photoncloud-monorepo/lightningstor/crates/lightningstor-server/Cargo.toml
centra d2149b6249 fix(lightningstor): Fix SigV4 canonicalization for AWS S3 auth
- Replace form_urlencoded with RFC 3986 compliant URI encoding
- Implement aws_uri_encode() matching AWS SigV4 spec exactly
- Unreserved chars (A-Z,a-z,0-9,-,_,.,~) not encoded
- All other chars percent-encoded with uppercase hex
- Preserve slashes in paths, encode in query params
- Normalize empty paths to '/' per AWS spec
- Fix test expectations (body hash, HMAC values)
- Add comprehensive SigV4 signature determinism test

This fixes the canonicalization mismatch that caused signature
validation failures in T047. Auth can now be enabled for production.

Refs: T058.S1
2025-12-12 06:23:46 +09:00

56 lines
No EOL
1.5 KiB
TOML

[package]
name = "lightningstor-server"
version.workspace = true
edition.workspace = true
license.workspace = true
rust-version.workspace = true
description = "LightningStor object storage server"
[[bin]]
name = "lightningstor-server"
path = "src/main.rs"
[dependencies]
lightningstor-types = { workspace = true }
lightningstor-api = { workspace = true }
lightningstor-storage = { workspace = true }
chainfire-client = { path = "../../../chainfire/chainfire-client" }
flaredb-client = { path = "../../../flaredb/crates/flaredb-client" }
tonic = { workspace = true }
tonic-health = { workspace = true }
prost = { workspace = true }
prost-types = { workspace = true }
tokio = { workspace = true }
tokio-stream = { workspace = true }
axum = { workspace = true }
tower = { workspace = true }
tower-http = { workspace = true }
http = { workspace = true }
http-body-util = { workspace = true }
async-trait = { workspace = true }
tracing = { workspace = true }
tracing-subscriber = { workspace = true }
thiserror = { workspace = true }
clap = { workspace = true }
metrics-exporter-prometheus = { workspace = true }
serde = { workspace = true }
serde_json = { workspace = true }
serde_urlencoded = "0.7"
url = "2.5"
toml = { workspace = true }
quick-xml = { workspace = true }
bytes = { workspace = true }
dashmap = { workspace = true }
uuid = { workspace = true }
chrono = { workspace = true }
base64 = { workspace = true }
hex = { workspace = true }
hmac = "0.12"
md-5 = { workspace = true }
sha2 = { workspace = true }
[dev-dependencies]
tempfile = "3"
[lints]
workspace = true