From 06b10b7e2b7b10bdc0180cf4724946a146373192 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E6=B2=A1=E6=9C=89=E5=B0=8F=E5=90=8D=E7=9A=84=E6=9B=B2?=
 <951012707@qq.com>
Date: Sat, 15 Nov 2025 23:08:22 +0800
Subject: [PATCH] fix(s3api): Skip space after "AWS" prefix (+1 offset)

---
 weed/s3api/auth_signature_v2.go | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/weed/s3api/auth_signature_v2.go b/weed/s3api/auth_signature_v2.go
index d204d3971..7af400bc8 100644
--- a/weed/s3api/auth_signature_v2.go
+++ b/weed/s3api/auth_signature_v2.go
@@ -178,7 +178,7 @@ func validateV2AuthHeader(v2Auth string) (accessKey string, errCode s3err.ErrorC
 	}
 
 	// Strip off the Algorithm prefix.
-	v2Auth = v2Auth[len(signV2Algorithm):]
+	v2Auth = v2Auth[len(signV2Algorithm)+1:]
 	authFields := strings.Split(v2Auth, ":")
 	if len(authFields) != 2 {
 		return "", s3err.ErrMissingFields
@@ -194,7 +194,7 @@ func validateV2AuthHeader(v2Auth string) (accessKey string, errCode s3err.ErrorC
 		return "", s3err.ErrMissingFields
 	}
 
-	return strings.TrimLeft(authFields[0], " "), s3err.ErrNone
+	return authFields[0], s3err.ErrNone
 }
 
 // signatureV2 - calculates signature version 2 for request.