JustAnotherArchivist
/
transfer.sh
forked from kiska/transfer.sh
1
0
Fork 1
Code Issues 0 Pull Requests 0 Releases 0 Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
243 Commits
17 Branches
34 MiB
 
 
 
Tree: 84643d1dc1
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from '84643d1dc1'
${ noResults }
transfer.sh/vendor/github.com/goamz/goamz/aws/sign_test.go

541 lines
29 KiB
Raw Blame History 

  1. package aws_test

  2. 

  3. import (

  4. 	"fmt"

  5. 	"net/http"

  6. 	"strings"

  7. 	"time"

  8. 

  9. 	"github.com/goamz/goamz/aws"

  10. 	. "gopkg.in/check.v1"

  11. )

  12. 

  13. var _ = Suite(&V4SignerSuite{})

  14. 

  15. type V4SignerSuite struct {

  16. 	auth   aws.Auth

  17. 	region aws.Region

  18. 	cases  []V4SignerSuiteCase

  19. }

  20. 

  21. type V4SignerSuiteCase struct {

  22. 	label            string

  23. 	request          V4SignerSuiteCaseRequest

  24. 	canonicalRequest string

  25. 	stringToSign     string

  26. 	signature        string

  27. 	authorization    string

  28. }

  29. 

  30. type V4SignerSuiteCaseRequest struct {

  31. 	method  string

  32. 	host    string

  33. 	url     string

  34. 	headers []string

  35. 	body    string

  36. }

  37. 

  38. func (s *V4SignerSuite) SetUpSuite(c *C) {

  39. 	s.auth = aws.Auth{AccessKey: "AKIDEXAMPLE", SecretKey: "wJalrXUtnFEMI/K7MDENG+bPxRfiCYEXAMPLEKEY"}

  40. 	s.region = aws.USEast

  41. 

  42. 	// Test cases from the Signature Version 4 Test Suite (http://goo.gl/nguvs0)

  43. 	s.cases = append(s.cases,

  44. 

  45. 		// get-header-key-duplicate

  46. 		V4SignerSuiteCase{

  47. 			label: "get-header-key-duplicate",

  48. 			request: V4SignerSuiteCaseRequest{

  49. 				method:  "POST",

  50. 				host:    "host.foo.com",

  51. 				url:     "/",

  52. 				headers: []string{"DATE:Mon, 09 Sep 2011 23:36:00 GMT", "ZOO:zoobar", "zoo:foobar", "zoo:zoobar"},

  53. 			},

  54. 			canonicalRequest: "POST\n/\n\ndate:Mon, 09 Sep 2011 23:36:00 GMT\nhost:host.foo.com\nzoo:foobar,zoobar,zoobar\n\ndate;host;zoo\ne3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",

  55. 			stringToSign:     "AWS4-HMAC-SHA256\n20110909T233600Z\n20110909/us-east-1/host/aws4_request\n3c52f0eaae2b61329c0a332e3fa15842a37bc5812cf4d80eb64784308850e313",

  56. 			signature:        "54afcaaf45b331f81cd2edb974f7b824ff4dd594cbbaa945ed636b48477368ed",

  57. 			authorization:    "AWS4-HMAC-SHA256 Credential=AKIDEXAMPLE/20110909/us-east-1/host/aws4_request, SignedHeaders=date;host;zoo, Signature=54afcaaf45b331f81cd2edb974f7b824ff4dd594cbbaa945ed636b48477368ed",

  58. 		},

  59. 

  60. 		// get-header-value-order

  61. 		V4SignerSuiteCase{

  62. 			label: "get-header-value-order",

  63. 			request: V4SignerSuiteCaseRequest{

  64. 				method:  "POST",

  65. 				host:    "host.foo.com",

  66. 				url:     "/",

  67. 				headers: []string{"DATE:Mon, 09 Sep 2011 23:36:00 GMT", "p:z", "p:a", "p:p", "p:a"},

  68. 			},

  69. 			canonicalRequest: "POST\n/\n\ndate:Mon, 09 Sep 2011 23:36:00 GMT\nhost:host.foo.com\np:a,a,p,z\n\ndate;host;p\ne3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",

  70. 			stringToSign:     "AWS4-HMAC-SHA256\n20110909T233600Z\n20110909/us-east-1/host/aws4_request\n94c0389fefe0988cbbedc8606f0ca0b485b48da010d09fc844b45b697c8924fe",

  71. 			signature:        "d2973954263943b11624a11d1c963ca81fb274169c7868b2858c04f083199e3d",

  72. 			authorization:    "AWS4-HMAC-SHA256 Credential=AKIDEXAMPLE/20110909/us-east-1/host/aws4_request, SignedHeaders=date;host;p, Signature=d2973954263943b11624a11d1c963ca81fb274169c7868b2858c04f083199e3d",

  73. 		},

  74. 

  75. 		// get-header-value-trim

  76. 		V4SignerSuiteCase{

  77. 			label: "get-header-value-trim",

  78. 			request: V4SignerSuiteCaseRequest{

  79. 				method:  "POST",

  80. 				host:    "host.foo.com",

  81. 				url:     "/",

  82. 				headers: []string{"DATE:Mon, 09 Sep 2011 23:36:00 GMT", "p: phfft "},

  83. 			},

  84. 			canonicalRequest: "POST\n/\n\ndate:Mon, 09 Sep 2011 23:36:00 GMT\nhost:host.foo.com\np:phfft\n\ndate;host;p\ne3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",

  85. 			stringToSign:     "AWS4-HMAC-SHA256\n20110909T233600Z\n20110909/us-east-1/host/aws4_request\ndddd1902add08da1ac94782b05f9278c08dc7468db178a84f8950d93b30b1f35",

  86. 			signature:        "debf546796015d6f6ded8626f5ce98597c33b47b9164cf6b17b4642036fcb592",

  87. 			authorization:    "AWS4-HMAC-SHA256 Credential=AKIDEXAMPLE/20110909/us-east-1/host/aws4_request, SignedHeaders=date;host;p, Signature=debf546796015d6f6ded8626f5ce98597c33b47b9164cf6b17b4642036fcb592",

  88. 		},

  89. 

