rich7420 opened a new pull request, #11588: URL: https://github.com/apache/ozone/pull/11588
## What changes were proposed in this pull request? `AWSV4AuthValidator` and `ChunksValidator` each maintain a thread-local `Mac` and implement HMAC-SHA256 signing. Share that primitive through `HmacSha256` in `ozone-common`, initializing the supplied key on every operation. Keep signing-key derivation and signature-chain state in their existing callers, and preserve signature parsing, comparison, and exception behavior. ## What is the link to the Apache JIRA https://issues.apache.org/jira/browse/HDDS-16662 ## How was this patch tested? - Local JDK 21 reactor build and 197 targeted tests passed, covering independent HMAC vectors, different keys, thread isolation, request/chunk interleaving, signed trailers, PUT, and multipart uploads. Checkstyle and RAT passed. - JDK 25 10×10 checks passed: [shared helper](https://github.com/rich7420/ozone/actions/runs/38119071478) and [S3 suites](https://github.com/rich7420/ozone/actions/runs/38119077555). - [Fork CI, attempt 3](https://github.com/rich7420/ozone/actions/runs/38119024900/attempts/3): failed in S3A acceptance. `ITestS3AContractGetFileStatusV1List.testComplexDirActions` reported `AuditFailureException: unaudited operation executing a request outside an audit span`. Coverage was skipped. Keeping this PR in draft while CI is resolved. Generated-by: Codex (GPT-6) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
