Skip to content

bugfix: sign content-type and x-amz-user-agent#3310

Merged
stobrien89 merged 1 commit into
aws:masterfrom
stobrien89:signed-headers-fix
Jun 19, 2026
Merged

bugfix: sign content-type and x-amz-user-agent#3310
stobrien89 merged 1 commit into
aws:masterfrom
stobrien89:signed-headers-fix

Conversation

@stobrien89

Copy link
Copy Markdown
Member

Description of changes:
Fixes #3283

Removes X-Amz-User-Agent from SignatureV4's header blacklist- its casing prevented it from being discovered when signing standard requests. Also removes content-type, which is fine to sign in most cases except for presigned get requests. Adds a new $presignHeaderDenyList that specifies both x-amz-user-agent and content-type (for backward-compatibility).

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

@stobrien89 stobrien89 merged commit 8993199 into aws:master Jun 19, 2026
17 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

SignatureV4 content-type in header blacklist causes cross-SDK signature mismatch

2 participants