Neo SPCC adds Authbox credential service in NeoFS S3 Gateway v0.46.0

Neo SPCC released NeoFS S3 Gateway v0.46.0 on Sept. 2, introducing an Authbox service that issues S3 credentials over HTTP alongside routing optimizations, operational improvements, and dependency updates for the S3-compatible interface to NeoFS decentralized storage.

The release follows v0.45.1, which delivered read and write performance improvements in early August, and v0.45.0, which added bucket namespacing and removed legacy features in July.

Authbox credential service

The headline addition is Authbox, a new service that provisions S3 credentials over HTTP. Previously, generating credentials for the S3 Gateway required using the neofs-s3-authmate command-line tool directly. Authbox wraps this functionality in an HTTP-accessible service, making it easier for applications and platform operators to programmatically provision access to NeoFS storage through the S3-compatible protocol without direct CLI interaction.

The feature ships as a new neofs-s3-authmatesrv binary alongside the existing gateway and authmate tools, with prebuilt binaries available for Linux, macOS, and Windows across both AMD64 and ARM64 architectures.

Routing, logging, access key changes

Request routing was optimized to match decoded URL paths rather than raw encoded strings, addressing unnecessary memory allocations that were observed under heavy read load. The change improves both correctness in path handling and resource consumption during high-throughput operations, particularly for object retrieval workflows.

Access key objects are now capped at 64 KB when reading, introducing a safeguard against oversized or malformed key data that could otherwise consume excessive resources. The release also reduces verbose logging output generated by batched operations, cutting log noise for operators running the gateway at scale and making it easier to identify meaningful entries in production environments.

Dependency updates

The gateway now requires Go 1.26 or later as its minimum toolchain version, up from the previous requirement. Core ecosystem dependencies were updated to align with the latest NeoFS infrastructure releases, with the NeoFS SDK moving to RC22 and the NeoGo blockchain toolkit updated to v0.123.0.

Several upstream Go libraries were also refreshed as part of the toolchain update, including the AWS SDK for Go v2, gRPC, Protocol Buffers, and the Zap structured logging framework.

The full release notes can be found at the link below:
https://github.com/nspcc-dev/neofs-s3-gw/releases/tag/v0.46.0