0002-00000080-Object Storage Service(OSS)-阿里云帮助中心

Problem description

The server returns a 403 Forbidden error with error code 0002-00000080 when you use a Signature Version 1 (V1) to authenticate Object Storage Service (OSS) API requests.

Cause

OSS discontinued support for Signature Version 1 (V1) authentication method. All API requests must now use Signature Version 4 (V4) for authentication. For more information about the deprecation notice, see Notice on the Discontinuation of the OSS V1 Signature Algorithm or .

Example error

The following example shows a PutBucketAcl API request that uses a V1 signature:

PUT /?acl&OSSAccessKeyId=nz2p****&Expires=abc&Signature=vjbyPxybdZaNmGa%2ByT272YEAiv**** HTTP/1.1
x-oss-acl: Permission
Host: BucketName.oss-cn-hangzhou.aliyuncs.com
Date: GMT Date

This request returns a 403 error because V1 signatures are no longer accepted.

Solution

Upgrade your authentication implementation to use Signature Version 4 (V4) for all OSS API requests. For detailed migration instructions and code examples, see Upgrade from V1 to V4 signatures.

For information about implementing V4 signatures in your applications, see the following topics:

If you use an OSS SDK, upgrade to the latest SDK version that supports V4 signatures.
If you directly call OSS API operations, implement the V4 signature algorithm as described in the API Reference documentation.