aws presigned url request signature mismatch while upload

Question

I am trying to upload an image using presigned url

const s3Params = {
  Bucket: config.MAIN_BUCKET,
  Key: S3_BUCKET + '/'+fileName,
  ContentType: fileType,
  Expires: 900,
  ACL: 'public-read'
};
const s3 = new AWS.S3({
  accessKeyId: config.accessKeyId,
  secretAccessKey: config.secretAccessKey,
  'region': config.region
});
const url = await s3.getSignedUrlPromise('putObject', s3Params)
return url

i get a url something like

https://s3.eu-west-1.amazonaws.com/bucket/folder/access.JPG?AWSAccessKeyId=xxxx&Content-Type=multipart%2Fform-data&Expires=1580890085&Signature=xxxx&x-amz-acl=public-read

i have tried uploading file with content type image/jpg, multipart/form-data.
Tried generating url without filetype and upload.
tried put and post method

but nothing seems to work

Error always :

The request signature we calculated does not match the signature you provided. Check your key and signing method.

Access credentials have appropriate permissions because these upload files fine when trying though s3 putobject upload (though api instead of presigned url)

Edit:

It seems that postman is sending content-type as multipart/form-data; boundary=--------------------------336459561795502380899802. here boundary is added extra. how to fix this?

try ContentType: 'application/octet-stream' when generating the url, and pass the same content-type when uploading. — Arun Kamalanathan
– Arun Kamalanathan, Commented Feb 5, 2020 at 11:38

Harshil Kansagara · Accepted Answer · 2020-06-06 09:04:55Z

1

As per the AWS S3 documentation Signing and Authenticating REST request, S3 is using SignatureVersion4 by default.

But the nodejs AWS-SDK is using SignatureVersion2 by default.

So you have to explicitly specify SignatureVersion4 in request header

Add this code in S3 config

    s3 = new AWS.S3({
        'signatureVersion':'v4'
    });

answered Jun 6, 2020 at 9:04

Harshil Kansagara

1102 silver badges6 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Shubham · Accepted Answer · 2020-02-06 08:54:54Z

0

I was testing through form-data on postman. but getsignedUrl() function does not support that. Tried using binary and it worked fine. For multipart there seems to be a different function in aws sdk

answered Feb 6, 2020 at 8:54

Shubham

1,3042 gold badges11 silver badges32 bronze badges

Collectives™ on Stack Overflow

aws presigned url request signature mismatch while upload

2 Answers 2

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related