-
Notifications
You must be signed in to change notification settings - Fork 9
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Support signing sigv4 requests #23
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Nice work on this. It must have been a pain to reverse engineer these headers.
I deployed this branch to tokenizer.fly.io if that's helpful for testing your other changes. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
Allows signing Sigv4 requests (such as S3 requests).
Expects a "valid" sigv4 request in, but does not validate the access or secret keys (the only validation done is via tokenizer), it just extracts region, service, and the request timestamp from the "Authorization" header for its own signing.