WebClient AWS request signing

Sample code showing how to sign HTTP requests coming to AWS in WebClient.

This code is based on https://github.com/rewolf/blog-hmac-auth-webclient and uses Aws4Signer to sign requests.

High-level diagram showing how signing HTTP requests with body works:

Caveats

This sample works only for JSON requests. If you need to sign requests with XML/protobuf content, you will need to provide a different implementation of HttpMessageEncoder and add it through CodecConfigurer.

How to run

Run the application with and call /example endpoint with a GET request. It will sign the POST request with ExampleRequest body and send it to https://example.com.

How to adjust for your project

1. In production, you need to switch awsCredentialsProvider from AnonymousCredentialsProvider to DefaultCredentialsProvider and provide the credentials in the environment. When AnonymousCredentialsProvider is used, Aws4Signer won't addd any headers to the request.

2. In this sample, you can run prod profile to enable DefaultCredentialsProvider.

3. Set AWS Region.

4. Set AWS service name.

5. Set base URL.

6. Prepare your own request body.