@smithy/signature-v4 4.1.2 → 4.1.4

package/dist-cjs/index.js

@@ -136,22 +136,20 @@ var import_util_uri_escape = require("@smithy/util-uri-escape");
 var getCanonicalQuery = /* @__PURE__ */ __name(({ query = {} }) => {
   const keys = [];
   const serialized = {};
-  for (const key of Object.keys(query).sort()) {
+  for (const key of Object.keys(query)) {
     if (key.toLowerCase() === SIGNATURE_HEADER) {
       continue;
     }
-    keys.push(key);
+    const encodedKey = (0, import_util_uri_escape.escapeUri)(key);
+    keys.push(encodedKey);
     const value = query[key];
     if (typeof value === "string") {
-      serialized[key] = `${(0, import_util_uri_escape.escapeUri)(key)}=${(0, import_util_uri_escape.escapeUri)(value)}`;
+      serialized[encodedKey] = `${encodedKey}=${(0, import_util_uri_escape.escapeUri)(value)}`;
     } else if (Array.isArray(value)) {
-      serialized[key] = value.slice(0).reduce(
-        (encoded, value2) => encoded.concat([`${(0, import_util_uri_escape.escapeUri)(key)}=${(0, import_util_uri_escape.escapeUri)(value2)}`]),
-        []
-      ).sort().join("&");
+      serialized[encodedKey] = value.slice(0).reduce((encoded, value2) => encoded.concat([`${encodedKey}=${(0, import_util_uri_escape.escapeUri)(value2)}`]), []).sort().join("&");
     }
   }
-  return keys.map((key) => serialized[key]).filter((serialized2) => serialized2).join("&");
+  return keys.sort().map((key) => serialized[key]).filter((serialized2) => serialized2).join("&");
 }, "getCanonicalQuery");
 
 // src/getPayloadHash.ts

package/dist-es/getCanonicalQuery.js

@@ -3,24 +3,26 @@ import { SIGNATURE_HEADER } from "./constants";
 export const getCanonicalQuery = ({ query = {} }) => {
     const keys = [];
     const serialized = {};
-    for (const key of Object.keys(query).sort()) {
+    for (const key of Object.keys(query)) {
         if (key.toLowerCase() === SIGNATURE_HEADER) {
             continue;
         }
-        keys.push(key);
+        const encodedKey = escapeUri(key);
+        keys.push(encodedKey);
         const value = query[key];
         if (typeof value === "string") {
-            serialized[key] = `${escapeUri(key)}=${escapeUri(value)}`;
+            serialized[encodedKey] = `${encodedKey}=${escapeUri(value)}`;
         }
         else if (Array.isArray(value)) {
-            serialized[key] = value
+            serialized[encodedKey] = value
                 .slice(0)
-                .reduce((encoded, value) => encoded.concat([`${escapeUri(key)}=${escapeUri(value)}`]), [])
+                .reduce((encoded, value) => encoded.concat([`${encodedKey}=${escapeUri(value)}`]), [])
                 .sort()
                 .join("&");
         }
     }
     return keys
+        .sort()
         .map((key) => serialized[key])
         .filter((serialized) => serialized)
         .join("&");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smithy/signature-v4",
-  "version": "4.1.2",
+  "version": "4.1.4",
   "description": "A standalone implementation of the AWS Signature V4 request signing algorithm",
   "main": "./dist-cjs/index.js",
   "module": "./dist-es/index.js",
@@ -25,10 +25,10 @@
   "license": "Apache-2.0",
   "dependencies": {
     "@smithy/is-array-buffer": "^3.0.0",
-    "@smithy/protocol-http": "^4.1.2",
-    "@smithy/types": "^3.4.1",
+    "@smithy/protocol-http": "^4.1.3",
+    "@smithy/types": "^3.4.2",
     "@smithy/util-hex-encoding": "^3.0.0",
-    "@smithy/util-middleware": "^3.0.5",
+    "@smithy/util-middleware": "^3.0.6",
     "@smithy/util-uri-escape": "^3.0.0",
     "@smithy/util-utf8": "^3.0.0",
     "tslib": "^2.6.2"