[jira] [Created] (HDDS-16662) Refactor shared HMAC-SHA256 logic in S3 signature validators

["Huang Kuan Hao (Jira)" <ji...@apache.org>]

Huang Kuan Hao created HDDS-16662:
-------------------------------------

             Summary: Refactor shared HMAC-SHA256 logic in S3 signature validators
                 Key: HDDS-16662
                 URL: https://issues.apache.org/jira/browse/HDDS-16662
             Project: Apache Ozone
          Issue Type: Sub-task
          Components: S3
            Reporter: Huang Kuan Hao
            Assignee: Huang Kuan Hao


{{ChunksValidator}} and {{AWSV4AuthValidator}} each maintain a thread-local {{Mac}} and implement HMAC-SHA256 initialization and signing. Share this logic through {{ozone-common}} so request, chunk, and trailer verification use the same primitive.

Keep signing-key derivation in OM and the previous-signature chain in {{ChunksValidator}}. Preserve signature parsing, constant-time comparison in {{ChunksValidator}}, and existing error responses.

Verify request authentication, consecutive signed chunks, signed trailers, invalid signatures, and independent requests using different keys. The refactor should preserve behavior and avoid sharing mutable request state.

Follow-up to HDDS-15142: https://github.com/apache/ozone/pull/11222



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org