Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix AWS SigV4 parsing #50973

Merged
merged 2 commits into from
Jan 14, 2025
Merged

Fix AWS SigV4 parsing #50973

merged 2 commits into from
Jan 14, 2025

Conversation

GavinFrazar
Copy link
Contributor

@GavinFrazar GavinFrazar commented Jan 11, 2025

Fixes #50866

Changelog: Fixed AWS SigV4 parse errors in app access when the application omits the optional spaces between the SigV4 components.

Parsing the AWS SigV4 Authorization header no longer requires spaces
between the components - only the comma delimiter is required.
@GavinFrazar GavinFrazar added aws Used for AWS Related Issues. application-access labels Jan 11, 2025
@GavinFrazar GavinFrazar marked this pull request as ready for review January 13, 2025 20:01
@github-actions github-actions bot requested review from creack and timothyb89 January 13, 2025 20:02
@GavinFrazar GavinFrazar requested review from greedy52 and removed request for creack and timothyb89 January 13, 2025 20:02
lib/utils/aws/aws_test.go Show resolved Hide resolved
@GavinFrazar GavinFrazar added this pull request to the merge queue Jan 14, 2025
Merged via the queue into master with commit cf29475 Jan 14, 2025
41 checks passed
@GavinFrazar GavinFrazar deleted the gavinfrazar/fix-sigv4-parsing branch January 14, 2025 19:41
@public-teleport-github-review-bot

@GavinFrazar See the table below for backport results.

Branch Result
branch/v15 Failed
branch/v16 Failed
branch/v17 Create PR

GavinFrazar added a commit that referenced this pull request Jan 14, 2025
* Fix AWS SigV4 parsing

Parsing the AWS SigV4 Authorization header no longer requires spaces
between the components - only the comma delimiter is required.

* add test case for empty signed header list
GavinFrazar added a commit that referenced this pull request Jan 14, 2025
* Fix AWS SigV4 parsing

Parsing the AWS SigV4 Authorization header no longer requires spaces
between the components - only the comma delimiter is required.

* add test case for empty signed header list
mvbrock pushed a commit that referenced this pull request Jan 18, 2025
* Fix AWS SigV4 parsing

Parsing the AWS SigV4 Authorization header no longer requires spaces
between the components - only the comma delimiter is required.

* add test case for empty signed header list
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

aws.go ParseSigV4 fails to parse the Authorization unless extra spaces are added
3 participants