You initiated a request carrying signature information in the Authorization header and URL parameter X-Tos-SignedHeaders, but the SignedHeaders in the signature does not include all x-tos-* headers.

PUT /objectName HTTP/1.1​
Host: <Bucket name>.<TOS endpoint>​
Date: GMT Date​
x-tos-content-sha256: abc***​
x-tos-date: 2022***​
Authorization: TOS4-HMAC-SHA256 Credential=testAK/20220322/cn-beijing/tos/request,SignedHeaders=host;x-tos-content-sha256,Signature=d40b66cf0054d1642843670d10fa095e1609c7896f25df217770b0abe717693b​

The SignedHeaders information in the above signature is SignedHeaders=host;x-tos-content-sha256, which does not include the x-tos-date request header.

Solution

Ensure the signature SignedHeaders includes all x-tos-* headers and that the signature is correctly calculated. For detailed instructions, see Signature Mechanism.

Last updated: 2025.10.11 17:59:36

Public security network record in Beijing: No. 11010802032137