{"action":"created","issue":{"url":"https://api.github.com/repos/boto/boto/issues/3032","labels_url":"https://api.github.com/repos/boto/boto/issues/3032/labels{/name}","comments_url":"https://api.github.com/repos/boto/boto/issues/3032/comments","events_url":"https://api.github.com/repos/boto/boto/issues/3032/events","html_url":"https://github.com/boto/boto/pull/3032","id":60957162,"number":3032,"title":"AWS S3 Signature V4 - Fix signature calculation for similar headers","user":{"login":"tpodowd","id":235524,"avatar_url":"https://avatars.githubusercontent.com/u/235524?v=3","gravatar_id":"","url":"https://api.github.com/users/tpodowd","html_url":"https://github.com/tpodowd","followers_url":"https://api.github.com/users/tpodowd/followers","following_url":"https://api.github.com/users/tpodowd/following{/other_user}","gists_url":"https://api.github.com/users/tpodowd/gists{/gist_id}","starred_url":"https://api.github.com/users/tpodowd/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tpodowd/subscriptions","organizations_url":"https://api.github.com/users/tpodowd/orgs","repos_url":"https://api.github.com/users/tpodowd/repos","events_url":"https://api.github.com/users/tpodowd/events{/privacy}","received_events_url":"https://api.github.com/users/tpodowd/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":9,"created_at":"2015-03-13T01:45:06Z","updated_at":"2015-06-02T17:55:45Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/boto/boto/pulls/3032","html_url":"https://github.com/boto/boto/pull/3032","diff_url":"https://github.com/boto/boto/pull/3032.diff","patch_url":"https://github.com/boto/boto/pull/3032.patch"},"body":"Boto calculated a incorrect signature for requests containing similar\r\nheaders as it sorted the headers not by the header name but by the\r\ncomplete header.\r\n\r\nAn example is the multipart upload part copy with range api. Boto\r\ncalculates its signature using this order because - sorts before :\r\n    x-amz-copy-source-range:bytes=5-15\r\n    x-amz-copy-source:multipart-1426209034/source\r\n\r\nThe order is incorrect and should be the other way around. The new\r\nalgorithm uses only the header name to sort the headers.\r\n\r\nTwo tests are added which fail with the old algorithm."},"comment":{"url":"https://api.github.com/repos/boto/boto/issues/comments/108031584","html_url":"https://github.com/boto/boto/pull/3032#issuecomment-108031584","issue_url":"https://api.github.com/repos/boto/boto/issues/3032","id":108031584,"user":{"login":"hoppinghol","id":1932637,"avatar_url":"https://avatars.githubusercontent.com/u/1932637?v=3","gravatar_id":"","url":"https://api.github.com/users/hoppinghol","html_url":"https://github.com/hoppinghol","followers_url":"https://api.github.com/users/hoppinghol/followers","following_url":"https://api.github.com/users/hoppinghol/following{/other_user}","gists_url":"https://api.github.com/users/hoppinghol/gists{/gist_id}","starred_url":"https://api.github.com/users/hoppinghol/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/hoppinghol/subscriptions","organizations_url":"https://api.github.com/users/hoppinghol/orgs","repos_url":"https://api.github.com/users/hoppinghol/repos","events_url":"https://api.github.com/users/hoppinghol/events{/privacy}","received_events_url":"https://api.github.com/users/hoppinghol/received_events","type":"User","site_admin":false},"created_at":"2015-06-02T17:55:45Z","updated_at":"2015-06-02T17:55:45Z","body":"@alofih I have been pointing our corporate systems at my github branch/pr, but yes, this stuff ought to get merged in before it's overcome by events."}}