adding two more headers to filter

Author: TingDaoK

include/aws/http/private/http_impl.h

@@ -67,6 +67,8 @@ enum aws_http_header_name {
     AWS_HTTP_HEADER_UPGRADE,
     AWS_HTTP_HEADER_KEEP_ALIVE,
     AWS_HTTP_HEADER_PROXY_CONNECTION,
+    AWS_HTTP_HEADER_SIGNING_SECURITY_TOKEN,
+    AWS_HTTP_HEADER_SIGNING_S3SESSION_TOKEN,
 
     AWS_HTTP_HEADER_COUNT, /* Number of enums */
 };

source/h1_stream.c

@@ -440,6 +440,9 @@ struct aws_h1_stream *aws_h1_stream_new_request(
         enum aws_http_header_name name_enum = aws_http_str_to_header_name(header.name);
         switch (name_enum) {
             case AWS_HTTP_HEADER_AUTHORIZATION:
+            case AWS_HTTP_HEADER_SIGNING_SECURITY_TOKEN:
+            case AWS_HTTP_HEADER_SIGNING_S3SESSION_TOKEN:
+                /* TODO: move the filter to SDKs, not the http client. */
                 /* Sensitive header, do not log the value of the header */
                 AWS_LOGF_TRACE(
                     AWS_LS_HTTP_STREAM,

source/h2_stream.c

@@ -774,6 +774,9 @@ int aws_h2_stream_on_activated(struct aws_h2_stream *stream, enum aws_h2_stream_
                 aws_raise_error(AWS_ERROR_HTTP_INVALID_HEADER_FIELD);
                 goto error;
             case AWS_HTTP_HEADER_AUTHORIZATION:
+            case AWS_HTTP_HEADER_SIGNING_SECURITY_TOKEN:
+            case AWS_HTTP_HEADER_SIGNING_S3SESSION_TOKEN:
+                /* TODO: move the filter to SDKs, not the http client. */
                 /* Sensitive header, do not log the value of the header */
                 AWS_H2_STREAM_LOGF(TRACE, stream, "Sending header: " PRInSTR ": ***", AWS_BYTE_CURSOR_PRI(header.name));
                 break;

source/http.c

@@ -339,6 +339,8 @@ static void s_headers_init(struct aws_allocator *alloc) {
     s_header_enum_to_str[AWS_HTTP_HEADER_UPGRADE] = aws_byte_cursor_from_c_str("upgrade");
     s_header_enum_to_str[AWS_HTTP_HEADER_KEEP_ALIVE] = aws_byte_cursor_from_c_str("keep-alive");
     s_header_enum_to_str[AWS_HTTP_HEADER_PROXY_CONNECTION] = aws_byte_cursor_from_c_str("proxy-connection");
+    s_header_enum_to_str[AWS_HTTP_HEADER_SIGNING_SECURITY_TOKEN] = aws_byte_cursor_from_c_str("x-amz-security-token");
+    s_header_enum_to_str[AWS_HTTP_HEADER_SIGNING_S3SESSION_TOKEN] = aws_byte_cursor_from_c_str("x-amz-s3session-token");
 
     s_init_str_to_enum_hash_table(
         &s_header_str_to_enum,