Skip to content

fix operations with optional auth - #3932

Open
sbiscigl wants to merge 1 commit into
mainfrom
fix-noauth
Open

sbiscigl wants to merge 1 commit into
mainfrom
fix-noauth

Conversation

@sbiscigl

Copy link
Copy Markdown
Collaborator

Description of changes:

(#3751), merged 2026-03-25 and shipped in 1.11.777, consolidated per-operation MakeRequest calls into a shared InvokeServiceOperation helper that hardcoded SIGV4_SIGNER, which wrongly SigV4-signed operations that must be unsigned or bearer and broke IdC browser auth. along with sso, sts, cognito-identity, cognito-idp, signin, and codecatalyst. The fix threads the model-derived signerName.

Check all that applies:

  • Did a review by yourself.
  • Added proper tests to cover this PR. (If tests are not applicable, explain.)
  • Checked if this PR is a breaking (APIs have been changed) change.
  • Checked if this PR will not introduce cross-platform inconsistent behavior.
  • Checked if this PR would require a ReadMe/Wiki update.

Check which platforms you have built SDK on to verify the correctness of this PR.

  • Linux
  • Windows
  • Android
  • MacOS
  • IOS
  • Other Platforms

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

@sbiscigl
sbiscigl marked this pull request as ready for review September 21, 2026 16:45
#if($operation.signerName == "Aws::Auth::SIGV4_SIGNER")
#set($signerArg = "")
#else
#set($signerArg = ", ${operation.signerName}")

@kai-ion kai-ion Sep 22, 2026

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

is there a chance operation.signerName has a value of " "?

If so I think we can add an extra guard for empty value

@sbiscigl sbiscigl Sep 22, 2026

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If so I think we can add an extra guard for empty value

what do you mean extra guard? if singer is missing is in a invalid state. if signer is missing, i.e. empty value, compilation should fail, and it will because , ) is not valid code?

the same could be said about any string variable in codegen. they all could be empty, and all of them result in compilation errors before the SDK is published

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants