mondain / jets3t

JetS3t (pronounced "jet-set") is a free, open-source Java toolkit and application suite for Amazon Simple Storage Service (Amazon S3), Amazon CloudFront content delivery network, and Google Storage for Developers.
Apache License 2.0
26 stars 13 forks source link

Encode * and @ in canonical request path for AWS V4 signature algorithm #17

Open trailrunner-taulia opened 8 months ago

trailrunner-taulia commented 8 months ago

Ran into errors with AWS signature version 4 enabled and traced it back to * and @ not being URI encoded when they appear in the object key. Based on the specification https://docs.aws.amazon.com/IAM/latest/UserGuide/create-signed-request.html * and @ should be encoded and doing so resolved the signature errors.