vpruthi/doc-exports
1
0
Fork 0
forked from docs/doc-exports
Code Pull Requests Activity
doc-exports/docs/obs/api-ref/obs_04_0011.html
zhangyue 7d2a7ec198 OBS API DOC 
Reviewed-by: Sabelnikov, Dmitriy <dmitriy.sabelnikov@t-systems.com>
Co-authored-by: zhangyue <zhangyue164@huawei.com>
Co-committed-by: zhangyue <zhangyue164@huawei.com>
2024-11-05 16:37:11 +00:00

677 lines
92 KiB
HTML
Raw Permalink Blame History

<a name="obs_04_0011"></a><a name="obs_04_0011"></a>
<h1 class="topictitle1">Authentication of Signature in a URL</h1>
<div id="body392368"><p class="msonormal" id="obs_04_0011__p46290527">You can create a presigned URL for a specific operation. This kind of URL includes the user AK, signature, validity period, resources and other information. It allows any user who gets it to perform the specified operation (such as download) as if they are its creator. Presigned URLs enable authentication without secret access keys. Such URLs, however, must be used before expiration.</p>
<p class="msonormal" id="obs_04_0011__p13961561">A request with a presigned URL is formed as follows:</p>
<pre class="screen" id="obs_04_0011__screen58545191">GET /ObjectKey?AccessKeyId=AccessKeyID&amp;Expires=ExpiresValue&amp;Signature=signature HTTP/1.1
Host: bucketname.obs.<em id="obs_04_0011__i317311376538">region</em>.example.com</pre>
<p class="msonormal" id="obs_04_0011__p3427143294412">A download request with a URL that uses a temporary AK/SK pair and security token is formed as follows:</p>
<pre class="screen" id="obs_04_0011__screen1142816323444">GET /ObjectKey?AccessKeyId=AccessKeyID&amp;Expires=ExpiresValue&amp;Signature=signature&amp;x-obs-security-token=securitytoken HTTP/1.1
Host: bucketname.obs.<em id="obs_04_0011__i41621102549">region</em>.example.com</pre>
<p class="msonormal" id="obs_04_0011__p44540007"><a href="#obs_04_0011__table5447121714296">Table 1</a> describes the parameters.</p>
<div class="tablenoborder"><a name="obs_04_0011__table5447121714296"></a><a name="table5447121714296"></a><table cellpadding="4" cellspacing="0" summary="" id="obs_04_0011__table5447121714296" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Request parameters</caption><thead align="left"><tr id="obs_04_0011__row1072131"><th align="left" class="cellrowborder" valign="top" width="25.509999999999998%" id="mcps1.3.7.2.4.1.1"><p id="obs_04_0011__p19733807">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="58.160000000000004%" id="mcps1.3.7.2.4.1.2"><p id="obs_04_0011__p24649069">Description</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="16.33%" id="mcps1.3.7.2.4.1.3"><p id="obs_04_0011__p51104671">Mandatory</p>
</th>
</tr>
</thead>
<tbody><tr id="obs_04_0011__row9885913"><td class="cellrowborder" valign="top" width="25.509999999999998%" headers="mcps1.3.7.2.4.1.1 "><p id="obs_04_0011__p62561513">AccessKeyId</p>
</td>
<td class="cellrowborder" valign="top" width="58.160000000000004%" headers="mcps1.3.7.2.4.1.2 "><p id="obs_04_0011__p34317810">The access key of the URL creator. OBS uses it to verify the identity.</p>
<p id="obs_04_0011__p40424835">Type: string</p>
</td>
<td class="cellrowborder" valign="top" width="16.33%" headers="mcps1.3.7.2.4.1.3 "><p id="obs_04_0011__p53186163">Yes</p>
</td>
</tr>
<tr id="obs_04_0011__row8913420"><td class="cellrowborder" valign="top" width="25.509999999999998%" headers="mcps1.3.7.2.4.1.1 "><p id="obs_04_0011__p50898414">Expires</p>
</td>
<td class="cellrowborder" valign="top" width="58.160000000000004%" headers="mcps1.3.7.2.4.1.2 "><p id="obs_04_0011__p29130856">When the URL expires, in UTC (how many seconds have elapsed since 00:00:00 UTC on January 1, 1970)</p>
<p id="obs_04_0011__p60851118">Type: string</p>
</td>
<td class="cellrowborder" valign="top" width="16.33%" headers="mcps1.3.7.2.4.1.3 "><p id="obs_04_0011__p29993536">Yes</p>
