hevinhsu opened a new pull request, #9294:
URL: https://github.com/apache/ozone/pull/9294
## What changes were proposed in this pull request?
Add S3 request body SHA-256 verification to support single-chunk payload
validation.
Please describe your PR in detail:
* Compute the SHA-256 hash of the request body and verify it matches the
`x-amz-content-sha256` header.
* Validate `x-amz-content-sha256` for `GET` requests when the header is
present.
* Add unit tests, integration tests, and end-to-end tests.
* Introduce a new Python helper function to generate PUT presigned URLs,
since the AWS CLI only supports generating GET presigned URLs.
## What is the link to the Apache JIRA
[HDDS-13668](https://issues.apache.org/jira/browse/HDDS-13668)
## How was this patch tested?
https://github.com/hevinhsu/ozone/actions/runs/19321794081
This patch also tested using the MinIO Mint S3 compatibility suite, focusing
only on the test cases that previously failed in
[HDDS-12871](https://issues.apache.org/jira/browse/HDDS-12871).
After applying this patch:
* **aws-sdk-go**: Now passes after this update. The previous `unmarshalling
xml failed` message (introduced on 2025/Oct/03) no longer appears.
* **aws-sdk-ruby**: This test case still fails. See comment below for
detailed analysis.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
