Question

我一直在：

“＃SignatureDoesNotMatch”，“错误”：{“message”：“[不推荐使用：使用外部消息字段]我们计算的请求签名没有匹配您提供的签名。检查您的AWS秘密访问密钥和签署方式。有关详细信息，请参阅服务文档。

尝试向cloudsearch执行get请求。我验证我的Canonical String和String-to-Sign每次都匹配从错误消息发回的那些，但我一直收到错误。我假设我的签名本身没有正确处理。但很难确定下来。

  def getHash(key:Array[Byte]): String = {
    try
    {
      val md = MessageDigest.getInstance("SHA-256").digest(key)
      md.map("%02x".format(_)).mkString.toLowerCase()
    }
    catch
      {
        case e: Exception => ""
      }
  }

   def HmacSHA256(data:String, key:Array[Byte]): Array[Byte] =  {
    val algorithm="HmacSHA256";
    val mac = Mac.getInstance(algorithm);
    mac.init(new SecretKeySpec(key, algorithm));
    mac.doFinal(data.getBytes("UTF8"));
   }

...
val algorithm = "AWS4-HMAC-SHA256"
val credential_scope = date + "/us-west-1/cloudsearch/aws4_request"

val string_to_sign = algorithm + "\n" +  dateTime + "\n" +  credential_scope + "\n" +  getHash(canonical_request)


val kSecret = ("AWS4" + config.getString("cloud.secret")).getBytes("utf-8")
val kDate = HmacSHA256(date.toString, kSecret)
val kRegion = HmacSHA256("us-west-1",kDate)
val kService = HmacSHA256("cloudsearch",kRegion)
val kSigning = HmacSHA256("aws4_request",kService)
val signing_key = kSigning
val signature = getHash(HmacSHA256(string_to_sign, kSigning))

val authorization_header = algorithm + " " + "Credential=" + config.getString("cloud.key") + "/" + credential_scope + ", " +  "SignedHeaders=" + signed_headers + ", " + "Signature=" + signature

val complexHolder = holder.withHeaders(("x-amz-date",dateTime.toString))
.withHeaders(("Authorization",authorization_header))
.withRequestTimeout(5000)
.get()
val response = Await.result(complexHolder, 10 second)

Answer 1

我刚刚发布了一个帮助程序库来签署您对AWS的HTTP请求：https://github.com/ticofab/aws-request-signer。希望它有所帮助！

SignatureDoesNotMatch Aws CloudSearch scala

1 个答案: