photoncloud-monorepo/k8shost/crates/k8shost-server/Cargo.toml
centra d2149b6249 fix(lightningstor): Fix SigV4 canonicalization for AWS S3 auth
- Replace form_urlencoded with RFC 3986 compliant URI encoding
- Implement aws_uri_encode() matching AWS SigV4 spec exactly
- Unreserved chars (A-Z,a-z,0-9,-,_,.,~) not encoded
- All other chars percent-encoded with uppercase hex
- Preserve slashes in paths, encode in query params
- Normalize empty paths to '/' per AWS spec
- Fix test expectations (body hash, HMAC values)
- Add comprehensive SigV4 signature determinism test

This fixes the canonicalization mismatch that caused signature
validation failures in T047. Auth can now be enabled for production.

Refs: T058.S1
2025-12-12 06:23:46 +09:00

50 lines
1.9 KiB
TOML

[package]
name = "k8shost-server"
version = "0.1.0"
edition = "2021"
[[bin]]
name = "k8shost-server"
path = "src/main.rs"
[lib]
name = "k8shost_server"
path = "src/lib.rs"
[dependencies]
k8shost-types = { path = "../k8shost-types" }
k8shost-proto = { path = "../k8shost-proto" }
tokio = { workspace = true }
tokio-stream = "0.1"
tonic = { workspace = true }
prost = { workspace = true }
serde = { workspace = true }
serde_json = { workspace = true }
anyhow = { workspace = true }
tracing = { workspace = true }
tracing-subscriber = { workspace = true }
metrics = { workspace = true }
metrics-exporter-prometheus = { workspace = true }
uuid = { version = "1", features = ["v4", "serde"] }
flaredb-client = { path = "../../../flaredb/crates/flaredb-client" }
iam-client = { path = "../../../iam/crates/iam-client" }
iam-types = { path = "../../../iam/crates/iam-types" }
creditservice-client = { path = "../../../creditservice/creditservice-client" }
fiberlb-api = { path = "../../../fiberlb/crates/fiberlb-api" }
flashdns-api = { path = "../../../flashdns/crates/flashdns-api" }
chrono = { workspace = true }
clap = { workspace = true }
config = { workspace = true }
toml = { workspace = true }
[dev-dependencies]
plasmavmc-server = { path = "../../../plasmavmc/crates/plasmavmc-server" }
plasmavmc-api = { path = "../../../plasmavmc/crates/plasmavmc-api" }
plasmavmc-hypervisor = { path = "../../../plasmavmc/crates/plasmavmc-hypervisor" }
plasmavmc-kvm = { path = "../../../plasmavmc/crates/plasmavmc-kvm" }
prismnet-server = { path = "../../../prismnet/crates/prismnet-server" }
prismnet-api = { path = "../../../prismnet/crates/prismnet-api" }
flaredb-proto = { path = "../../../flaredb/crates/flaredb-proto" }
creditservice-api = { path = "../../../creditservice/crates/creditservice-api" }
creditservice-proto = { path = "../../../creditservice/crates/creditservice-proto" }
tempfile = "3"