mirror of
https://github.com/zulip/zulip.git
synced 2025-10-23 04:52:12 +00:00
All `X-amz-*` headers must be included in the signed request to S3; since Django did not take those headers into account (it constructed a request from scratch, while nginx's request inherits them from the end-user's request), the proxied request fails to be signed correctly. Strip off the `X-amz-cf-id` header added by CloudFront. While we would ideally strip off all `X-amz-*` headers, this requires a third-party module[^1]. [^1]: https://github.com/openresty/headers-more-nginx-module#more_clear_input_headers