Add x-amz-content-sha256 to CanonicalHeaders

nginxinc · Oct 9, 2023 · 65421b4 · 65421b4
1 parent 2134898
commit 65421b4
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/common/etc/nginx/include/awssig4.js b/common/etc/nginx/include/awssig4.js
@@ -28,7 +28,7 @@ const mod_hmac = require('crypto');
  * Constant defining the headers being signed.
  * @type {string}
  */
-const DEFAULT_SIGNED_HEADERS = 'host;x-amz-date';
+const DEFAULT_SIGNED_HEADERS = 'host;x-amz-content-sha256;x-amz-date';
 
 /**
  * Create HTTP Authorization header for authenticating with an AWS compatible
@@ -76,6 +76,7 @@ function _buildCanonicalRequest(r,
     method, uri, queryParams, host, amzDatetime, sessionToken) {
     const payloadHash = awsHeaderPayloadHash(r);
     let canonicalHeaders = 'host:' + host + '\n' +
+                           'x-amz-content-sha256:' + payloadHash + '\n' +
                            'x-amz-date:' + amzDatetime + '\n';
 
     if (sessionToken && sessionToken.length > 0) {