fix: prefer exact key name match over canonical header form in condition lookup (#226)

harshavardhana · web-flow · commit cb1e01c9bc8b · 2026-04-09T08:23:27.000-07:00
getValuesByKey() currently tries http.CanonicalHeaderKey(name) before
the raw name. Reverse the order so that exact name matches take
precedence, falling back to canonical header form only when needed.
diff --git a/policy/condition/value.go b/policy/condition/value.go
@@ -28,10 +28,10 @@ import (
 
 func getValuesByKey(m map[string][]string, key Key) []string {
 	name := key.Name()
-	if values, found := m[http.CanonicalHeaderKey(name)]; found {
+	if values, found := m[name]; found {
 		return values
 	}
-	return m[name]
+	return m[http.CanonicalHeaderKey(name)]
 }
 
 // Splits an incoming path into bucket and object components.

Original file line number	Diff line number	Diff line change
`@@ -28,10 +28,10 @@ import (`
`28`	`28`
`29`	`29`	`func getValuesByKey(m map[string][]string, key Key) []string {`
`30`	`30`	`name := key.Name()`
`31`		`- if values, found := m[http.CanonicalHeaderKey(name)]; found {`
	`31`	`+ if values, found := m[name]; found {`
`32`	`32`	`return values`
`33`	`33`	`}`
`34`		`- return m[name]`
	`34`	`+ return m[http.CanonicalHeaderKey(name)]`
`35`	`35`	`}`
`36`	`36`
`37`	`37`	`// Splits an incoming path into bucket and object components.`