</td>
</tr>
<tr id="obs_04_0011__row1506375"><td class="cellrowborder" valign="top" width="25.509999999999998%" headers="mcps1.3.7.2.4.1.1 "><p id="obs_04_0011__p54907514">Signature</p>
</td>
<td class="cellrowborder" valign="top" width="58.160000000000004%" headers="mcps1.3.7.2.4.1.2 "><p id="obs_04_0011__p18323687">The signature based on the user SK and <strong id="obs_04_0011__b10953113372918">Expires</strong></p>
<p id="obs_04_0011__p30695458">Type: string</p>
</td>
<td class="cellrowborder" valign="top" width="16.33%" headers="mcps1.3.7.2.4.1.3 "><p id="obs_04_0011__p3304150">Yes</p>
</td>
</tr>
<tr id="obs_04_0011__row142296248158"><td class="cellrowborder" valign="top" width="25.509999999999998%" headers="mcps1.3.7.2.4.1.1 "><p id="obs_04_0011__p1722982419150">x-obs-security-token</p>
</td>
<td class="cellrowborder" valign="top" width="58.160000000000004%" headers="mcps1.3.7.2.4.1.2 "><p id="obs_04_0011__p1322942441515">A temporary AK/SK pair must be used with a security token, indicated by the <strong id="obs_04_0011__b129681510165">x-obs-security-token</strong> header.</p>
<p id="obs_04_0011__p1441319203411">For details about how to obtain a temporary AK/SK pair and security token, see <a href="https://docs.otc.t-systems.com/api/iam/en-us_topic_0097949518.html" target="_blank" rel="noopener noreferrer">Obtaining a Temporary AK/SK Pair and Security Token</a>.</p>
</td>
<td class="cellrowborder" valign="top" width="16.33%" headers="mcps1.3.7.2.4.1.3 "><p id="obs_04_0011__p192295249152">No</p>
</td>
</tr>
</tbody>
</table>
</div>
<p id="obs_04_0011__p1829204354415">A signature is calculated as follows:</p>
<ol id="obs_04_0011__ol178761615104618"><li id="obs_04_0011__li587641544619"><a name="obs_04_0011__li587641544619"></a><a name="li587641544619"></a>Construct the StringToSign.</li><li id="obs_04_0011__li4876101544611"><a name="obs_04_0011__li4876101544611"></a><a name="li4876101544611"></a>Encode the result of <a href="#obs_04_0011__li587641544619">1</a> in UTF-8.</li><li id="obs_04_0011__li187621516463"><a name="obs_04_0011__li187621516463"></a><a name="li187621516463"></a>Use the SK to calculate HMAC-SHA1 based on the result of <a href="#obs_04_0011__li4876101544611">2</a>.</li><li id="obs_04_0011__li208761159468"><a name="obs_04_0011__li208761159468"></a><a name="li208761159468"></a>Encode the result of <a href="#obs_04_0011__li187621516463">3</a> in Base64.</li><li id="obs_04_0011__li1387691554615">Encode the result of <a href="#obs_04_0011__li208761159468">4</a> in URL to obtain the signature.</li></ol>
<p id="obs_04_0011__p250708164620"></p>
<p id="obs_04_0011__p84671611203418">The format of StringToSign is shown below. <a href="#obs_04_0011__table34479832212511">Table 2</a> describes the parameters.</p>
<pre class="screen" id="obs_04_0011__screen12451234103613">StringToSign =
HTTP-Verb + "\n" +
Content-MD5 + "\n" +
Content-Type + "\n" +
Expires + "\n" +
CanonicalizedHeaders + CanonicalizedResource</pre>
<div class="tablenoborder"><a name="obs_04_0011__table34479832212511"></a><a name="table34479832212511"></a><table cellpadding="4" cellspacing="0" summary="" id="obs_04_0011__table34479832212511" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Parameters for StringToSign</caption><thead align="left"><tr id="obs_04_0011__row42478738"><th align="left" class="cellrowborder" valign="top" width="30%" id="mcps1.3.13.2.3.1.1"><p id="obs_04_0011__p18225769">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="70%" id="mcps1.3.13.2.3.1.2"><p id="obs_04_0011__p67001213">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="obs_04_0011__row58389173"><td class="cellrowborder" valign="top" width="30%" headers="mcps1.3.13.2.3.1.1 "><p id="obs_04_0011__p31902586">HTTP-Verb</p>
</td>
