test(e2e): tighten control character rejection oracle (#6561)

crates/e2e_test/src/special_chars_test.rs

@@ -28,6 +28,7 @@
 mod tests {
     use crate::common::{RustFSTestEnvironment, init_logging, local_http_client};
     use aws_sdk_s3::Client;
+    use aws_sdk_s3::error::ProvideErrorMetadata;
     use aws_sdk_s3::primitives::ByteStream;
     use http::StatusCode;
     use http::header::HOST;
@@ -731,12 +732,7 @@ mod tests {
         create_bucket(&client, bucket).await.expect("Failed to create bucket");
 
         // Test that control characters are rejected
-        let invalid_keys = vec![
+        let invalid_keys = ["file\0with\0null.txt", "file\nwith\nnewline.txt", "file\rwith\rcarriage.txt"];
-            "file\0with\0null.txt",
-            "file\nwith\nnewline.txt",
-            "file\rwith\rcarriage.txt",
-            "file\twith\ttab.txt", // Tab might be allowed, but let's test
-        ];
 
         for key in invalid_keys {
             info!("Testing rejection of control character in key: {:?}", key);
@@ -747,18 +743,28 @@ mod tests {
                 .key(key)
                 .body(ByteStream::from_static(b"test"))
                 .send()
-                .await;
+                .await
-
+                .expect_err("invalid control characters must be rejected by the server");
-            // Note: The validation happens on the server side, so we expect an error
+            assert_eq!(
-            // For null byte, newline, and carriage return
+                result.raw_response().map(|response| response.status().as_u16()),
-            if key.contains('\0') || key.contains('\n') || key.contains('\r') {
+                Some(400),
-                assert!(result.is_err(), "Control character should be rejected for key: {key:?}");
+                "control character must return HTTP 400 for key {key:?}: {result:?}"
-                if let Err(e) = result {
+            );
-                    info!("✅ Control character correctly rejected: {:?}", e);
+            assert_eq!(
-                }
+                result.as_service_error().and_then(ProvideErrorMetadata::code),
-            }
+                Some("InvalidArgument"),
+                "control character must return InvalidArgument for key {key:?}: {result:?}"
+            );
         }
 
+        let listed = client
+            .list_objects_v2()
+            .bucket(bucket)
+            .send()
+            .await
+            .expect("server must remain healthy after rejected requests");
+        assert!(listed.contents().is_empty(), "rejected requests must not create objects");
+
         // Cleanup
         env.stop_server();
         info!("Test completed successfully");