saltbo / zpan

A self-hosted cloud disk base on the cloud storage./ 一个基于云存储的网盘系统,用于自建私人网盘或企业网盘。
https://zpan.space
GNU General Public License v3.0
1.83k stars 236 forks source link

采用自定义设置(MINIO选项) S3兼容存储,参数中的区域名称选项在上传文件时没有生效 #127

Closed imfannet closed 3 years ago

imfannet commented 3 years ago

测试环境后端是Scaleway的S3兼容,在设置阶段按要求填写了区域名称fr-par,观察auth参数正常携带了区域

上传文件时,提升错误,浏览器控制台提示CORS MISSING ALLOW ORIGIN,但检查bucket不存在cors设置,检查提交的参数发现区域名称提交为auto而不是fr-par,返回状态码400,返回内容AuthorizationHeaderMalformed The authorization header is malformed; the region 'auto' is wrong; expecting 'fr-par' 提交头内容是这样的:

scheme
    https
host
    fans****.s3.fr-par.scw.cloud
filename
    /20210816/DvrunWsqNydYxAJ8.png
X-Amz-Algorithm
    AWS4-HMAC-SHA256
X-Amz-Credential
    SCWBABH82T8TPW6B****/20210815/auto/s3/aws4_request
X-Amz-Date
    20210815T172050Z
X-Amz-Expires
    3600
X-Amz-SignedHeaders
    content-type;host;x-amz-acl
X-Amz-Signature
    f68457ccfce6162008227d5f2470a2313214c4a9a99ef337e97a12e7a59e****
地址
    [2001:bc8:1002::30]:443
状态400
Bad Request
版本HTTP/1.1
传输505 字节(大小 279 字节)
Referrer 政策unsafe-url

浏览器修改autofr-par并重发,返回正常200状态码 正常的提交头:

scheme
    https
host
    fans****.s3.fr-par.scw.cloud
filename
    /20210816/xAPQ3ckwSSjht3gM.png
X-Amz-Algorithm
    AWS4-HMAC-SHA256
X-Amz-Credential
    SCWBABH82T8TPW6B****/20210815/fr-par/s3/aws4_request
X-Amz-Date
    20210815T172429Z
X-Amz-Expires
    3600
X-Amz-SignedHeaders
    content-type;host;x-amz-acl
X-Amz-Signature
    1f84a80088a66d498ade9a40184701f2fec19d072ce97a685e91e9aa0194****
地址
    [2001:bc8:1002::30]:443
状态200
OK
版本HTTP/1.1
传输342 字节(大小 0 字节)
Referrer 政策unsafe-url