ngx_aws_auth icon indicating copy to clipboard operation
ngx_aws_auth copied to clipboard

Non-subresource query params generate SignatureDoesNotMatch errors

Open cap10morgan opened this issue 8 years ago • 3 comments

We're using this to serve a small JS webapp from S3. Its Javascript code uses a few query parameters, but when we append those to our requests, it results in SignatureDoesNotMatch errors.

An example query param that it has failed on is foo.html?polling-location. A request to just foo.html succeeds.

This is with the latest master HEAD code of this module running in nginx 1.9.3.

Let me know if you need more info to reproduce or diagnose.

cap10morgan avatar Dec 10 '15 17:12 cap10morgan

We just discovered that query params with location (or website or presumably any other signed_subresource string) at the end of the query param name causes this to fail, but otherwise they work. So it seems like the signed_subresource code just needs to ensure that it only grabs query params where the whole string matches, not just a suffix.

cap10morgan avatar Dec 10 '15 17:12 cap10morgan

Please try the new code on master. This should take care of your issue

anomalizer avatar May 14 '16 16:05 anomalizer

I,ve the same problem. I will try to add chop prefix param

jpizarrom avatar Nov 06 '16 01:11 jpizarrom