  90. 		// get-relative-relative

  91. 		V4SignerSuiteCase{

  92. 			label: "get-relative-relative",

  93. 			request: V4SignerSuiteCaseRequest{

  94. 				method:  "GET",

  95. 				host:    "host.foo.com",

  96. 				url:     "/foo/bar/../..",

  97. 				headers: []string{"Date:Mon, 09 Sep 2011 23:36:00 GMT"},

  98. 			},

  99. 			canonicalRequest: "GET\n/\n\ndate:Mon, 09 Sep 2011 23:36:00 GMT\nhost:host.foo.com\n\ndate;host\ne3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",

  100. 			stringToSign:     "AWS4-HMAC-SHA256\n20110909T233600Z\n20110909/us-east-1/host/aws4_request\n366b91fb121d72a00f46bbe8d395f53a102b06dfb7e79636515208ed3fa606b1",

  101. 			signature:        "b27ccfbfa7df52a200ff74193ca6e32d4b48b8856fab7ebf1c595d0670a7e470",

  102. 			authorization:    "AWS4-HMAC-SHA256 Credential=AKIDEXAMPLE/20110909/us-east-1/host/aws4_request, SignedHeaders=date;host, Signature=b27ccfbfa7df52a200ff74193ca6e32d4b48b8856fab7ebf1c595d0670a7e470",

  103. 		},

  104. 

  105. 		// get-relative

  106. 		V4SignerSuiteCase{

  107. 			label: "get-relative",

  108. 			request: V4SignerSuiteCaseRequest{

  109. 				method:  "GET",

  110. 				host:    "host.foo.com",

  111. 				url:     "/foo/..",

  112. 				headers: []string{"Date:Mon, 09 Sep 2011 23:36:00 GMT"},

  113. 			},

  114. 			canonicalRequest: "GET\n/\n\ndate:Mon, 09 Sep 2011 23:36:00 GMT\nhost:host.foo.com\n\ndate;host\ne3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",

  115. 			stringToSign:     "AWS4-HMAC-SHA256\n20110909T233600Z\n20110909/us-east-1/host/aws4_request\n366b91fb121d72a00f46bbe8d395f53a102b06dfb7e79636515208ed3fa606b1",

  116. 			signature:        "b27ccfbfa7df52a200ff74193ca6e32d4b48b8856fab7ebf1c595d0670a7e470",

  117. 			authorization:    "AWS4-HMAC-SHA256 Credential=AKIDEXAMPLE/20110909/us-east-1/host/aws4_request, SignedHeaders=date;host, Signature=b27ccfbfa7df52a200ff74193ca6e32d4b48b8856fab7ebf1c595d0670a7e470",

  118. 		},

  119. 

  120. 		// get-slash-dot-slash

  121. 		V4SignerSuiteCase{

  122. 			label: "get-slash-dot-slash",

  123. 			request: V4SignerSuiteCaseRequest{

  124. 				method:  "GET",

  125. 				host:    "host.foo.com",

  126. 				url:     "/./",

  127. 				headers: []string{"Date:Mon, 09 Sep 2011 23:36:00 GMT"},

  128. 			},

  129. 			canonicalRequest: "GET\n/\n\ndate:Mon, 09 Sep 2011 23:36:00 GMT\nhost:host.foo.com\n\ndate;host\ne3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",

  130. 			stringToSign:     "AWS4-HMAC-SHA256\n20110909T233600Z\n20110909/us-east-1/host/aws4_request\n366b91fb121d72a00f46bbe8d395f53a102b06dfb7e79636515208ed3fa606b1",

  131. 			signature:        "b27ccfbfa7df52a200ff74193ca6e32d4b48b8856fab7ebf1c595d0670a7e470",

  132. 			authorization:    "AWS4-HMAC-SHA256 Credential=AKIDEXAMPLE/20110909/us-east-1/host/aws4_request, SignedHeaders=date;host, Signature=b27ccfbfa7df52a200ff74193ca6e32d4b48b8856fab7ebf1c595d0670a7e470",

  133. 		},

  134. 

  135. 		// get-slash-pointless-dot

  136. 		V4SignerSuiteCase{

  137. 			label: "get-slash-pointless-dot",

  138. 			request: V4SignerSuiteCaseRequest{

  139. 				method:  "GET",

  140. 				host:    "host.foo.com",

  141. 				url:     "/./foo",

  142. 				headers: []string{"Date:Mon, 09 Sep 2011 23:36:00 GMT"},

  143. 			},

  144. 			canonicalRequest: "GET\n/foo\n\ndate:Mon, 09 Sep 2011 23:36:00 GMT\nhost:host.foo.com\n\ndate;host\ne3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",

  145. 			stringToSign:     "AWS4-HMAC-SHA256\n20110909T233600Z\n20110909/us-east-1/host/aws4_request\n8021a97572ee460f87ca67f4e8c0db763216d84715f5424a843a5312a3321e2d",

  146. 			signature:        "910e4d6c9abafaf87898e1eb4c929135782ea25bb0279703146455745391e63a",

  147. 			authorization:    "AWS4-HMAC-SHA256 Credential=AKIDEXAMPLE/20110909/us-east-1/host/aws4_request, SignedHeaders=date;host, Signature=910e4d6c9abafaf87898e1eb4c929135782ea25bb0279703146455745391e63a",

  148. 		},

  149. 

