Bug: OSS CallbackFailed with Code 401 (Only in 4.10.0) #3038
Description
Only exist in version == 4.10.0-(Pro), version <= 4.9.2-(Pro) is okey. 网页端直传，未启用文件加密。
<?xml version="1.0" encoding="UTF-8"?>
<Error>
<Code>CallbackFailed</Code>
<Message>Error status : 401.</Message>
<RequestId>6917159B17489974D4EBD664</RequestId>
<HostId>XXXXX.oss-accelerate.aliyuncs.com</HostId>
<EC>0007-00000203</EC>
<RecommendDoc>https://api.aliyun.com/troubleshoot?q=0007-00000203</RecommendDoc>
</Error>
Log:
[Debug] 2025-11-14 19:51:38 [/home/vsts/work/1/s/inventory/client.go:132] [Cid: d7be81a7-e015-437b-b539-4cb23c3b0277] driver.Query: query=SELECT `groups`.`id`, `groups`.`created_at`, `groups`.`updated_at`, `groups`.`deleted_at`, `groups`.`name`, `groups`.`max_storage`, `groups`.`speed_limit`, `groups`.`permissions`, `groups`.`settings` FROM `groups` WHERE `groups`.`id` = ? AND `groups`.`deleted_at` IS NULL LIMIT 1 args=[3] time=2.773273ms
[Debug] 2025-11-14 19:51:38 [/home/vsts/work/1/s/inventory/client.go:132] [Cid: d7be81a7-e015-437b-b539-4cb23c3b0277] driver.Query: query=SELECT `users`.`id`, `users`.`created_at`, `users`.`updated_at`, `users`.`deleted_at`, `users`.`email`, `users`.`nick`, `users`.`password`, `users`.`status`, `users`.`storage`, `users`.`two_factor_secret`, `users`.`avatar`, `users`.`settings`, `users`.`credit`, `users`.`group_expires`, `users`.`notify_date`, `users`.`group_users`, `users`.`previous_group`, `users`.`unmanaged_email` FROM `users` WHERE (`users`.`id` = ? AND `users`.`status` = ?) AND `users`.`deleted_at` IS NULL LIMIT 1 args=[1 active] time=2.372424ms
[Debug] 2025-11-14 19:51:38 [/home/vsts/work/1/s/inventory/client.go:132] [Cid: d7be81a7-e015-437b-b539-4cb23c3b0277] driver.Query: query=SELECT `groups`.`id`, `groups`.`created_at`, `groups`.`updated_at`, `groups`.`deleted_at`, `groups`.`name`, `groups`.`max_storage`, `groups`.`speed_limit`, `groups`.`permissions`, `groups`.`settings` FROM `groups` WHERE `groups`.`id` IN (?) AND `groups`.`deleted_at` IS NULL args=[1] time=2.057871ms
[Debug] 2025-11-14 19:51:38 [/home/vsts/work/1/s/middleware/auth.go:254] [Cid: d7be81a7-e015-437b-b539-4cb23c3b0277] Failed to verify callback request: crypto/rsa: 512-bit keys are insecure (see https://go.dev/pkg/crypto/rsa#hdr-Minimum_key_size)
[Info] 2025-11-14 19:51:38 [/home/vsts/work/1/s/pkg/logging/logger.go:193] [Cid: d7be81a7-e015-437b-b539-4cb23c3b0277] [Incoming] 401 | 10.718337ms | XXXXX | POST "/api/v4/callback/oss/392a12d0-9916-416f-b527-f6424e039098/QABpWhYGnKcKmv7L0uP23qGNJdLMXyBY"