Re: [I] bug: aws-lambda plugin with IAM auth fails with URL-encoded query parameters [apisix]
kayx23 commented on issue #11097: URL: https://github.com/apache/apisix/issues/11097#issuecomment-2064329613 Meanwhile strangely I seem to be getting `400 Bad Request` for everything... this is the URL encoded example OP mentioned:  Every request returned 400 and I'm quite baffled why. I also randomly changed secret key to a wrong value and lambda function endpoint. I expected to see different errors but all led to `400 Bad Request` with no further details on APISIX's log. This is my config:  So I suspected the error came from upstream and specifically, due to CORS; because the lambda function worked fine when I tested on the AWS Console. The CORS setting was updated to allow all origins for the function URL:  Unfortunately this didn't help either. @deiwin Wondering if you have ever seen this issue before? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: notifications-unsubscr...@apisix.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [I] bug: aws-lambda plugin with IAM auth fails with URL-encoded query parameters [apisix]
deiwin commented on issue #11097: URL: https://github.com/apache/apisix/issues/11097#issuecomment-2045362638 Thanks @shreemaan-abhishek, created https://github.com/apache/apisix/issues/11137 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: notifications-unsubscr...@apisix.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [I] bug: aws-lambda plugin with IAM auth fails with URL-encoded query parameters [apisix]
shreemaan-abhishek commented on issue #11097: URL: https://github.com/apache/apisix/issues/11097#issuecomment-2040890019 > I'd need it to support [IAM roles for service accounts](https://docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts.html), which it currently doesn't. If this is a separate feature, please create an issue describing this feature request, then we can move forward with whether or not we should have it. After that we can return to this issue. WDYT? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: notifications-unsubscr...@apisix.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [I] bug: aws-lambda plugin with IAM auth fails with URL-encoded query parameters [apisix]
deiwin commented on issue #11097: URL: https://github.com/apache/apisix/issues/11097#issuecomment-2035736853 Okay, maybe that wasn't a great library to suggest, as it's in JS and whatnot. But would the addition of https://github.com/Kong/lua-resty-aws be acceptable? This could be used for getting the credentials (defaulting to env variables, EKS pod identity, EC2 identity, etc) and the existing code could be kept for the signing logic. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: notifications-unsubscr...@apisix.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [I] bug: aws-lambda plugin with IAM auth fails with URL-encoded query parameters [apisix]
deiwin commented on issue #11097: URL: https://github.com/apache/apisix/issues/11097#issuecomment-2024665462 Thanks! @shreemaan-abhishek, do you know if a PR would be accepted if it also introduced the usage of the [nginxinc/nginx-aws-signature](https://github.com/nginxinc/nginx-aws-signature) library? I'm asking because for me to be able to actually use the `aws-lambda` plugin I'd need it to support [IAM roles for service accounts](https://docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts.html), which it currently doesn't. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: notifications-unsubscr...@apisix.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
Re: [I] bug: aws-lambda plugin with IAM auth fails with URL-encoded query parameters [apisix]
shreemaan-abhishek commented on issue #11097: URL: https://github.com/apache/apisix/issues/11097#issuecomment-2024385718 welcome to raise a PR to fix this! -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: notifications-unsubscr...@apisix.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
