0002-00000039

Problem description

A request can't include the signature in both the HTTP request header and the URL request parameters.

Cause

The request included both the Authorization header and signature parameters in the URL, such as Expires, Signature, and OSSAccessKeyId.

Example

The following signed request includes signature information in both the header and the URL request parameters.

GET /oss.jpg?OSSAccessKeyId=nz2pc56s936****&Expires=1141889120&Signature=vjbyPxybdZaNmGa%2ByT272YEAiv**** HTTP/1.1
Host: oss-example.oss-cn-hangzhou.aliyuncs.com
Date: Fri, 24 Feb 2012 06:38:30 GMT
Authorization: OSS qn6q**************:77Dv****************

Solution

Use either of the following methods to send a signed request.

• Include the signature only in the header

GET /oss.jpg HTTP/1.1
Host: oss-example.oss-cn-hangzhou.aliyuncs.com
Date: Fri, 24 Feb 2012 06:38:30 GMT
Authorization: OSS qn6q**************:77Dv****************

For more information, see Include the signature in the header.

• Include the signature only in the URL

GET /oss.jpg?OSSAccessKeyId=nz2pc56s936****&Expires=1141889120&Signature=vjbyPxybdZaNmGa%2ByT272YEAiv****
Host: oss-example.oss-cn-hangzhou.aliyuncs.com
Date: Fri, 24 Feb 2012 06:38:30 GMT

For more information, see Include the signature in the URL.