  150. 		// get-slash

  151. 		V4SignerSuiteCase{

  152. 			label: "get-slash",

  153. 			request: V4SignerSuiteCaseRequest{

  154. 				method:  "GET",

  155. 				host:    "host.foo.com",

  156. 				url:     "//",

  157. 				headers: []string{"Date:Mon, 09 Sep 2011 23:36:00 GMT"},

  158. 			},

  159. 			canonicalRequest: "GET\n/\n\ndate:Mon, 09 Sep 2011 23:36:00 GMT\nhost:host.foo.com\n\ndate;host\ne3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",

  160. 			stringToSign:     "AWS4-HMAC-SHA256\n20110909T233600Z\n20110909/us-east-1/host/aws4_request\n366b91fb121d72a00f46bbe8d395f53a102b06dfb7e79636515208ed3fa606b1",

  161. 			signature:        "b27ccfbfa7df52a200ff74193ca6e32d4b48b8856fab7ebf1c595d0670a7e470",

  162. 			authorization:    "AWS4-HMAC-SHA256 Credential=AKIDEXAMPLE/20110909/us-east-1/host/aws4_request, SignedHeaders=date;host, Signature=b27ccfbfa7df52a200ff74193ca6e32d4b48b8856fab7ebf1c595d0670a7e470",

  163. 		},

  164. 

  165. 		// get-slashes

  166. 		V4SignerSuiteCase{

  167. 			label: "get-slashes",

  168. 			request: V4SignerSuiteCaseRequest{

  169. 				method:  "GET",

  170. 				host:    "host.foo.com",

  171. 				url:     "//foo//",

  172. 				headers: []string{"Date:Mon, 09 Sep 2011 23:36:00 GMT"},

  173. 			},

  174. 			canonicalRequest: "GET\n/foo/\n\ndate:Mon, 09 Sep 2011 23:36:00 GMT\nhost:host.foo.com\n\ndate;host\ne3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",

  175. 			stringToSign:     "AWS4-HMAC-SHA256\n20110909T233600Z\n20110909/us-east-1/host/aws4_request\n6bb4476ee8745730c9cb79f33a0c70baa6d8af29c0077fa12e4e8f1dd17e7098",

  176. 			signature:        "b00392262853cfe3201e47ccf945601079e9b8a7f51ee4c3d9ee4f187aa9bf19",

  177. 			authorization:    "AWS4-HMAC-SHA256 Credential=AKIDEXAMPLE/20110909/us-east-1/host/aws4_request, SignedHeaders=date;host, Signature=b00392262853cfe3201e47ccf945601079e9b8a7f51ee4c3d9ee4f187aa9bf19",

  178. 		},

  179. 

  180. 		// get-space

  181. 		V4SignerSuiteCase{

  182. 			label: "get-space",

  183. 			request: V4SignerSuiteCaseRequest{

  184. 				method:  "GET",

  185. 				host:    "host.foo.com",

  186. 				url:     "/%20/foo",

  187. 				headers: []string{"Date:Mon, 09 Sep 2011 23:36:00 GMT"},

  188. 			},

  189. 			canonicalRequest: "GET\n/%20/foo\n\ndate:Mon, 09 Sep 2011 23:36:00 GMT\nhost:host.foo.com\n\ndate;host\ne3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",

  190. 			stringToSign:     "AWS4-HMAC-SHA256\n20110909T233600Z\n20110909/us-east-1/host/aws4_request\n69c45fb9fe3fd76442b5086e50b2e9fec8298358da957b293ef26e506fdfb54b",

  191. 			signature:        "f309cfbd10197a230c42dd17dbf5cca8a0722564cb40a872d25623cfa758e374",

  192. 			authorization:    "AWS4-HMAC-SHA256 Credential=AKIDEXAMPLE/20110909/us-east-1/host/aws4_request, SignedHeaders=date;host, Signature=f309cfbd10197a230c42dd17dbf5cca8a0722564cb40a872d25623cfa758e374",

  193. 		},

  194. 

  195. 		// get-unreserved

  196. 		V4SignerSuiteCase{

  197. 			label: "get-unreserved",

  198. 			request: V4SignerSuiteCaseRequest{

  199. 				method:  "GET",

  200. 				host:    "host.foo.com",

  201. 				url:     "/-._~0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz",

  202. 				headers: []string{"Date:Mon, 09 Sep 2011 23:36:00 GMT"},

  203. 			},

  204. 			canonicalRequest: "GET\n/-._~0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz\n\ndate:Mon, 09 Sep 2011 23:36:00 GMT\nhost:host.foo.com\n\ndate;host\ne3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",

  205. 			stringToSign:     "AWS4-HMAC-SHA256\n20110909T233600Z\n20110909/us-east-1/host/aws4_request\ndf63ee3247c0356c696a3b21f8d8490b01fa9cd5bc6550ef5ef5f4636b7b8901",

  206. 			signature:        "830cc36d03f0f84e6ee4953fbe701c1c8b71a0372c63af9255aa364dd183281e",

  207. 			authorization:    "AWS4-HMAC-SHA256 Credential=AKIDEXAMPLE/20110909/us-east-1/host/aws4_request, SignedHeaders=date;host, Signature=830cc36d03f0f84e6ee4953fbe701c1c8b71a0372c63af9255aa364dd183281e",

  208. 		},

  209. 

