35665446476-1
83%

Ran 21 Sep 2026 11:10PM UTC

Jobs 1

Files 472

Run time 1min

Badge

Embed ▾

Committed 21 Sep 2026 10:59PM UTC coverage: 83.306%. Remained the same

Build # 35665446476-1

Build Type

push

github

Committed by

web-flow

Commit Message

fix(repo): sign RDS IAM auth tokens with an empty payload hash (#4025)

ExAws.Auth.presigned_url/9 signs S3's UNSIGNED-PAYLOAD marker when it is
given no body, so every RDS IAM token carried a signature over a canonical
request AWS never reproduces. RDS rejected each connection with
28P01 invalid_password ("The IAM authentication failed for the role") even
though the token parameters, the signing identity and its rds-db:connect
policy were all correct, which makes the failure read as a permissions
problem rather than a signing one.

Pass an empty body so the canonical request hashes "", which is what RDS
verifies against. The regression test re-signs the emitted token with an
independent SigV4 presign over the empty-payload hash and asserts the
signatures match.

Verified against a staging Aurora RDS Proxy: tokens minted with the empty
body authenticate, tokens minted without it are rejected.

Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>

Coverage Stats

15569 of 18689 relevant lines covered (83.31%)

1616.48 hits per line

Coverage Regressions

Lines	Coverage	∆	File
2	59.57	-4.26%	lib/logflare/sources/source/slack_hook_server/slack_hook_server.ex

Jobs

ID	Job ID	Ran	Files	Coverage
1	35665446476-1.1	21 Sep 2026 11:10PM UTC	472	83.31	GitHub Action Run

Logflare / logflare / 35665446476-1
83%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 35665446476-1

Logflare / logflare / 35665446476-1 83%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 35665446476-1

Logflare / logflare / 35665446476-1
83%

README BADGES
x