All Products
Search
Document Center

Object Storage Service:0002-00000426

Last Updated:Mar 27, 2025

Problem description

The value of the additional headers used for signature is left empty.

Causes

You initiated a request that uses an Amazon Simple Storage Service (S3)-compatible V4 signature, but the X-Amz-SignedHeaders header is left empty or the SignedHeaders header of the Authorization header is left empty.Amazon S3

Examples

The request that you initiated includes the signature in the URL, but the X-Amz-SignedHeaders header is left empty.

GET /test.txt?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=LTAI****************/20221220/us-east-1/s3/aws4_request&X-Amz-Date=20221220T084818Z&X-Amz-Expires=86400&X-Amz-SignedHeaders=&X-Amz-Signature=ab2**** HTTP/1.0
Date: Tue, 20 Dec 2022 08:48:18 GMT
Host: oss-example.oss-cn-hangzhou.aliyuncs.com
x-oss-s3-compat: true

The X-Amz-SignedHeaders header specifies the headers that you want to add to the signature. The X-Amz-SignedHeaders header contains a list of headers that are separated by semicolons (;). The list contains at least the host header.

Solutions

Specify a valid value for the X-Amz-SignedHeaders header or the SignedHeaders header of the Authorization header. Correct examples:

GET /test.txt?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=LTAI****************/20221220/us-east-1/s3/aws4_request&X-Amz-Date=20221220T084818Z&X-Amz-Expires=86400&X-Amz-SignedHeaders=host;range&X-Amz-Signature=ab2s**** HTTP/1.0
Date: Tue, 20 Dec 2022 08:48:18 GMT
Host: oss-example.oss-cn-hangzhou.aliyuncs.com
Range: bytes=100-900

We recommend that you use Amazon S3 SDKs to initiate the request. For more information, see Use Amazon S3 SDKs to access OSS.