<td class="cellrowborder" valign="top" width="70%" headers="mcps1.3.13.2.3.1.2 "><p id="obs_04_0011__p33972659">Type of operation. For REST APIs, HTTP request operations include <strong id="obs_04_0011__b6161112442311">PUT</strong>, <strong id="obs_04_0011__b1516210248233">GET</strong>, and <strong id="obs_04_0011__b6163162412231">DELETE</strong>.</p>
</td>
</tr>
<tr id="obs_04_0011__row101952243422"><td class="cellrowborder" valign="top" width="30%" headers="mcps1.3.13.2.3.1.1 "><p id="obs_04_0011__p595111278426">Content-MD5</p>
</td>
<td class="cellrowborder" valign="top" width="70%" headers="mcps1.3.13.2.3.1.2 "><p id="obs_04_0011__p29516273427">(Optional) Base64-encoded 128-bit MD5 value of the request body based on RFC 1864</p>
</td>
</tr>
<tr id="obs_04_0011__row1824493"><td class="cellrowborder" valign="top" width="30%" headers="mcps1.3.13.2.3.1.1 "><p id="obs_04_0011__p13566274">Content-Type</p>
</td>
<td class="cellrowborder" valign="top" width="70%" headers="mcps1.3.13.2.3.1.2 "><p id="obs_04_0011__p25126432">The type of the message, for example, <strong id="obs_04_0011__b166401773">text/plain</strong>.</p>
<p id="obs_04_0011__p24811297">If this header is not included, an empty string is used.</p>
</td>
</tr>
<tr id="obs_04_0011__row106651047155213"><td class="cellrowborder" valign="top" width="30%" headers="mcps1.3.13.2.3.1.1 "><p id="obs_04_0011__p4666144765219">Expires</p>
</td>
<td class="cellrowborder" valign="top" width="70%" headers="mcps1.3.13.2.3.1.2 "><p id="obs_04_0011__p106661347145210">When the URL expires (<strong id="obs_04_0011__b310353213215">ExpiresValue</strong>)</p>
</td>
</tr>
<tr id="obs_04_0011__row42990474"><td class="cellrowborder" valign="top" width="30%" headers="mcps1.3.13.2.3.1.1 "><p id="obs_04_0011__p59676394">CanonicalizedHeaders</p>
</td>
<td class="cellrowborder" valign="top" width="70%" headers="mcps1.3.13.2.3.1.2 "><p id="obs_04_0011__p1949763">HTTP request headers that start with <strong id="obs_04_0011__b392010210819">x-obs-</strong>, such as <strong id="obs_04_0011__b692082382">x-obs-date</strong>, <strong id="obs_04_0011__b3920621280">x-obs-acl</strong>, and <strong id="obs_04_0011__b1892019213811">x-obs-meta-*</strong>.</p>
<ol id="obs_04_0011__ol145715617477"><li id="obs_04_0011__li75756104712">All characters in a header name must be lower-case. Multiple header names are sorted in alphabetical order.</li><li id="obs_04_0011__li1497111394712">If a header has more than one value, combine them using commas (,). For example, <strong id="obs_04_0011__b14763015115016">x-obs-meta-name:name1</strong> and <strong id="obs_04_0011__b67632015125013">x-obs-meta-name:name2</strong> need to be written as <strong id="obs_04_0011__b1763515155017">x-obs-meta-name:name1,name2</strong>.</li><li id="obs_04_0011__li18224198471">Non-ASCII or unrecognizable characters are not allowed for header names and also not recommended for header values. If such characters are required, encode or decode them on the client using URL or Base64. The server does not perform decoding.</li><li id="obs_04_0011__li8253142214474">Delete meaningless spaces or tabs in a header. For example, <strong id="obs_04_0011__b1347516196813">x-obs-meta-name: name</strong> (there is a meaningless space before the second <strong id="obs_04_0011__b15475219784">name</strong>) must be changed to <strong id="obs_04_0011__b147515192089">x-obs-meta-name:name</strong>.</li><li id="obs_04_0011__li1011862617470">Each header occupies a separate line.</li></ol>
</td>
</tr>
<tr id="obs_04_0011__row7450793"><td class="cellrowborder" valign="top" width="30%" headers="mcps1.3.13.2.3.1.1 "><p id="obs_04_0011__p66643399">CanonicalizedResource</p>
</td>
<td class="cellrowborder" valign="top" width="70%" headers="mcps1.3.13.2.3.1.2 "><p id="obs_04_0011__p29406249">OBS resources specified in an HTTP request.</p>
