Ajax call with pre-signed URL giving error

[phanikumar]

I have created a simple html page which contains an ajax call to API endpoint to retrieve pre-signed URL. Using the URL retrieved from the previous ajax call, I tried upload a sample text file which is resulting in the request signature we calculated does not match the signature you provided. Check your key and signing method response. But when I am using the same URL using CURL, it is working Good. Can someone suggest me what I am missing in the request.

[fzs]

I have created a simple html page which contains an ajax call to API endpoint to retrieve pre-signed URL. Using the URL retrieved from the previous ajax call, I tried upload a sample text file which is resulting in the request signature we calculated does not match the signature you provided. Check your key and signing method response. But when I am using the same URL using CURL, it is working Good. Can someone suggest me what I am missing in the request.

When you are sending the upload, are you also using Authorization Header method at the same time as the URL query method (pre-signed) to send the signature? You shouldn't if you are. My question is referring to this: https://docs.aws.amazon.com/general/late...quest.html

My other recommendation would be to use the SDKs to let the signature handling process be done automatically for you without worrying about security and signing issues.

[phanikumar]

I have created a simple html page which contains an ajax call to API endpoint to retrieve pre-signed URL. Using the URL retrieved from the previous ajax call, I tried upload a sample text file which is resulting in the request signature we calculated does not match the signature you provided. Check your key and signing method response. But when I am using the same URL using CURL, it is working Good. Can someone suggest me what I am missing in the request.

When you are sending the upload, are you also using Authorization Header method at the same time as the URL query method (pre-signed) to send the signature? You shouldn't if you are. My question is referring to this: https://docs.aws.amazon.com/general/late...quest.html

My other recommendation would be to use the SDKs to let the signature handling process be done automatically for you without worrying about security and signing issues.

I am not using authorization headers. I am using the entire signed URL to make the Request. Also I do agree that using SDK is a good choice. But I have a situation where my code sits on Lambda function which has limitation of 6MB for file size and API Gateway has 10MB Payload limit. My files are too large and I can't handle that through Lambda and API Gateway. I am checking the possible ways to handle this. One other option that I am focusing on is multi-part upload. But I would like to get implement both to see the performance difference and advantages. I have attached the code for this forum which I am using to upload the code. Can you please have a look at the code and let me know if I am missing something

[fzs]

I am not using authorization headers. I am using the entire signed URL to make the Request. Also I do agree that using SDK is a good choice. But I have a situation where my code sits on Lambda function which has limitation of 6MB for file size and API Gateway has 10MB Payload limit. My files are too large and I can't handle that through Lambda and API Gateway. I am checking the possible ways to handle this. One other option that I am focusing on is multi-part upload. But I would like to get implement both to see the performance difference and advantages. I have attached the code for this forum which I am using to upload the code. Can you please have a look at the code and let me know if I am missing something

Please post the output of 

console.log(this.httpResponse)

console.log(this.request.httpRequest)

example

   console.log("Got error:", err.message);
   console.log("Request:");
   console.log(this.request.httpRequest);
   console.log("Response:");
   console.log(this.httpResponse);

[phanikumar]

When I added console log, I am getting the following response

{readyState: 4, getResponseHeader: ƒ, getAllResponseHeaders: ƒ, setRequestHeader: ƒ, overrideMimeType: ƒ, …}
abort: ƒ (e)always: ƒ ()catch: ƒ (e)done: ƒ ()fail: ƒ ()getAllResponseHeaders: ƒ ()getResponseHeader: ƒ (e)overrideMimeType: ƒ (e)pipe: ƒ ()progress: ƒ ()promise: ƒ (e)readyState: 4responseText: "


<?xml version="1.0" encoding="UTF-8"?>↵<Error><Code>SignatureDoesNotMatch</Code><Message>The request signature we calculated does not match the signature you provided. Check your key and signing method.</Message>

<AWSAccessKeyId>key</AWSAccessKeyId><StringToSign>PUT↵↵text/plain;charset=UTF-8↵1536703973↵x-amz-security-token: security Token</StringToSign><SignatureProvided>Signature</SignatureProvided>


<StringToSignBytes>numbers </StringToSignBytes><RequestId>B2DE0E46BC5C7C96</RequestId><HostId>2VvhyRadrfdsGte/dsfsfdsde3XCedafa=</HostId></Error>"setRequestHeader: ƒ (e,t)state: ƒ ()status: 403statusCode: ƒ (e)statusText: "Forbidden"then: ƒ (t,r,i)__proto__: Object



The above is the response that I got from JQuery request in the console

[phanikumar]

Finally able to resolve the issue by adding content-type in aws s3 params. 

Thanks FZS for all the support