Skip to content

Fix AWS SigV4 parsing#50973

Merged
GavinFrazar merged 2 commits intomasterfrom
gavinfrazar/fix-sigv4-parsing
Jan 14, 2025
Merged

Fix AWS SigV4 parsing#50973
GavinFrazar merged 2 commits intomasterfrom
gavinfrazar/fix-sigv4-parsing

Conversation

@GavinFrazar
Copy link
Copy Markdown
Contributor

@GavinFrazar GavinFrazar commented Jan 11, 2025

Fixes #50866

Changelog: Fixed AWS SigV4 parse errors in app access when the application omits the optional spaces between the SigV4 components.

Parsing the AWS SigV4 Authorization header no longer requires spaces
between the components - only the comma delimiter is required.
@GavinFrazar GavinFrazar added aws Used for AWS Related Issues. application-access labels Jan 11, 2025
@GavinFrazar GavinFrazar marked this pull request as ready for review January 13, 2025 20:01
@github-actions github-actions Bot requested review from creack and timothyb89 January 13, 2025 20:02
@GavinFrazar GavinFrazar requested review from greedy52 and removed request for creack and timothyb89 January 13, 2025 20:02
Comment thread lib/utils/aws/aws_test.go
Comment thread lib/utils/aws/aws.go
Comment thread lib/utils/aws/aws_test.go
@GavinFrazar GavinFrazar added this pull request to the merge queue Jan 14, 2025
Merged via the queue into master with commit cf29475 Jan 14, 2025
@GavinFrazar GavinFrazar deleted the gavinfrazar/fix-sigv4-parsing branch January 14, 2025 19:41
@public-teleport-github-review-bot
Copy link
Copy Markdown

@GavinFrazar See the table below for backport results.

Branch Result
branch/v15 Failed
branch/v16 Failed
branch/v17 Create PR

GavinFrazar added a commit that referenced this pull request Jan 14, 2025
* Fix AWS SigV4 parsing

Parsing the AWS SigV4 Authorization header no longer requires spaces
between the components - only the comma delimiter is required.

* add test case for empty signed header list
GavinFrazar added a commit that referenced this pull request Jan 14, 2025
* Fix AWS SigV4 parsing

Parsing the AWS SigV4 Authorization header no longer requires spaces
between the components - only the comma delimiter is required.

* add test case for empty signed header list
mvbrock pushed a commit that referenced this pull request Jan 18, 2025
* Fix AWS SigV4 parsing

Parsing the AWS SigV4 Authorization header no longer requires spaces
between the components - only the comma delimiter is required.

* add test case for empty signed header list
carloscastrojumo pushed a commit to carloscastrojumo/teleport that referenced this pull request Feb 19, 2025
* Fix AWS SigV4 parsing

Parsing the AWS SigV4 Authorization header no longer requires spaces
between the components - only the comma delimiter is required.

* add test case for empty signed header list
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

aws.go ParseSigV4 fails to parse the Authorization unless extra spaces are added

3 participants