aws-sdk-core 3.241.1 → 3.241.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c48d0632bd5c5e63a69c8688ee51b535b20eada9eaab757aad910a6482481eaa
-  data.tar.gz: 863c77cf8b07e9427043df1a8d37c2b7920518906eaf9c25951439e0f40ba1c7
+  metadata.gz: 00ff34b8863f275c077125896abacdd231902a6a6749341c504b23aec8386538
+  data.tar.gz: a850b063cf92edc10d656bfbad52060f109928b38b22e5a6b57429fd4446ed9e
 SHA512:
-  metadata.gz: fb84da80b12823243e720171670cf15c55df4173460d159ead8f80ef93462d5b95fe7aad18458818d8f097c43972073adbfe4889bc8347a39a3a41e2266d57f7
-  data.tar.gz: 681a5d0046532c1a1ce3bd8df590ab5fab1e6154b99fd600bdc8e9cdcc7b50b023953efbcda59d2927ad314121be4e18da5f50edf25fe93019d483e3a9b1a78b
+  metadata.gz: 98395234b252340f1b5699ed8647c83dfd974f4e6baf603ac38c12e0dafb4f48acb64c155e6cf57eef8d5a99d7522ce1b9cfc8e13e5a8b7675c01df6350b9183
+  data.tar.gz: 4121894cddfddbc75088516236ab2d5b98b14ca55a2a3d3d80f8a8b289540b07e5ac5d93bd30b085faa42a576193f989ddd0ec2f9bfffbbd0ce2b2c9a7bffa59

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+3.241.3 (2026-01-08)
+------------------
+
+* Issue - Disable request trailer checksums when using non-HTTPs endpoints.
+
+3.241.2 (2026-01-07)
+------------------
+
+* Issue - Preserve existing Content-Encoding when applying request trailer checksum.
+
 3.241.1 (2026-01-06)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-3.241.1
+3.241.3

data/lib/aws-sdk-core/plugins/checksum_algorithm.rb

@@ -275,8 +275,7 @@ module Aws
         # 1. **No existing checksum in header**: Skips if checksum header already present
         # 2. **Operation support**: Considers model, client configuration and user input.
         def should_calculate_request_checksum?(context)
-          !checksum_provided_as_header?(context.http_request.headers) &&
-            checksum_applicable?(context)
+          !checksum_provided_as_header?(context.http_request.headers) && checksum_applicable?(context)
         end
 
         # Checks if checksum calculation should proceed based on operation requirements and client settings.
@@ -317,12 +316,13 @@ module Aws
         end
 
         def checksum_request_in(context)
-          if context.operation['unsignedPayload'] ||
-             context.operation['authtype'] == 'v4-unsigned-body'
-            'trailer'
-          else
-            'header'
-          end
+          return 'header' unless supports_trailer_checksums?(context.operation)
+
+          should_fallback_to_header?(context) ? 'header' : 'trailer'
+        end
+
+        def supports_trailer_checksums?(operation)
+          operation['unsignedPayload'] || operation['authtype'] == 'v4-unsigned-body'
         end
 
         def calculate_request_checksum(context, checksum_properties)
@@ -331,12 +331,6 @@ module Aws
             headers[algorithm_header] = checksum_properties[:algorithm]
           end
 
-          # Trailer implementation within Mac/JRUBY environment is facing some
-          # network issues that will need further investigation:
-          # * https://github.com/jruby/jruby-openssl/issues/271
-          # * https://github.com/jruby/jruby-openssl/issues/317
-          return apply_request_checksum(context, headers, checksum_properties) if defined?(JRUBY_VERSION)
-
           case checksum_properties[:in]
           when 'header'
             apply_request_checksum(context, headers, checksum_properties)
@@ -347,6 +341,20 @@ module Aws
           end
         end
 