  210. 		// get-utf8

  211. 		V4SignerSuiteCase{

  212. 			label: "get-utf8",

  213. 			request: V4SignerSuiteCaseRequest{

  214. 				method:  "GET",

  215. 				host:    "host.foo.com",

  216. 				url:     "/%E1%88%B4",

  217. 				headers: []string{"Date:Mon, 09 Sep 2011 23:36:00 GMT"},

  218. 			},

  219. 			canonicalRequest: "GET\n/%E1%88%B4\n\ndate:Mon, 09 Sep 2011 23:36:00 GMT\nhost:host.foo.com\n\ndate;host\ne3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",

  220. 			stringToSign:     "AWS4-HMAC-SHA256\n20110909T233600Z\n20110909/us-east-1/host/aws4_request\n27ba31df5dbc6e063d8f87d62eb07143f7f271c5330a917840586ac1c85b6f6b",

  221. 			signature:        "8d6634c189aa8c75c2e51e106b6b5121bed103fdb351f7d7d4381c738823af74",

  222. 			authorization:    "AWS4-HMAC-SHA256 Credential=AKIDEXAMPLE/20110909/us-east-1/host/aws4_request, SignedHeaders=date;host, Signature=8d6634c189aa8c75c2e51e106b6b5121bed103fdb351f7d7d4381c738823af74",

  223. 		},

  224. 

  225. 		// get-vanilla-empty-query-key

  226. 		V4SignerSuiteCase{

  227. 			label: "get-vanilla-empty-query-key",

  228. 			request: V4SignerSuiteCaseRequest{

  229. 				method:  "GET",

  230. 				host:    "host.foo.com",

  231. 				url:     "/?foo=bar",

  232. 				headers: []string{"Date:Mon, 09 Sep 2011 23:36:00 GMT"},

  233. 			},

  234. 			canonicalRequest: "GET\n/\nfoo=bar\ndate:Mon, 09 Sep 2011 23:36:00 GMT\nhost:host.foo.com\n\ndate;host\ne3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",

  235. 			stringToSign:     "AWS4-HMAC-SHA256\n20110909T233600Z\n20110909/us-east-1/host/aws4_request\n0846c2945b0832deb7a463c66af5c4f8bd54ec28c438e67a214445b157c9ddf8",

  236. 			signature:        "56c054473fd260c13e4e7393eb203662195f5d4a1fada5314b8b52b23f985e9f",

  237. 			authorization:    "AWS4-HMAC-SHA256 Credential=AKIDEXAMPLE/20110909/us-east-1/host/aws4_request, SignedHeaders=date;host, Signature=56c054473fd260c13e4e7393eb203662195f5d4a1fada5314b8b52b23f985e9f",

  238. 		},

  239. 

  240. 		// get-vanilla-space-query-parameters

  241. 		V4SignerSuiteCase{

  242. 			label: "get-vanilla-space-query-parameters",

  243. 			request: V4SignerSuiteCaseRequest{

  244. 				method:  "GET",

  245. 				host:    "host.foo.com",

  246. 				url:     "/?foo foo=bar bar",

  247. 				headers: []string{"Date:Mon, 09 Sep 2011 23:36:00 GMT"},

  248. 			},

  249. 			canonicalRequest: "GET\n/\nfoo%20foo=bar%20bar\ndate:Mon, 09 Sep 2011 23:36:00 GMT\nhost:host.foo.com\n\ndate;host\ne3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",

  250. 			stringToSign:     "AWS4-HMAC-SHA256\n20110909T233600Z\n20110909/us-east-1/host/aws4_request\n6a81658ae0a0a4f73aa72ca7d3b01c9cb0c5d4099f7a5ee897f5a571bfe6f7ff",

  251. 			signature:        "c8556bc676129d0806ea8fe6ef182dc095666f4c1582c3d9751d47e4306037c9",

  252. 			authorization:    "AWS4-HMAC-SHA256 Credential=AKIDEXAMPLE/20110909/us-east-1/host/aws4_request, SignedHeaders=date;host, Signature=c8556bc676129d0806ea8fe6ef182dc095666f4c1582c3d9751d47e4306037c9",

  253. 		},

  254. 

  255. 		// get-vanilla-query-order-key-case

  256. 		V4SignerSuiteCase{

  257. 			label: "get-vanilla-query-order-key-case",

  258. 			request: V4SignerSuiteCaseRequest{

  259. 				method:  "GET",

  260. 				host:    "host.foo.com",

  261. 				url:     "/?foo=Zoo&foo=aha",

  262. 				headers: []string{"Date:Mon, 09 Sep 2011 23:36:00 GMT"},

  263. 			},

  264. 			canonicalRequest: "GET\n/\nfoo=Zoo&foo=aha\ndate:Mon, 09 Sep 2011 23:36:00 GMT\nhost:host.foo.com\n\ndate;host\ne3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",

  265. 			stringToSign:     "AWS4-HMAC-SHA256\n20110909T233600Z\n20110909/us-east-1/host/aws4_request\ne25f777ba161a0f1baf778a87faf057187cf5987f17953320e3ca399feb5f00d",

  266. 			signature:        "be7148d34ebccdc6423b19085378aa0bee970bdc61d144bd1a8c48c33079ab09",

  267. 			authorization:    "AWS4-HMAC-SHA256 Credential=AKIDEXAMPLE/20110909/us-east-1/host/aws4_request, SignedHeaders=date;host, Signature=be7148d34ebccdc6423b19085378aa0bee970bdc61d144bd1a8c48c33079ab09",

  268. 		},

  269. 

