0002-00000426

Problem description

The value of the sign parameter in the additional request header is empty.

Causes

You sent an Amazon S3-compatible V4 request, but the X-Amz-SignedHeaders request parameter is empty or the SignedHeaders field in the Authorization request header is empty.

Examples

You sent a request that includes the signature in the URL parameters, but the X-Amz-SignedHeaders parameter is empty.

GET /test.txt?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=LTAI****************/20221220/us-east-1/s3/aws4_request&X-Amz-Date=20221220T084818Z&X-Amz-Expires=86400&X-Amz-SignedHeaders=&X-Amz-Signature=ab2**** HTTP/1.0
Date: Tue, 20 Dec 2022 08:48:18 GMT
Host: oss-example.oss-cn-hangzhou.aliyuncs.com
x-oss-s3-compat: true

The X-Amz-SignedHeaders parameter specifies the request headers to include in the signature. The value is a list of headers separated by semicolons. The list must include the host header.

Solutions

Specify the correct value for the X-Amz-SignedHeaders parameter or the SignedHeaders field in the Authorization request header. The following code provides an example:

GET /test.txt?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=LTAI****************/20221220/us-east-1/s3/aws4_request&X-Amz-Date=20221220T084818Z&X-Amz-Expires=86400&X-Amz-SignedHeaders=host;range&X-Amz-Signature=ab2s**** HTTP/1.0
Date: Tue, 20 Dec 2022 08:48:18 GMT
Host: oss-example.oss-cn-hangzhou.aliyuncs.com
Range: bytes=100-900

We recommend that you use Amazon S3 SDKs to initiate the request. For more information, see Use Amazon S3 SDKs to access OSS.