Incorrect processing of signed payload in pre-signed URL

[MNV]

According to this issue #1392 I've found some problem with checksum providing ContentSha256 param in command for creating pre-signed URL.
I think the problem in getPresignedPayload() method (https://github.com/jeskew/aws-sdk-php/blob/4e29e28494f8dc69c2ae1b34a0a658e8ed9537fe/src/Signature/S3SignatureV4.php#L53) which always returns UNSIGNED-PAYLOAD that doesn't match real body content of the uploading file.

[kstich]

What are you trying to sign the contents of a pre-signed upload URL for? Having a signed body for a pre-signed upload URL would mean that the consumer of the pre-signed URL would have to upload contents with the same signature - you'd have to know what they're going to upload when generating the URL. Using the UNSIGNED-PAYLOAD allows the consumer to upload whatever contents they wish to the file. You can read more about pre-signed upload URLs here.

[MNV]

In this issue, there is a discussion (#1392 (comment)) about providing ContentSha256 hash generating pre-signed URL to allow the server to know what they are going to upload.
I would like to pass the checksum to the server to generate the URL for uploading and check that client tries to upload the same file for which pre-signed URL was given (#1392 (comment)).

[MNV]

@kstich Have you planned to explore this problem? Do you need any extra information and details?

[abiodunjames]

I'm facing this issue currently

[zhangtao0509]

I hope that through signature in advance the way to let the client to complete shard upload (https://docs.amazonaws.cn/general/latest/gr/sigv4-create-canonical-request.html), but the return to upload address, UploadId/partNumber/unsigned-payload/unsigned-payload

Here is my request:
https://s3.cn-northwest-1.amazonaws.com.cn/huami-test-bucket/MOTION_TRAIL_DATA/com.huami.shushan/1024659869/mitiply.csv? X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Date=20220617T075740Z&X-Amz-SignedHeaders=host&X-Amz-Expires=5999&X-Amz-Credentia l=AKIAXHRFPTBEGKPN6JNM%2F20220617%2Fcn-northwest-1%2Fs3%2Faws4_request&X-Amz-Signature=bdf7a8bc269d81d12c70630f830e5c9b0 946e93c065ab49f2dd320651fdbd657&uploadId=r46CauG53p1BPdTYmdkPprN0RWixDKwCU1dxCehNdPGG9Sywcg3l9._ACtxb6p3Un38j6wGCAozi6YL zjLQN8Pb4sc764wNI6_OE7MyE_w7ZB6iBwZIEVLMzcOw9psYS&partNumber=1