  270. 		// get-vanilla-query-order-key

  271. 		V4SignerSuiteCase{

  272. 			label: "get-vanilla-query-order-key",

  273. 			request: V4SignerSuiteCaseRequest{

  274. 				method:  "GET",

  275. 				host:    "host.foo.com",

  276. 				url:     "/?a=foo&b=foo",

  277. 				headers: []string{"Date:Mon, 09 Sep 2011 23:36:00 GMT"},

  278. 			},

  279. 			canonicalRequest: "GET\n/\na=foo&b=foo\ndate:Mon, 09 Sep 2011 23:36:00 GMT\nhost:host.foo.com\n\ndate;host\ne3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",

  280. 			stringToSign:     "AWS4-HMAC-SHA256\n20110909T233600Z\n20110909/us-east-1/host/aws4_request\n2f23d14fe13caebf6dfda346285c6d9c14f49eaca8f5ec55c627dd7404f7a727",

  281. 			signature:        "0dc122f3b28b831ab48ba65cb47300de53fbe91b577fe113edac383730254a3b",

  282. 			authorization:    "AWS4-HMAC-SHA256 Credential=AKIDEXAMPLE/20110909/us-east-1/host/aws4_request, SignedHeaders=date;host, Signature=0dc122f3b28b831ab48ba65cb47300de53fbe91b577fe113edac383730254a3b",

  283. 		},

  284. 

  285. 		// get-vanilla-query-order-value

  286. 		V4SignerSuiteCase{

  287. 			label: "get-vanilla-query-order-value",

  288. 			request: V4SignerSuiteCaseRequest{

  289. 				method:  "GET",

  290. 				host:    "host.foo.com",

  291. 				url:     "/?foo=b&foo=a",

  292. 				headers: []string{"Date:Mon, 09 Sep 2011 23:36:00 GMT"},

  293. 			},

  294. 			canonicalRequest: "GET\n/\nfoo=a&foo=b\ndate:Mon, 09 Sep 2011 23:36:00 GMT\nhost:host.foo.com\n\ndate;host\ne3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",

  295. 			stringToSign:     "AWS4-HMAC-SHA256\n20110909T233600Z\n20110909/us-east-1/host/aws4_request\n33dffc220e89131f8f6157a35c40903daa658608d9129ff9489e5cf5bbd9b11b",

  296. 			signature:        "feb926e49e382bec75c9d7dcb2a1b6dc8aa50ca43c25d2bc51143768c0875acc",

  297. 			authorization:    "AWS4-HMAC-SHA256 Credential=AKIDEXAMPLE/20110909/us-east-1/host/aws4_request, SignedHeaders=date;host, Signature=feb926e49e382bec75c9d7dcb2a1b6dc8aa50ca43c25d2bc51143768c0875acc",

  298. 		},

  299. 

  300. 		// get-vanilla-query-unreserved

  301. 		V4SignerSuiteCase{

  302. 			label: "get-vanilla-query-unreserved",

  303. 			request: V4SignerSuiteCaseRequest{

  304. 				method:  "GET",

  305. 				host:    "host.foo.com",

  306. 				url:     "/?-._~0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz=-._~0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz",

  307. 				headers: []string{"Date:Mon, 09 Sep 2011 23:36:00 GMT"},

  308. 			},

  309. 			canonicalRequest: "GET\n/\n-._~0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz=-._~0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz\ndate:Mon, 09 Sep 2011 23:36:00 GMT\nhost:host.foo.com\n\ndate;host\ne3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",

  310. 			stringToSign:     "AWS4-HMAC-SHA256\n20110909T233600Z\n20110909/us-east-1/host/aws4_request\nd2578f3156d4c9d180713d1ff20601d8a3eed0dd35447d24603d7d67414bd6b5",

  311. 			signature:        "f1498ddb4d6dae767d97c466fb92f1b59a2c71ca29ac954692663f9db03426fb",

  312. 			authorization:    "AWS4-HMAC-SHA256 Credential=AKIDEXAMPLE/20110909/us-east-1/host/aws4_request, SignedHeaders=date;host, Signature=f1498ddb4d6dae767d97c466fb92f1b59a2c71ca29ac954692663f9db03426fb",

  313. 		},

  314. 

  315. 		// get-vanilla-query

  316. 		V4SignerSuiteCase{

  317. 			label: "get-vanilla-query",

  318. 			request: V4SignerSuiteCaseRequest{

  319. 				method:  "GET",

  320. 				host:    "host.foo.com",

  321. 				url:     "/",

  322. 				headers: []string{"Date:Mon, 09 Sep 2011 23:36:00 GMT"},

  323. 			},

  324. 			canonicalRequest: "GET\n/\n\ndate:Mon, 09 Sep 2011 23:36:00 GMT\nhost:host.foo.com\n\ndate;host\ne3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",

  325. 			stringToSign:     "AWS4-HMAC-SHA256\n20110909T233600Z\n20110909/us-east-1/host/aws4_request\n366b91fb121d72a00f46bbe8d395f53a102b06dfb7e79636515208ed3fa606b1",

  326. 			signature:        "b27ccfbfa7df52a200ff74193ca6e32d4b48b8856fab7ebf1c595d0670a7e470",

  327. 			authorization:    "AWS4-HMAC-SHA256 Credential=AKIDEXAMPLE/20110909/us-east-1/host/aws4_request, SignedHeaders=date;host, Signature=b27ccfbfa7df52a200ff74193ca6e32d4b48b8856fab7ebf1c595d0670a7e470",

  328. 		},

  329. 

