Chris LuandDevin eb744e71bd s3api: verify x-amz-content-sha256 against the streamed body ...

A PUT carrying a hex or base64 payload hash now streams through a
verifier that reports a mismatch once the stream is exhausted, instead
of storing an object that does not match its declared hash. The error
is deferred so intermediate reads that drop (n>0, err) results cannot
silently swallow it. Sentinel values (unsigned/streaming payloads)
remain exempt and malformed values fail fast.

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

2026-10-06 09:16:29 -07:00

..

audit_fluent_test.go

fix(s3api/audit): surface OIDC identity claim in audit log for STS sessions (#11269)

2026-09-11 11:29:46 -07:00

audit_fluent.go

fix(s3api/audit): surface OIDC identity claim in audit log for STS sessions (#11269)

2026-09-11 11:29:46 -07:00

error_handler_test.go

s3: drain request body before error response (#11334)

2026-09-15 13:09:07 -07:00

error_handler.go

s3: drain request body before error response (#11334)

2026-09-15 13:09:07 -07:00

s3-error.go

Fix #7305: Return 400 BadDigest instead of 500 InternalError for MD5 mismatch (#7306)

2025-10-08 14:24:10 -07:00

s3api_errors.go

s3api: verify x-amz-content-sha256 against the streamed body

2026-10-06 09:16:29 -07:00