[ARROW-9859] [C++] S3 FileSystemFromUri with special char in secret key fails

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.0.0
• Component/s: C++, Documentation, Python
• Labels: pull-request-available
• External issue URL: https://github.com/apache/arrow/issues/25897
• Assignee: Antoine Pitrou
• Reporter: Neal Richardson
• Created: 25/Aug/20 20:42
• Updated: 11/Jan/23 08:09
• Resolved: 14/Sep/20 17:23

Description

S3 Secret access keys can contain special characters like /. When they do

1) FileSystemFromUri will fail to parse the URI unless you URL-encode them (e.g. replace / with %2F)
2) When you do escape the special characters, requests that require authorization fail with the message "The request signature we calculated does not match the signature you provided. Check your key and signing method." This may suggest that there's some extra URL encoding/decoding that needs to happen inside.

I was only able to work around this by generating a new access key that happened not to have special characters.

Issue Links

• links to: GitHub Pull Request #8185