Move SHA256 of empty string to constant.

permitio · Dec 4, 2023 · 75cce6c · 75cce6c
1 parent 1117010
commit 75cce6c
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/packages/opal-common/opal_common/utils.py b/packages/opal-common/opal_common/utils.py
@@ -79,6 +79,9 @@ def getSignatureKey(key, dateStamp, regionName, serviceName):
         kSigning = sign(kService, "aws4_request")
         return kSigning
 
+    # SHA256 of empty string.  This is needed when S3 request payload is empty.
+    SHA256_EMPTY = "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+
     t = datetime.utcnow()
     amzdate = t.strftime("%Y%m%dT%H%M%SZ")
     datestamp = t.strftime("%Y%m%d")
@@ -138,7 +141,7 @@ def getSignatureKey(key, dateStamp, regionName, serviceName):
 
     return {
         "x-amz-date": amzdate,
-        "x-amz-content-sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "x-amz-content-sha256": SHA256_EMPTY,
         "Authorization": authorization_header,
     }