colinmarc opened a new pull request, #772: URL: https://github.com/apache/opendal-reqsign/pull/772
When signing requests, we currently only check that the credential is *currently* valid, but on some backends (for example AWS), the signature lifetime is capped to the credential lifetime. In those situations, we need to refresh credentials instead of using the cached ones. This is still best-effort; if the minimum expiry of the credential is less than the desired expiry of the signature, there's nothing we can do. We could change the signature of `is_valid_at` to return a potential error if the requested expiry is impossible to fulfill, up to you. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
