commit ef31baf3fc064f7c83c7116d8d4374295915ec1c
Author: Matthew Oliver <email address hidden>
Date: Tue Apr 19 15:23:30 2022 +1000
formpost: Add support for sha256/512 signatures
Sha1 has known to be deprecated for a while so allow the formpost
middleware to use SHA256 and SHA512. Follow the tempurl model and
accept signatures of the form:
Reviewed: https:/ /review. opendev. org/c/openstack /swift/ +/838434 /opendev. org/openstack/ swift/commit/ ef31baf3fc064f7 c83c7116d8d4374 295915ec1c
Committed: https:/
Submitter: "Zuul (22348)"
Branch: master
commit ef31baf3fc064f7 c83c7116d8d4374 295915ec1c
Author: Matthew Oliver <email address hidden>
Date: Tue Apr 19 15:23:30 2022 +1000
formpost: Add support for sha256/512 signatures
Sha1 has known to be deprecated for a while so allow the formpost
middleware to use SHA256 and SHA512. Follow the tempurl model and
accept signatures of the form:
<hex-encoded signature>
or
where the base64-encoding can be either standard or URL-safe, and the
trailing '=' chars may be stripped off.
As part of this, pull the signature-parsing out to a new function, and
add detection for hex-encoded sha512 signatures to tempurl.
Change-Id: Iaba3725551bd47 d75067a634a7571 485b9afa2de 946f5f029cdefc9 e66bcf01046
Related-Change: Ia9dd1a91cc3c9c
Co-Authored-By: Tim Burke <email address hidden>
Closes-Bug: #1794601