<p id="obs_04_0011__p63329656">Resources are arranged in this order: bucket name, object name, sub-resource 1, sub-resource 2...</p>
<ol id="obs_04_0011__ol135483613475"><li id="obs_04_0011__li1739510379234">Bucket name and object name, for example, <strong id="obs_04_0011__b126351417152615">/<em id="obs_04_0011__i863461782611">bucket</em>/<em id="obs_04_0011__i9634191720269">object</em></strong>. If no object name is specified, for example, <strong id="obs_04_0011__b176365177263">/<em id="obs_04_0011__i96351717182611">bucket</em>/</strong>, the entire bucket is listed. If no bucket name is specified either, the value of this field is <strong id="obs_04_0011__b12636171716265">/</strong>.</li><li id="obs_04_0011__li94301458125415">If a subresource (such as <strong id="obs_04_0011__b19735101091020">?acl</strong> and <strong id="obs_04_0011__b67471610161010">?logging</strong>) exists, the subresource must be added.<p id="obs_04_0011__p167755915411">OBS sub-resources: acl, attname, cors, customdomain, delete, deletebucket, encryption, inventory, length, lifecycle, location, logging, metadata, modify, name, notification, partNumber, policy, position, quota, rename, replication, requestPayment, response-cache-control, response-content-disposition, response-content-encoding, response-content-language, response-content-type, response-expires, restore, storageClass, storagePolicy, storageinfo, tagging, torrent, truncate, uploadId, uploads, versionId, versioning, versions, website, x-obs-security-token, object-lock, retention</p>
</li><li id="obs_04_0011__li20542104114716">Sort multiple sub-resources in alphabetical order by name and use ampersands (&amp;) to separate them.</li></ol>
<div class="note" id="obs_04_0011__note196756717914"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="obs_04_0011__ul116221356133916"><li id="obs_04_0011__li156221356133912">A sub-resource is usually unique. Do not specify multiple values for the same sub-resource (such as key=value1&amp;key=value2). Otherwise, only the first value is used.</li><li id="obs_04_0011__li1321451571811">Suppose you use the <strong id="obs_04_0011__b1155512711478">GetObject</strong> API to download version <strong id="obs_04_0011__b486584315013">xxx</strong> of object <strong id="obs_04_0011__b1755682764710">object-test</strong> from bucket <strong id="obs_04_0011__b155564274479">bucket-test</strong> and require <strong id="obs_04_0011__b13112066210">Content-Type</strong> be changed to <strong id="obs_04_0011__b05561327154712">text/plain</strong>. <strong id="obs_04_0011__b13556627144714">CanonicalizedResource</strong> is <strong id="obs_04_0011__b205561627194720">/bucket-test/object-test?response-content-type=text/plain&amp;versionId=xxx</strong>.</li><li id="obs_04_0011__li197652029181211">CanonicalizedResource should be located on a separate line from CanonicalizedHeaders.</li></ul>
</div></div>
</td>
</tr>
</tbody>
</table>
</div>
<p id="obs_04_0011__p1327215229377">Use hash-based message authentication code (HMAC) to calculate the signature based on the StringToSign and SK:</p>
<pre class="screen" id="obs_04_0011__screen149461737419">Signature = URL-Encode( Base64( HMAC-SHA1( YourSecretAccessKeyID, UTF-8-Encoding-Of( StringToSign ) ) ) )</pre>
<p class="msonormal" id="obs_04_0011__p50970824">Compared with the Authorization header method:</p>
<ul id="obs_04_0011__ul56084236"><li id="obs_04_0011__li29737353">URLs must use URL encoding — after using Base64 — for signatures.</li><li id="obs_04_0011__li66309591"><strong id="obs_04_0011__b64244561">Expires</strong> in <strong id="obs_04_0011__b41330139">StringToSign</strong> of a URL is similar to <strong id="obs_04_0011__b36426933">Date</strong> in the <strong id="obs_04_0011__b13970192213124">Authorization</strong> header.</li></ul>
