apache / apache/opendal-reqsign

AWS: should not append header x-amz-content-sha256 UNSIGNED-PAYLOAD by default

Open
#346 0 comments 2 reactions 0 assignees View on GitHub
Dominant language
Rust
Stars
169
Forks
75
Avg merge
1d 21h
Merged PRs (30d)
16

Description

Only s3 related service support this header, other service would result in `SignatureDoesNotMatch` error.

ref: https://github.com/aws/aws-sdk-go/blob/v1.44.294/aws/signer/v4/v4.go#L692

Contributor guide

Open the contributing guide

Research direction

Start by locating the AWS signing implementation in this repository and compare its behavior with the referenced aws/signer/v4/v4.go#L692 code. Verify which services receive x-amz-content-sha256 and confirm that non-S3 requests no longer receive UNSIGNED-PAYLOAD by default, while S3 behavior remains supported.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, rust
Domain
authentication, security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Clearly specified
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.