.
• store-stream writes stream chunks to S3-compatible storage and maintains the byte-offset index.

Configuration

Required storage settings:

S3_HOST=https://minio.wavey.io:9000
S3_ACCESS_KEY_ID=...
S3_SECRET_ACCESS_KEY=...

Required TLS settings can be provided directly as base64 PEM:

CERT_PEM_BASE64=...
KEY_PEM_BASE64=...

or via SSL_CERT_PATH, where the launcher looks for:

• fullchain.pem or cert.pem
• privkey.pem or key.pem
• optional auth0.pem or signing-cert.pem

Required OIDC settings:

OIDC_AUDIENCE=...
OIDC_CLIENT_ID=...
OIDC_CLIENT_SECRET=...
OIDC_REDIRECT_URI=https://idp.example.com/oauth2/callback
OBJECT_API_PRESIGNED_SECRET=at-least-32-bytes

Useful optional settings:

OBJECT_API_PORT=8004
IDP_PORT=8003
ISSUER_URL=https://idp.example.com
COOKIE_DOMAIN=.example.com
LOCAL_OIDC_GROUPS=artists,labels
INTERNAL_ALLOWED_EMAIL_DOMAINS=wavey.ai

Run

cargo run

The API accepts object paths as /{bucket}/{object}. Presigned upload URLs are bound to the exact {object} key through the signed file query parameter.