Automattic / Automattic/knox

Option to use x-amz-date header instead of Date

Open
#299 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
1.7k
Forks
283
PR merge metrics
No merged PRs in 30d

Description

I have noticed that with browserify / jspm the `Date` header gets stripped causing AWS to reject the request saying the signature does not match. It seems that `stream-http` will strip the `Date` header because it is "unsafe"

https://www.w3.org/TR/XMLHttpRequest/#the-setrequestheader%28%29-method

To work around this the client should have an option to set the `x-amz-date` header instead of `Date`. Is this reasonable?

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by tracing how the client generates the Date header and includes it in AWS request signing, with the browserify/jspm and stream-http behavior in mind. Determine where an option for x-amz-date belongs; done means browser requests can use that header and AWS accepts the resulting signature, with coverage for both header modes.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, javascript
Domain
backend, cloud
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.