forked from TrueCloudLab/distribution
105 lines
2.7 KiB
Go
105 lines
2.7 KiB
Go
package oss
|
|
|
|
import (
|
|
"github.com/denverdino/aliyungo/util"
|
|
//"log"
|
|
"net/http"
|
|
"net/url"
|
|
"sort"
|
|
"strings"
|
|
)
|
|
|
|
const HeaderOSSPrefix = "x-oss-"
|
|
|
|
var ossParamsToSign = map[string]bool{
|
|
"acl": true,
|
|
"delete": true,
|
|
"location": true,
|
|
"logging": true,
|
|
"notification": true,
|
|
"partNumber": true,
|
|
"policy": true,
|
|
"requestPayment": true,
|
|
"torrent": true,
|
|
"uploadId": true,
|
|
"uploads": true,
|
|
"versionId": true,
|
|
"versioning": true,
|
|
"versions": true,
|
|
"response-content-type": true,
|
|
"response-content-language": true,
|
|
"response-expires": true,
|
|
"response-cache-control": true,
|
|
"response-content-disposition": true,
|
|
"response-content-encoding": true,
|
|
}
|
|
|
|
func (client *Client) signRequest(request *request) {
|
|
query := request.params
|
|
|
|
urlSignature := query.Get("OSSAccessKeyId") != ""
|
|
|
|
headers := request.headers
|
|
contentMd5 := headers.Get("Content-Md5")
|
|
contentType := headers.Get("Content-Type")
|
|
date := ""
|
|
if urlSignature {
|
|
date = query.Get("Expires")
|
|
} else {
|
|
date = headers.Get("Date")
|
|
}
|
|
|
|
resource := request.path
|
|
if request.bucket != "" {
|
|
resource = "/" + request.bucket + request.path
|
|
}
|
|
params := make(url.Values)
|
|
for k, v := range query {
|
|
if ossParamsToSign[k] {
|
|
params[k] = v
|
|
}
|
|
}
|
|
|
|
if len(params) > 0 {
|
|
resource = resource + "?" + util.Encode(params)
|
|
}
|
|
|
|
canonicalizedResource := resource
|
|
|
|
_, canonicalizedHeader := canonicalizeHeader(headers)
|
|
|
|
stringToSign := request.method + "\n" + contentMd5 + "\n" + contentType + "\n" + date + "\n" + canonicalizedHeader + canonicalizedResource
|
|
|
|
//log.Println("stringToSign: ", stringToSign)
|
|
signature := util.CreateSignature(stringToSign, client.AccessKeySecret)
|
|
|
|
if query.Get("OSSAccessKeyId") != "" {
|
|
query.Set("Signature", signature)
|
|
} else {
|
|
headers.Set("Authorization", "OSS "+client.AccessKeyId+":"+signature)
|
|
}
|
|
}
|
|
|
|
//Have to break the abstraction to append keys with lower case.
|
|
func canonicalizeHeader(headers http.Header) (newHeaders http.Header, result string) {
|
|
var canonicalizedHeaders []string
|
|
newHeaders = http.Header{}
|
|
|
|
for k, v := range headers {
|
|
if lower := strings.ToLower(k); strings.HasPrefix(lower, HeaderOSSPrefix) {
|
|
newHeaders[lower] = v
|
|
canonicalizedHeaders = append(canonicalizedHeaders, lower)
|
|
} else {
|
|
newHeaders[k] = v
|
|
}
|
|
}
|
|
|
|
sort.Strings(canonicalizedHeaders)
|
|
|
|
var canonicalizedHeader string
|
|
|
|
for _, k := range canonicalizedHeaders {
|
|
canonicalizedHeader += k + ":" + headers.Get(k) + "\n"
|
|
}
|
|
return newHeaders, canonicalizedHeader
|
|
}
|