Function PreSignV4Outposts

pkg/signer/request-signature-v4.go:261–290

PreSignV4Outposts presign the request for S3 on Outposts (service name s3-outposts).

(req http.Request, accessKeyID, secretAccessKey, sessionToken, location string, expires int64)

// PreSignV4Outposts presign the request for S3 on Outposts (service name s3-outposts).
func PreSignV4Outposts(req http.Request, accessKeyID, secretAccessKey, sessionToken, location string, expires int64) *http.Request {
	// Presign is not needed for anonymous credentials.
	if accessKeyID == "" || secretAccessKey == "" {
		return &req
	}

	t := time.Now().UTC()
	credential := GetCredential(accessKeyID, location, t, ServiceTypeS3Outposts)
	signedHeaders := getSignedHeaders(req, v4IgnoredHeaders)
	query := req.URL.Query()
	query.Set("X-Amz-Algorithm", signV4Algorithm)
	query.Set("X-Amz-Date", t.Format(iso8601DateFormat))
	query.Set("X-Amz-Expires", strconv.FormatInt(expires, 10))
	query.Set("X-Amz-SignedHeaders", signedHeaders)
	query.Set("X-Amz-Credential", credential)
	if sessionToken != "" {
		if v := req.Header.Get("x-amz-s3session-token"); v != "" {
			query.Set("X-Amz-S3session-Token", sessionToken)
		} else {
			query.Set("X-Amz-Security-Token", sessionToken)
		}
	}
	req.URL.RawQuery = query.Encode()
	canonicalRequest := getCanonicalRequest(req, v4IgnoredHeaders, getHashedPayload(req))
	stringToSign := getStringToSignV4(t, location, canonicalRequest, ServiceTypeS3Outposts)
	signingKey := getSigningKey(secretAccessKey, location, t, ServiceTypeS3Outposts)
	signature := getSignature(signingKey, stringToSign)
	req.URL.RawQuery += "&X-Amz-Signature=" + signature
	return &req
}

// PostPresignSignatureV4 - presigned signature for PostPolicy
// requests.