<p id="obs_04_0011__p7875151012718"></p>
<p id="obs_04_0011__p101529616496">Generate a predefined URL instance for the browser by carrying the signature in the URL.</p>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="obs_04_0011__table47748300" frame="border" border="1" rules="all"><caption><b>Table 3 </b>Request that has the signature carried in the URL and the StringToSign</caption><thead align="left"><tr id="obs_04_0011__row66793295"><th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.20.2.3.1.1"><p id="obs_04_0011__p41547828">Request Header</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.20.2.3.1.2"><p id="obs_04_0011__p9930893">StringToSign</p>
</th>
</tr>
</thead>
<tbody><tr id="obs_04_0011__row66204867"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.20.2.3.1.1 "><p id="obs_04_0011__p422518916476">GET /objectkey?AccessKeyId=MFyfvK41ba2giqM7Uio6PznpdUKGpownRZlmVmHc&amp;Expires=1532779451&amp;Signature=0Akylf43Bm3mD1bh2rM3dmVp1Bo%3D HTTP/1.1</p>
<p id="obs_04_0011__p1372944308">Host: examplebucket.obs.<em id="obs_04_0011__i116431445401">region</em>.example.com</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.20.2.3.1.2 "><p id="obs_04_0011__p11355167">GET \n</p>
<p id="obs_04_0011__p35087639">\n</p>
<p id="obs_04_0011__p15827441520">\n</p>
<p id="obs_04_0011__p47353302">1532779451\n</p>
<p id="obs_04_0011__p23526540">/examplebucket/objectkey</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="obs_04_0011__table104365472404" frame="border" border="1" rules="all"><caption><b>Table 4 </b>Object download request that has the temporary AK/SK and security token carried in the URL and the StringToSign</caption><thead align="left"><tr id="obs_04_0011__row84376477405"><th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.21.2.3.1.1"><p id="obs_04_0011__p643774764016">Request Header</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.21.2.3.1.2"><p id="obs_04_0011__p977482218417">StringToSign</p>
</th>
</tr>
</thead>
<tbody><tr id="obs_04_0011__row19437547184013"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.21.2.3.1.1 "><p id="obs_04_0011__p131218290418">GET /objectkey?AccessKeyId=MFyfvK41ba2giqM7Uio6PznpdUKGpownRZlmVmHc&amp;Expires=1532779451&amp;Signature=0Akylf43Bm3mD1bh2rM3dmVp1Bo%3D&amp;x-obs-security-token=YwkaRTbdY8g7q.... HTTP/1.1</p>
<p id="obs_04_0011__p6122029164116">Host: examplebucket.obs.<em id="obs_04_0011__i111252914111">region</em>.example.com</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.21.2.3.1.2 "><p id="obs_04_0011__p12133293414">GET \n</p>
<p id="obs_04_0011__p2137294411">\n</p>
<p id="obs_04_0011__p181352954119">\n</p>
<p id="obs_04_0011__p151392964112">1532779451\n</p>
<p id="obs_04_0011__p31318296418">/examplebucket/objectkey?x-obs-security-token=YwkaRTbdY8g7q....</p>
</td>
</tr>
</tbody>
</table>
</div>
<p id="obs_04_0011__p6969185355414">Calculation rule of the signature</p>
<pre class="screen" id="obs_04_0011__screen3282186165515">Signature = URL-Encode( Base64( HMAC-SHA1( YourSecretAccessKeyID, UTF-8-Encoding-Of( StringToSign ) ) ) )</pre>
<p id="obs_04_0011__p1944104195517">Calculate the signature and use the host as the prefix of the URL to generate a predefined URL:</p>
<p id="obs_04_0011__p1364618274112">http(s)://examplebucket.obs.<em id="obs_04_0011__i1749314281013">region</em>.example.com/objectkey?AccessKeyId=AccessKeyID&amp;Expires=1532779451&amp;Signature=0Akylf43Bm3mD1bh2rM3dmVp1Bo%3D</p>
<p id="obs_04_0011__p6821252165918">If you enter the address in the browser, then the object <strong id="obs_04_0011__b1377451633517">objectkey</strong> in the <strong id="obs_04_0011__b54493329350">examplebucket</strong> bucket can be downloaded. The validity period of this link is <strong id="obs_04_0011__b1544254193517">1532779451</strong> (indicating Sat Jul 28 20:04:11 CST 2018).</p>
