nic-chen commented on a change in pull request #5038:
URL: https://github.com/apache/apisix/pull/5038#discussion_r708669612



##########
File path: apisix/plugins/hmac-auth.lua
##########
@@ -327,6 +351,18 @@ local function validate(ctx, params)
         return nil, {message = "Invalid signature"}
     end
 
+    local validate_request_body = get_conf_field(params.access_key, 
"validate_request_body")
+    if validate_request_body then
+        local max_req_body = get_conf_field(params.access_key, "max_req_body")

Review comment:
       @arthur-zhang 
   
   OK. Thanks for your explanation. How about when `validate_request_body` is 
enabled, `X-APISIX-HMAC-BODY-DIGEST` is required? Just pass empty strings for 
it when no body.




-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to