Object Storage Service:0002-00000405

Problem description

The SignedHeaders field in the Authorization header is missing.

Causes

You initiated a request that used the Amazon S3-compatible V4 signature. However, the SignedHeaders field in the Authorization header was missing.

Examples

The following code provides an example of a request that uses the S3-compatible V4 signature and does not include the SignedHeaders field in the Authorization header.

GET /test.txt HTTP/1.0
Date: Tue, 20 Dec 2022 08:48:18 GMT
Host: oss-example.oss-cn-hangzhou.aliyuncs.com
Authorization:AWS4-HMAC-SHA256 Credential=LTAI****************/20221220/us-east-1/s3/aws4_request,Signature=34****
x-amz-content-sha256: abc****
x-amz-date: 20221220T084818Z
x-oss-s3-compat: true

The SignedHeaders field specifies the header of the signature request.

Solutions

Make sure that the Authorization header is complete and correctly calculated.

GET /test.txt HTTP/1.0
Date: Tue, 20 Dec 2022 08:48:18 GMT
Host: oss-example.oss-cn-hangzhou.aliyuncs.com
Authorization:AWS4-HMAC-SHA256 Credential=LTAI****************/20221220/us-east-1/s3/aws4_request,SignedHeaders=host;x-amz-content-sha256;x-amz-date,Signature=34****
x-amz-content-sha256: abc****
x-amz-date: 20221220T084818Z
x-oss-s3-compat: true

We recommend that you use Amazon S3 SDKs to initiate the request. For more information, see Use Amazon S3 SDKs to access OSS.