Support STS session token in query parameters for presigned URLs

This commit is contained in:
Chris Lu committed 2026-01-02 19:01:20 -08:00
1 parent 060d3310ca
commit d6f60b3f64
1 file changed
+5 -1
+5 -1
View File
@@ -208,7 +208,11 @@ func (iam *IdentityAccessManagement) verifyV4Signature(r *http.Request, shouldCh
var cred *Credential
// 2. Check for STS session token
if sessionToken := r.Header.Get("X-Amz-Security-Token"); sessionToken != "" {
sessionToken := r.Header.Get("X-Amz-Security-Token")
if sessionToken == "" {
sessionToken = r.URL.Query().Get("X-Amz-Security-Token")
}
if sessionToken != "" {
// Validate STS session token
identity, cred, errCode = iam.validateSTSSessionToken(r, sessionToken, authInfo.AccessKey)
if errCode != s3err.ErrNone {