getSignedUrl - SignatureDoesNotMatch wit SSE-C encryption

[binhleon]

Face issue SignatureDoesNotMatch when apply SSE-C encryption. I don't know where issue can be.
I check the file on bucket it show error instead algorithm encryption

file not working
Server-side encryption settings
[https://imgur.com/X47ylLh](url)

file working
Server-side encryption settings
Encryption key type
Amazon S3-managed keys (SSE-S3)

my headers when send request

{
  'content-type': 'multipart/form-data',
  filename: 'Microsoft Access Database.accdb',
  'x-force-scan': '0',
  'x-source': 'postman',
  'x-amz-server-side-encryption-customer-algorithm': 'AES256',
  'x-amz-server-side-encryption-customer-key': '316337137A73A01C28D81779C19B6AE2'
}

params

{
  Expires: 86400,
  Key: 'dt=220816/AmaEJ0pRR',
  Bucket: $BUCKET_PATH,
  SSECustomerAlgorithm: 'AES256',
  SSECustomerKey: '316337137A73A01C28D81779C19B6AE2'
}

s3.getSignedUrl(type, params, (error, data) => {
   error ? reject(error) : resolve(data);
});

LINK after generate

https://s3.us-west-2.amazonaws.com/$BUCKET_PATH/dt%3D220816/4gMwA7Ch_?
X-Amz-Algorithm=AWS4-HMAC-SHA256
&X-Amz-Credential=$AWS_CREDENTIAL%2F20220816%2Fus-west-2%2Fs3%2Faws4_request
&X-Amz-Date=20220816T022950Z
&X-Amz-Expires=86400
&X-Amz-Signature=c153833468896e1ec8cc303e82b99dfc0754526536aa37f0509dc90944eb23fd
&X-Amz-SignedHeaders=host%3Bx-amz-server-side-encryption-customer-algorithm%3Bx-amz-server-side-encryption-customer-key%3Bx-amz-server-side-encryption-customer-key-md5
&x-amz-server-side-encryption-customer-algorithm=AES256
&x-amz-server-side-encryption-customer-key=MzE2MzM3MTM3QTczQTAxQzI4RDgxNzc5QzE5QjZBRTI%3D
&x-amz-server-side-encryption-customer-key-MD5=2%2Bx2xGmYHQcvQfRcTwmKsQ%3D%3D

[ajredniwja]

Hey @binhleon thanks for opening this discussion, can you please share minimal code to reproduce the issue?

[github-actions[bot]]

Hello! Reopening this discussion to make it searchable.