我正在尝试获得一个内置的,允许用户直接上传文件到我的亚马逊S3存储桶,从NodeJS供电的网站。除了之外,似乎唯一的教程都非常过时了。
我一直在关注,以获取基本信息,但它再次过时了。它没有正确调用crypto
的方法,因为它试图将一个原始的JavaScript对象传递给update
方法,该方法会抛出一个错误,因为它不是字符串或缓冲区。
我也一直在寻找的源代码。它没有内置的POST支持--这我完全理解,因为一旦它有了正确的字段,它就会由浏览器来做POST。Knox似乎确实有正确的代码来签署保单,我已经尝试在此基础上让我的代码正常工作……但同样无济于事。
这是我想出的代码。它生成一个base64编码的策略,并创建一个签名...但根据亚马逊的说法,当我尝试上传文件时,这是错误的签名。
var crypto = require("crypto");
var config = require("../../amazonConfig.json");
exports.createS3Policy = function(callback) {
var date = new Date();
var s3Policy = {
"expiration": "2014-12-01T12:00:00.000Z",
"conditions": [
{"acl": "public-read"},
["content-length-range", 0, 2147483648],
{"bucket": "signalleaf"},
["starts-with", "$Cache-Control", ""],
["starts-with", "$Content-Type", ""],
["starts-with", "$Content-Disposition", ""],
["starts-with", "$Content-Encoding", ""],
["starts-with", "$Expires", ""],
["starts-with", "$key", "/myfolder/"],
{"success_action_redirect": "http://example.com/uploadsuccess"},
]
};
var stringPolicy = JSON.stringify(s3Policy).toString("utf-8");
var buffer = Buffer(stringPolicy, "utf-8");
var encoded = buffer.toString("base64");
var signature = crypto.createHmac("sha1", config.secretKey)
.update(new Buffer(stringPolicy, "utf-8")).digest("base64");
var s3Credentials = {
s3PolicyBase64: encoded,
s3Signature: signature
};
GLOBAL.s3creds = s3Credentials;
callback(s3Credentials);
};
在这里,我显然做错了什么。但我不知道是什么。有人能帮我找出我做错了什么吗?我的问题在哪里?有没有人有一个实用教程,教你如何从NodeJS v0.10.x生成适当的亚马逊S3策略和签名,以便将帖子发布到s3 REST api?
发布于 2013-08-28 10:03:11
好了,我终于想明白了。在玩了很长一段时间的随机猜测游戏后,我对自己说
“也许我需要签署base64编码策略”- me
BAM就是这样。
我还对条件进行了重新排序,以匹配表单的发布方式,尽管我不确定这是否会有所不同。
var crypto = require("crypto");
var config = require("../../amazonConfig.json");
exports.createS3Policy = function(contentType, callback) {
var date = new Date();
var s3Policy = {
"expiration": "2014-12-01T12:00:00.000Z", // hard coded for testing
"conditions": [
["starts-with", "$key", "somefolder/"],
{"bucket": "my-bucket-name"},
{"acl": "public-read"},
["starts-with", "$Content-Type", contentType],
{"success_action_redirect": "http://example.com/uploadsuccess"},
]
};
// stringify and encode the policy
var stringPolicy = JSON.stringify(s3Policy);
var base64Policy = Buffer(stringPolicy, "utf-8").toString("base64");
// sign the base64 encoded policy
var signature = crypto.createHmac("sha1", config.secretKey)
.update(new Buffer(base64Policy, "utf-8")).digest("base64");
// build the results object
var s3Credentials = {
s3Policy: base64Policy,
s3Signature: signature
};
// send it back
callback(s3Credentials);
};
希望这能帮助其他遇到同样问题的人。
发布于 2015-09-26 16:49:47
我修改了前面的一个例子,因为它对我不起作用: amazon返回了一个关于签名损坏的错误。
以下是如何使用POST为基于浏览器的上传创建签名(AWS签名版本4)
http://docs.aws.amazon.com/AmazonS3/latest/API/sigv4-authentication-HTTPPOST.html
var CryptoJS = require("crypto-js");
var accessKeyID = "PUT YOUR DATA";
var secretAccessKey = "PUT YOUR DATA";
var bucket = "PUT YOUR BUCKET NAME";
var region = "eu-central-1"; // overwrite with your region
var folder = "users/"; // overwrite with your folder
var expiration = "2015-09-28T12:00:00.000Z"; // overwrite date
var date = "20150927"; // overwrite date
var serviceName = "s3";
function getSignatureKey(key, dateStamp, regionName, serviceName) {
var kDate = CryptoJS.HmacSHA256(dateStamp, "AWS4" + key);
var kRegion = CryptoJS.HmacSHA256(regionName, kDate);
var kService = CryptoJS.HmacSHA256(serviceName, kRegion);
var kSigning = CryptoJS.HmacSHA256("aws4_request", kService);
return kSigning;
}
var s3Policy = {"expiration": expiration,
"conditions": [
{"bucket": bucket},
["starts-with", "$key", folder],
{"acl": "public-read"},
["starts-with", "$Content-Type", "image/"],
{"x-amz-meta-uuid": "14365123651274"},
["starts-with", "$x-amz-meta-tag", ""],
{"x-amz-credential": accessKeyID + "/" + date + "/" + region + "/" + serviceName +"/aws4_request"},
{"x-amz-algorithm": "AWS4-HMAC-SHA256"},
{"x-amz-date": date + "T000000Z" }
]
};
var base64Policy = new Buffer(JSON.stringify(s3Policy), "utf-8").toString("base64");
console.log('base64Policy:', base64Policy);
var signatureKey = getSignatureKey(secretAccessKey, date, region, serviceName);
var s3Signature = CryptoJS.HmacSHA256(base64Policy, signatureKey).toString(CryptoJS.enc.Hex);
console.log('s3Signature:', s3Signature);
接下来生成我在表单中用于上传的base64Policy和s3Signature。示例如下:http://docs.aws.amazon.com/AmazonS3/latest/API/sigv4-post-example.html
非常重要的是要检查在html表单和您的策略中是否有相同的字段和值。
发布于 2016-05-12 16:22:02
我仍然有问题,所以我解决了它们,并在这里发布了我的解决方案:
https://github.com/nikkwong/ng2-s3-uploader
简而言之,如果您在构建签名时遵循scabbiaza的答案,请确保构建表单如下所示:
let formData = new FormData;
formData.append('acl', xAmzAcl);
formData.append('Content-Type', file.type);
formData.append('X-Amz-Date', xAmzDate);
formData.append('x-amz-server-side-encryption', xAmzServerSideEncryption);
formData.append('x-amz-meta-uuid', xAmzMetaUuid);
formData.append('X-Amz-Algorithm', xAmzAlgorithm);
formData.append('X-Amz-Credential', xAmzCredential);
formData.append('X-Amz-Signature', s3Signature);
formData.append('Policy', base64Policy);
formData.append('key', folder + '/' + file.name);
// File field must come last!
formData.append('file', file);
https://stackoverflow.com/questions/18476217
复制相似问题