Don't pass payload to CRT if stream signing

Author: dagnir

core/http-auth-aws/src/main/java/software/amazon/awssdk/http/auth/aws/crt/internal/signer/DefaultAwsCrtV4aHttpSigner.java

@@ -269,7 +269,13 @@ private static CompletableFuture<AsyncSignedRequest> doSignAsync(AsyncSignReques
                               // We disallow unknown content length on the async path
                               long contentLength = getDecodedContentLengthOrThrow(requestToSign);
 
-                              HttpRequest crtRequest = toCrtRequest(requestToSign, requestPayload, contentLength);
+                              HttpRequest crtRequest;
+                              // If it's a streaming payload, don't pass the payload to CRT. We're handling streaming signing.
+                              if (isStreamingSha256(requestToSign)) {
+                                  crtRequest = toCrtRequest(requestToSign, null, 0L);
+                              } else {
+                                  crtRequest = toCrtRequest(requestToSign, requestPayload, contentLength);
+                              }
 
                               V4aRequestSigningResult requestSigningResult = sign(requestToSign, crtRequest, signingConfig);
 
@@ -324,4 +330,10 @@ private static PayloadChecksumStore checksumStore(BaseSignRequest<?, ?> request)
         }
         return cache;
     }
+
+    private static boolean isStreamingSha256(SdkHttpRequest request) {
+        return request.firstMatchingHeader("x-amz-content-sha256")
+                      .map(s -> s.startsWith("STREAMING"))
+                      .orElse(false);
+    }
 }