  330. 		// get-vanilla-ut8-query

  331. 		V4SignerSuiteCase{

  332. 			label: "get-vanilla-ut8-query",

  333. 			request: V4SignerSuiteCaseRequest{

  334. 				method:  "GET",

  335. 				host:    "host.foo.com",

  336. 				url:     "/?ሴ=bar",

  337. 				headers: []string{"Date:Mon, 09 Sep 2011 23:36:00 GMT"},

  338. 			},

  339. 			canonicalRequest: "GET\n/\n%E1%88%B4=bar\ndate:Mon, 09 Sep 2011 23:36:00 GMT\nhost:host.foo.com\n\ndate;host\ne3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",

  340. 			stringToSign:     "AWS4-HMAC-SHA256\n20110909T233600Z\n20110909/us-east-1/host/aws4_request\nde5065ff39c131e6c2e2bd19cd9345a794bf3b561eab20b8d97b2093fc2a979e",

  341. 			signature:        "6fb359e9a05394cc7074e0feb42573a2601abc0c869a953e8c5c12e4e01f1a8c",

  342. 			authorization:    "AWS4-HMAC-SHA256 Credential=AKIDEXAMPLE/20110909/us-east-1/host/aws4_request, SignedHeaders=date;host, Signature=6fb359e9a05394cc7074e0feb42573a2601abc0c869a953e8c5c12e4e01f1a8c",

  343. 		},

  344. 

  345. 		// get-vanilla

  346. 		V4SignerSuiteCase{

  347. 			label: "get-vanilla",

  348. 			request: V4SignerSuiteCaseRequest{

  349. 				method:  "GET",

  350. 				host:    "host.foo.com",

  351. 				url:     "/",

  352. 				headers: []string{"Date:Mon, 09 Sep 2011 23:36:00 GMT"},

  353. 			},

  354. 			canonicalRequest: "GET\n/\n\ndate:Mon, 09 Sep 2011 23:36:00 GMT\nhost:host.foo.com\n\ndate;host\ne3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",

  355. 			stringToSign:     "AWS4-HMAC-SHA256\n20110909T233600Z\n20110909/us-east-1/host/aws4_request\n366b91fb121d72a00f46bbe8d395f53a102b06dfb7e79636515208ed3fa606b1",

  356. 			signature:        "b27ccfbfa7df52a200ff74193ca6e32d4b48b8856fab7ebf1c595d0670a7e470",

  357. 			authorization:    "AWS4-HMAC-SHA256 Credential=AKIDEXAMPLE/20110909/us-east-1/host/aws4_request, SignedHeaders=date;host, Signature=b27ccfbfa7df52a200ff74193ca6e32d4b48b8856fab7ebf1c595d0670a7e470",

  358. 		},

  359. 

  360. 		// post-header-key-case

  361. 		V4SignerSuiteCase{

  362. 			label: "post-header-key-case",

  363. 			request: V4SignerSuiteCaseRequest{

  364. 				method:  "POST",

  365. 				host:    "host.foo.com",

  366. 				url:     "/",

  367. 				headers: []string{"DATE:Mon, 09 Sep 2011 23:36:00 GMT"},

  368. 			},

  369. 			canonicalRequest: "POST\n/\n\ndate:Mon, 09 Sep 2011 23:36:00 GMT\nhost:host.foo.com\n\ndate;host\ne3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",

  370. 			stringToSign:     "AWS4-HMAC-SHA256\n20110909T233600Z\n20110909/us-east-1/host/aws4_request\n05da62cee468d24ae84faff3c39f1b85540de60243c1bcaace39c0a2acc7b2c4",

  371. 			signature:        "22902d79e148b64e7571c3565769328423fe276eae4b26f83afceda9e767f726",

  372. 			authorization:    "AWS4-HMAC-SHA256 Credential=AKIDEXAMPLE/20110909/us-east-1/host/aws4_request, SignedHeaders=date;host, Signature=22902d79e148b64e7571c3565769328423fe276eae4b26f83afceda9e767f726",

  373. 		},

  374. 

  375. 		// post-header-key-sort

  376. 		V4SignerSuiteCase{

  377. 			label: "post-header-key-sort",

  378. 			request: V4SignerSuiteCaseRequest{

  379. 				method:  "POST",

  380. 				host:    "host.foo.com",

  381. 				url:     "/",

  382. 				headers: []string{"DATE:Mon, 09 Sep 2011 23:36:00 GMT", "ZOO:zoobar"},

  383. 			},

  384. 			canonicalRequest: "POST\n/\n\ndate:Mon, 09 Sep 2011 23:36:00 GMT\nhost:host.foo.com\nzoo:zoobar\n\ndate;host;zoo\ne3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",

  385. 			stringToSign:     "AWS4-HMAC-SHA256\n20110909T233600Z\n20110909/us-east-1/host/aws4_request\n34e1bddeb99e76ee01d63b5e28656111e210529efeec6cdfd46a48e4c734545d",

  386. 			signature:        "b7a95a52518abbca0964a999a880429ab734f35ebbf1235bd79a5de87756dc4a",

  387. 			authorization:    "AWS4-HMAC-SHA256 Credential=AKIDEXAMPLE/20110909/us-east-1/host/aws4_request, SignedHeaders=date;host;zoo, Signature=b7a95a52518abbca0964a999a880429ab734f35ebbf1235bd79a5de87756dc4a",

  388. 		},

  389. 

