|
49 | 49 | from pyiceberg.transforms import IdentityTransform, TruncateTransform |
50 | 50 | from pyiceberg.typedef import RecursiveDict |
51 | 51 | from pyiceberg.utils.config import Config |
| 52 | +from requests import Request |
52 | 53 |
|
53 | 54 | TEST_URI = "https://iceberg-test-catalog/" |
54 | 55 | TEST_CREDENTIALS = "client:secret_with:colon" |
@@ -451,6 +452,61 @@ def test_list_tables_200_sigv4(rest_mock: Mocker) -> None: |
451 | 452 | assert rest_mock.called |
452 | 453 |
|
453 | 454 |
|
| 455 | +def test_sigv4_sign_request_without_body(rest_mock: Mocker) -> None: |
| 456 | + existing_token = "existing_token" |
| 457 | + from pyiceberg.catalog.rest import EMPTY_BODY_SHA256 |
| 458 | + |
| 459 | + catalog = RestCatalog( |
| 460 | + "rest", |
| 461 | + **{ |
| 462 | + "uri": TEST_URI, |
| 463 | + "token": existing_token, |
| 464 | + "rest.sigv4-enabled": "true", |
| 465 | + "rest.signing-region": "us-west-2", |
| 466 | + "client.access-key-id": "id", |
| 467 | + "client.secret-access-key": "secret", |
| 468 | + }, |
| 469 | + ) |
| 470 | + |
| 471 | + prepared = catalog._session.prepare_request(Request("GET", f"{TEST_URI}v1/config")) # pylint: disable=W0212 |
| 472 | + adapter = catalog._session.adapters[catalog.uri] # pylint: disable=W0212 |
| 473 | + adapter.add_headers(prepared) |
| 474 | + |
| 475 | + assert prepared.headers["Authorization"].startswith("AWS4-HMAC-SHA256") |
| 476 | + assert prepared.headers["Original-Authorization"] == f"Bearer {existing_token}" |
| 477 | + assert prepared.headers["x-amz-content-sha256"] == EMPTY_BODY_SHA256 |
| 478 | + |
| 479 | +def test_sigv4_sign_request_with_body(rest_mock: Mocker) -> None: |
| 480 | + existing_token = "existing_token" |
| 481 | + from pyiceberg.catalog.rest import EMPTY_BODY_SHA256 |
| 482 | + |
| 483 | + catalog = RestCatalog( |
| 484 | + "rest", |
| 485 | + **{ |
| 486 | + "uri": TEST_URI, |
| 487 | + "token": existing_token, |
| 488 | + "rest.sigv4-enabled": "true", |
| 489 | + "rest.signing-region": "us-west-2", |
| 490 | + "client.access-key-id": "id", |
| 491 | + "client.secret-access-key": "secret", |
| 492 | + }, |
| 493 | + ) |
| 494 | + |
| 495 | + prepared = catalog._session.prepare_request( # pylint: disable=W0212 |
| 496 | + Request( |
| 497 | + "POST", |
| 498 | + f"{TEST_URI}v1/namespaces", |
| 499 | + data={"namespace": "asdfasd"}, |
| 500 | + ) |
| 501 | + ) |
| 502 | + adapter = catalog._session.adapters[catalog.uri] # pylint: disable=W0212 |
| 503 | + adapter.add_headers(prepared) |
| 504 | + |
| 505 | + assert prepared.headers["Authorization"].startswith("AWS4-HMAC-SHA256") |
| 506 | + assert prepared.headers["Original-Authorization"] == f"Bearer {existing_token}" |
| 507 | + assert prepared.headers.get("x-amz-content-sha256") != EMPTY_BODY_SHA256 |
| 508 | + |
| 509 | + |
454 | 510 | def test_list_tables_404(rest_mock: Mocker) -> None: |
455 | 511 | namespace = "examples" |
456 | 512 | rest_mock.get( |
|
0 commit comments