aws-sigv4 icon indicating copy to clipboard operation
aws-sigv4 copied to clipboard

Published 20 hours ago • verified publisher icon anvilsecure

FR: Assumed roles by updating the X-Amz-Date header

Open irsdl opened this issue 1 year ago • 1 comments

At the moment, if we have a request with an old X-Amz-Date header, it will receive an expiry error from AWS when using the AssumeRole credential type.

Could you please update the X-Amz-Date header automatically when the AssumeRole role is used?

irsdl avatar Mar 11 '24 13:03 irsdl

I'm not able to reproduce this. The original X-Amz-Date header is always removed during signing, here:

https://github.com/anvilsecure/aws-sigv4/blob/afcd81f3ab47e5d71535d97a05af0a91fa339694/src/main/java/burp/BurpExtender.java#L1414-L1417

The AWS SDK then adds a new date header itself. Can you confirm in the Logger tab that the request actually has the original X-Amz-Date header?

UserExistsError avatar Mar 14 '24 17:03 UserExistsError