+        def should_fallback_to_header?(context)
+          # Trailer implementation within Mac/JRUBY environment is facing some
+          # network issues that will need further investigation:
+          # * https://github.com/jruby/jruby-openssl/issues/271
+          # * https://github.com/jruby/jruby-openssl/issues/317
+          return true if defined?(JRUBY_VERSION)
+
+          # Chunked signing is currently not supported
+          # Https is required for unsigned payload for security
+          return true if context.http_request.endpoint.scheme == 'http'
+
+          context[:skip_trailer_checksums]
+        end
+
         def apply_request_checksum(context, headers, checksum_properties)
           header_name = checksum_properties[:name]
           headers[header_name] = calculate_checksum(
@@ -381,7 +389,12 @@ module Aws
           location_name = checksum_properties[:name]
 
           # set required headers
-          headers['Content-Encoding'] = 'aws-chunked'
+          headers['Content-Encoding'] =
+            if headers['Content-Encoding']
+              headers['Content-Encoding'] += ', aws-chunked'
+            else
+              'aws-chunked'
+            end
           headers['X-Amz-Content-Sha256'] = 'STREAMING-UNSIGNED-PAYLOAD-TRAILER'
           headers['X-Amz-Trailer'] = location_name
 
@@ -417,8 +430,7 @@ module Aws
         end
 
         def add_verify_response_headers_handler(context, checksum_context)
-          validation_list = CHECKSUM_ALGORITHM_PRIORITIES &
-                            operation_response_algorithms(context)
+          validation_list = CHECKSUM_ALGORITHM_PRIORITIES & operation_response_algorithms(context)
           context[:http_checksum][:validation_list] = validation_list
 
           context.http_response.on_headers do |_status, headers|

data/lib/aws-sdk-signin/client.rb

@@ -579,7 +579,7 @@ module Aws::Signin
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-core'
-      context[:gem_version] = '3.241.1'
+      context[:gem_version] = '3.241.3'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-signin.rb

@@ -56,7 +56,7 @@ module Aws::Signin
   autoload :EndpointProvider, 'aws-sdk-signin/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-signin/endpoints'
 
-  GEM_VERSION = '3.241.1'
+  GEM_VERSION = '3.241.3'
 
 end
 

data/lib/aws-sdk-sso/client.rb

@@ -698,7 +698,7 @@ module Aws::SSO
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-core'
-      context[:gem_version] = '3.241.1'
+      context[:gem_version] = '3.241.3'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-sso.rb

@@ -56,7 +56,7 @@ module Aws::SSO
   autoload :EndpointProvider, 'aws-sdk-sso/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-sso/endpoints'
 
-  GEM_VERSION = '3.241.1'
+  GEM_VERSION = '3.241.3'
 
 end
 

data/lib/aws-sdk-ssooidc/client.rb

@@ -1081,7 +1081,7 @@ module Aws::SSOOIDC
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-core'
-      context[:gem_version] = '3.241.1'
+      context[:gem_version] = '3.241.3'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-ssooidc.rb

@@ -56,7 +56,7 @@ module Aws::SSOOIDC
   autoload :EndpointProvider, 'aws-sdk-ssooidc/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-ssooidc/endpoints'
 
-  GEM_VERSION = '3.241.1'
+  GEM_VERSION = '3.241.3'
 
 end
 

data/lib/aws-sdk-sts/client.rb

@@ -2725,7 +2725,7 @@ module Aws::STS
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-core'
-      context[:gem_version] = '3.241.1'
+      context[:gem_version] = '3.241.3'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-sts.rb

@@ -56,7 +56,7 @@ module Aws::STS
   autoload :EndpointProvider, 'aws-sdk-sts/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-sts/endpoints'
 
-  GEM_VERSION = '3.241.1'
+  GEM_VERSION = '3.241.3'
 
 end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-core
 version: !ruby/object:Gem::Version
-  version: 3.241.1
+  version: 3.241.3
 platform: ruby
 authors:
 - Amazon Web Services