  390. 		// post-header-value-case

  391. 		V4SignerSuiteCase{

  392. 			label: "post-header-value-case",

  393. 			request: V4SignerSuiteCaseRequest{

  394. 				method:  "POST",

  395. 				host:    "host.foo.com",

  396. 				url:     "/",

  397. 				headers: []string{"DATE:Mon, 09 Sep 2011 23:36:00 GMT", "zoo:ZOOBAR"},

  398. 			},

  399. 			canonicalRequest: "POST\n/\n\ndate:Mon, 09 Sep 2011 23:36:00 GMT\nhost:host.foo.com\nzoo:ZOOBAR\n\ndate;host;zoo\ne3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",

  400. 			stringToSign:     "AWS4-HMAC-SHA256\n20110909T233600Z\n20110909/us-east-1/host/aws4_request\n3aae6d8274b8c03e2cc96fc7d6bda4b9bd7a0a184309344470b2c96953e124aa",

  401. 			signature:        "273313af9d0c265c531e11db70bbd653f3ba074c1009239e8559d3987039cad7",

  402. 			authorization:    "AWS4-HMAC-SHA256 Credential=AKIDEXAMPLE/20110909/us-east-1/host/aws4_request, SignedHeaders=date;host;zoo, Signature=273313af9d0c265c531e11db70bbd653f3ba074c1009239e8559d3987039cad7",

  403. 		},

  404. 

  405. 		// post-vanilla-empty-query-value

  406. 		V4SignerSuiteCase{

  407. 			label: "post-vanilla-empty-query-value",

  408. 			request: V4SignerSuiteCaseRequest{

  409. 				method:  "POST",

  410. 				host:    "host.foo.com",

  411. 				url:     "/?foo=bar",

  412. 				headers: []string{"Date:Mon, 09 Sep 2011 23:36:00 GMT"},

  413. 			},

  414. 			canonicalRequest: "POST\n/\nfoo=bar\ndate:Mon, 09 Sep 2011 23:36:00 GMT\nhost:host.foo.com\n\ndate;host\ne3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",

  415. 			stringToSign:     "AWS4-HMAC-SHA256\n20110909T233600Z\n20110909/us-east-1/host/aws4_request\ncd4f39132d8e60bb388831d734230460872b564871c47f5de62e62d1a68dbe1e",

  416. 			signature:        "b6e3b79003ce0743a491606ba1035a804593b0efb1e20a11cba83f8c25a57a92",

  417. 			authorization:    "AWS4-HMAC-SHA256 Credential=AKIDEXAMPLE/20110909/us-east-1/host/aws4_request, SignedHeaders=date;host, Signature=b6e3b79003ce0743a491606ba1035a804593b0efb1e20a11cba83f8c25a57a92",

  418. 		},

  419. 

  420. 		// post-vanilla-query

  421. 		V4SignerSuiteCase{

  422. 			label: "post-vanilla-query",

  423. 			request: V4SignerSuiteCaseRequest{

  424. 				method:  "POST",

  425. 				host:    "host.foo.com",

  426. 				url:     "/?foo=bar",

  427. 				headers: []string{"Date:Mon, 09 Sep 2011 23:36:00 GMT"},

  428. 			},

  429. 			canonicalRequest: "POST\n/\nfoo=bar\ndate:Mon, 09 Sep 2011 23:36:00 GMT\nhost:host.foo.com\n\ndate;host\ne3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",

  430. 			stringToSign:     "AWS4-HMAC-SHA256\n20110909T233600Z\n20110909/us-east-1/host/aws4_request\ncd4f39132d8e60bb388831d734230460872b564871c47f5de62e62d1a68dbe1e",

  431. 			signature:        "b6e3b79003ce0743a491606ba1035a804593b0efb1e20a11cba83f8c25a57a92",

  432. 			authorization:    "AWS4-HMAC-SHA256 Credential=AKIDEXAMPLE/20110909/us-east-1/host/aws4_request, SignedHeaders=date;host, Signature=b6e3b79003ce0743a491606ba1035a804593b0efb1e20a11cba83f8c25a57a92",

  433. 		},

  434. 

  435. 		// post-vanilla

  436. 		V4SignerSuiteCase{

  437. 			label: "post-vanilla",

  438. 			request: V4SignerSuiteCaseRequest{

  439. 				method:  "POST",

  440. 				host:    "host.foo.com",

  441. 				url:     "/",

  442. 				headers: []string{"Date:Mon, 09 Sep 2011 23:36:00 GMT"},

  443. 			},

  444. 			canonicalRequest: "POST\n/\n\ndate:Mon, 09 Sep 2011 23:36:00 GMT\nhost:host.foo.com\n\ndate;host\ne3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",

  445. 			stringToSign:     "AWS4-HMAC-SHA256\n20110909T233600Z\n20110909/us-east-1/host/aws4_request\n05da62cee468d24ae84faff3c39f1b85540de60243c1bcaace39c0a2acc7b2c4",

  446. 			signature:        "22902d79e148b64e7571c3565769328423fe276eae4b26f83afceda9e767f726",

  447. 			authorization:    "AWS4-HMAC-SHA256 Credential=AKIDEXAMPLE/20110909/us-east-1/host/aws4_request, SignedHeaders=date;host, Signature=22902d79e148b64e7571c3565769328423fe276eae4b26f83afceda9e767f726",

  448. 		},

  449. 

