TrueCloudLab/frostfs-s3-gw
17
3
Fork 20
Code Issues 28 Pull requests 9 Projects Releases 33 Packages 1 Activity Actions

[#616] Use UNSIGNED_PAYLOAD to check sign #616

Merged
alexvanin merged 2 commits from dkirillov/frostfs-s3-gw:bugfix/fix_check_signature_with_unsigned_payload-support_v0.32 into support/v0.32 2025-01-29 12:00:14 +00:00
Conversation 0 Commits 2 Files changed 8 +148 -24

2 commits

Author SHA1 Message Date
Denis Kirillov
6c5d5713e0 Release v0.32.3
All checks were successful
/ DCO (pull_request) Successful in 38s
Details
/ Vulncheck (pull_request) Successful in 1m1s
Details
/ Builds (pull_request) Successful in 1m28s
Details
/ OCI image (pull_request) Successful in 2m2s
Details
/ Lint (pull_request) Successful in 2m25s
Details
/ Tests (pull_request) Successful in 1m12s
Details
/ OCI image (push) Successful in 2m5s
Details 
Signed-off-by: Denis Kirillov <d.kirillov@yadro.com>
 2025-01-29 12:42:42 +03:00
Denis Kirillov
14894aa360 [#616] Use UNSIGNED_PAYLOAD to check sign 
Use `UNSIGNED_PAYLOAD` to check signature if x-amz-content-sha256 isn't provided as signed header

https://docs.aws.amazon.com/AmazonS3/latest/API/sig-v4-header-based-auth.html

" You include the literal string UNSIGNED-PAYLOAD when constructing a canonical request, and set the same value as the x-amz-content-sha256 header value when sending the request to Amazon S3"

Signed-off-by: Denis Kirillov <d.kirillov@yadro.com>
 2025-01-29 12:42:36 +03:00