awschunk

Overview ¶

Package awschunk decodes the aws-chunked content encoding S3 clients use for streaming uploads. Three x-amz-content-sha256 modes produce it:

STREAMING-AWS4-HMAC-SHA256-PAYLOAD           signed chunks (SigV4 clients, aws-sdk-go v1 & v2)
STREAMING-AWS4-HMAC-SHA256-PAYLOAD-TRAILER   signed chunks + trailing checksum headers
STREAMING-UNSIGNED-PAYLOAD-TRAILER           unsigned chunks + trailers (aws-sdk-go-v2's default for plain HTTP)

The frame format is:

<hex-size>[;chunk-signature=<sig>]\r\n
<size bytes of payload>\r\n
...
0[;chunk-signature=<sig>]\r\n
[trailer-header: value\r\n ...]
[x-amz-trailer-signature: sig\r\n]
\r\n

Chunk signatures are parsed and discarded (doze-aws never verifies signatures); trailers are captured and exposed after EOF so the S3 layer can check declared checksums.