You sent a request with a signature in the Authorization header, but the signature format in the Authorization header is incorrect. For example, when splitting the SignedHeaders information of the signature by an equal sign (=), the array length is not 2 or the first element is not SignedHeaders.

GET /objectName HTTP/1.1​
Host: <Bucket name>.<TOS endpoint>​
Date: GMT Date​
x-tos-content-sha256: abc***​
x-tos-date: 2022***​
Authorization: TOS4-HMAC-SHA256 Credential=testAK/20220322/cn-beijing/tos/request,SignedHeaders=host=x-tos-content-sha256;x-tos-date,Signature=d40b66cf0054d1642843670d10fa095e1609c7896f25df217770b0abe717693b​

The SignedHeaders information in the above signature is SignedHeaders=host=x-tos-content-sha256;x-tos-date, and the array length after splitting by equal sign (=) is 3.

Solution

Calculate the signature correctly. For detailed operations, refer to the Signature Mechanism.

Last updated: 2025.10.11 17:59:36

Public security network record in Beijing: No. 11010802032137