ddupg opened a new pull request, #779: URL: https://github.com/apache/opendal-reqsign/pull/779
## Which issue does this PR close? Part of #752. ## What changes are included in this PR? - Add query-based TOS4-HMAC-SHA256 signing when an expiration duration is provided. - Put presign parameters and temporary credential security tokens into the query string. - Sign host and TOS headers, normalize signed header values, and honor an explicit x-tos-content-sha256 value. - Add deterministic coverage for signatures, session tokens, signed headers, payload hashes, and expiration serialization. - Add a credential-gated integration test that exercises presigned PUT, GET, and DELETE against Volcengine TOS. ## Verification - cargo fmt --all -- --check - cargo clippy --workspace --all-targets --all-features -- -D warnings - cargo test --no-fail-fast - cargo test --doc --all-features --workspace - Real Volcengine TOS presigned PUT/GET/DELETE integration test - OpenDAL TOS behavior suite using this local reqsign implementation: 54 passed, including presigned read, write, and stat The real service test used static access keys. The temporary credential query path is covered deterministically, but was not exercised against the service because temporary credentials were not available. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