  450. 		// post-x-www-form-urlencoded-parameters

  451. 		V4SignerSuiteCase{

  452. 			label: "post-x-www-form-urlencoded-parameters",

  453. 			request: V4SignerSuiteCaseRequest{

  454. 				method:  "POST",

  455. 				host:    "host.foo.com",

  456. 				url:     "/",

  457. 				headers: []string{"Content-Type:application/x-www-form-urlencoded; charset=utf8", "Date:Mon, 09 Sep 2011 23:36:00 GMT"},

  458. 				body:    "foo=bar",

  459. 			},

  460. 			canonicalRequest: "POST\n/\n\ncontent-type:application/x-www-form-urlencoded; charset=utf8\ndate:Mon, 09 Sep 2011 23:36:00 GMT\nhost:host.foo.com\n\ncontent-type;date;host\n3ba8907e7a252327488df390ed517c45b96dead033600219bdca7107d1d3f88a",

  461. 			stringToSign:     "AWS4-HMAC-SHA256\n20110909T233600Z\n20110909/us-east-1/host/aws4_request\nc4115f9e54b5cecf192b1eaa23b8e88ed8dc5391bd4fde7b3fff3d9c9fe0af1f",

  462. 			signature:        "b105eb10c6d318d2294de9d49dd8b031b55e3c3fe139f2e637da70511e9e7b71",

  463. 			authorization:    "AWS4-HMAC-SHA256 Credential=AKIDEXAMPLE/20110909/us-east-1/host/aws4_request, SignedHeaders=content-type;date;host, Signature=b105eb10c6d318d2294de9d49dd8b031b55e3c3fe139f2e637da70511e9e7b71",

  464. 		},

  465. 

  466. 		// post-x-www-form-urlencoded

  467. 		V4SignerSuiteCase{

  468. 			label: "post-x-www-form-urlencoded",

  469. 			request: V4SignerSuiteCaseRequest{

  470. 				method:  "POST",

  471. 				host:    "host.foo.com",

  472. 				url:     "/",

  473. 				headers: []string{"Content-Type:application/x-www-form-urlencoded", "Date:Mon, 09 Sep 2011 23:36:00 GMT"},

  474. 				body:    "foo=bar",

  475. 			},

  476. 			canonicalRequest: "POST\n/\n\ncontent-type:application/x-www-form-urlencoded\ndate:Mon, 09 Sep 2011 23:36:00 GMT\nhost:host.foo.com\n\ncontent-type;date;host\n3ba8907e7a252327488df390ed517c45b96dead033600219bdca7107d1d3f88a",

  477. 			stringToSign:     "AWS4-HMAC-SHA256\n20110909T233600Z\n20110909/us-east-1/host/aws4_request\n4c5c6e4b52fb5fb947a8733982a8a5a61b14f04345cbfe6e739236c76dd48f74",

  478. 			signature:        "5a15b22cf462f047318703b92e6f4f38884e4a7ab7b1d6426ca46a8bd1c26cbc",

  479. 			authorization:    "AWS4-HMAC-SHA256 Credential=AKIDEXAMPLE/20110909/us-east-1/host/aws4_request, SignedHeaders=content-type;date;host, Signature=5a15b22cf462f047318703b92e6f4f38884e4a7ab7b1d6426ca46a8bd1c26cbc",

  480. 		},

  481. 	)

  482. }

  483. 

  484. func (s *V4SignerSuite) TestCases(c *C) {

  485. 	signer := aws.NewV4Signer(s.auth, "host", s.region)

  486. 

  487. 	for _, testCase := range s.cases {

  488. 

  489. 		req, err := http.NewRequest(testCase.request.method, "http://"+testCase.request.host+testCase.request.url, strings.NewReader(testCase.request.body))

  490. 		c.Assert(err, IsNil, Commentf("Testcase: %s", testCase.label))

  491. 		for _, v := range testCase.request.headers {

  492. 			h := strings.SplitN(v, ":", 2)

  493. 			req.Header.Add(h[0], h[1])

  494. 		}

  495. 		req.Header.Set("host", req.Host)

  496. 

  497. 		t := signer.RequestTime(req)

  498. 

  499. 		canonicalRequest := signer.CanonicalRequest(req)

  500. 		c.Check(canonicalRequest, Equals, testCase.canonicalRequest, Commentf("Testcase: %s", testCase.label))

  501. 

  502. 		stringToSign := signer.StringToSign(t, canonicalRequest)

  503. 		c.Check(stringToSign, Equals, testCase.stringToSign, Commentf("Testcase: %s", testCase.label))

  504. 

  505. 		signature := signer.Signature(t, stringToSign)

  506. 		c.Check(signature, Equals, testCase.signature, Commentf("Testcase: %s", testCase.label))

  507. 

  508. 		authorization := signer.Authorization(req.Header, t, signature)

  509. 		c.Check(authorization, Equals, testCase.authorization, Commentf("Testcase: %s", testCase.label))

  510. 

  511. 		signer.Sign(req)

  512. 		c.Check(req.Header.Get("Authorization"), Equals, testCase.authorization, Commentf("Testcase: %s", testCase.label))

  513. 	}

  514. }

  515. 

  516. func ExampleV4Signer() {

  517. 	// Get auth from env vars

  518. 	auth, err := aws.EnvAuth()

  519. 	if err != nil {

  520. 		fmt.Println(err)

  521. 	}

  522. 

  523. 	// Create a signer with the auth, name of the service, and aws region

  524. 	signer := aws.NewV4Signer(auth, "dynamodb", aws.USEast)

  525. 

  526. 	// Create a request

  527. 	req, err := http.NewRequest("POST", aws.USEast.DynamoDBEndpoint, strings.NewReader("sample_request"))

  528. 	if err != nil {

  529. 		fmt.Println(err)

  530. 	}

  531. 

  532. 	// Date or x-amz-date header is required to sign a request

  533. 	req.Header.Add("Date", time.Now().UTC().Format(http.TimeFormat))

  534. 

  535. 	// Sign the request

  536. 	signer.Sign(req)

  537. 

  538. 	// Issue signed request

  539. 	http.DefaultClient.Do(req)

  540. }