<p id="obs_04_0011__p197521651362">In the Linux operating system, when running the <strong id="obs_04_0011__b855152915266">curl</strong> command, you need to add a forward slash (\) to escape the character (&amp;). The following command can download the <strong id="obs_04_0011__b23234320297">objectkey</strong> object to the <strong id="obs_04_0011__b19435193614294">output</strong> file:</p>
<p id="obs_04_0011__p767220191439">curl http(s)://examplebucket.obs.<em id="obs_04_0011__i136721619154313">region</em>.example.com/objectkey?AccessKeyId=AccessKeyID\&amp;Expires=1532779451\&amp;Signature=0Akylf43Bm3mD1bh2rM3dmVp1Bo%3D -X GET -o output</p>
<div class="note" id="obs_04_0011__note114221355114513"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="obs_04_0011__p9876603478">If you want to open a pre-defined URL using your browser, you must not use <strong id="obs_04_0011__b102916588315">Content-MD5</strong>, <strong id="obs_04_0011__b145365591138">Content-Type</strong>, or <strong id="obs_04_0011__b8828632415">CanonicalizedHeaders</strong> headers to calculate a signature. This is because the browser cannot carry them. If you do so, the server will return a signature error.</p>
</div></div>
<div class="section" id="obs_04_0011__section131611926171613"><h4 class="sectiontitle">Signature Calculation in Java</h4><div class="codecoloring" codetype="Java" id="obs_04_0011__screen10483183017405"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal"> 1</span>
<span class="normal"> 2</span>
<span class="normal"> 3</span>
<span class="normal"> 4</span>
<span class="normal"> 5</span>
<span class="normal"> 6</span>
<span class="normal"> 7</span>
<span class="normal"> 8</span>
<span class="normal"> 9</span>
<span class="normal"> 10</span>
<span class="normal"> 11</span>
<span class="normal"> 12</span>
<span class="normal"> 13</span>
<span class="normal"> 14</span>
<span class="normal"> 15</span>
<span class="normal"> 16</span>
<span class="normal"> 17</span>
<span class="normal"> 18</span>
<span class="normal"> 19</span>
<span class="normal"> 20</span>
<span class="normal"> 21</span>
<span class="normal"> 22</span>
<span class="normal"> 23</span>
<span class="normal"> 24</span>
<span class="normal"> 25</span>
<span class="normal"> 26</span>
<span class="normal"> 27</span>
<span class="normal"> 28</span>
<span class="normal"> 29</span>
<span class="normal"> 30</span>
<span class="normal"> 31</span>
<span class="normal"> 32</span>
<span class="normal"> 33</span>
<span class="normal"> 34</span>
<span class="normal"> 35</span>
<span class="normal"> 36</span>
<span class="normal"> 37</span>
<span class="normal"> 38</span>
<span class="normal"> 39</span>
<span class="normal"> 40</span>
<span class="normal"> 41</span>
<span class="normal"> 42</span>
<span class="normal"> 43</span>
<span class="normal"> 44</span>
<span class="normal"> 45</span>
<span class="normal"> 46</span>
<span class="normal"> 47</span>
<span class="normal"> 48</span>
<span class="normal"> 49</span>
<span class="normal"> 50</span>
<span class="normal"> 51</span>
<span class="normal"> 52</span>
<span class="normal"> 53</span>
<span class="normal"> 54</span>
<span class="normal"> 55</span>
<span class="normal"> 56</span>
<span class="normal"> 57</span>
<span class="normal"> 58</span>
<span class="normal"> 59</span>
<span class="normal"> 60</span>
<span class="normal"> 61</span>
<span class="normal"> 62</span>
<span class="normal"> 63</span>
<span class="normal"> 64</span>
<span class="normal"> 65</span>
<span class="normal"> 66</span>
<span class="normal"> 67</span>
<span class="normal"> 68</span>
<span class="normal"> 69</span>
<span class="normal"> 70</span>
<span class="normal"> 71</span>
<span class="normal"> 72</span>
<span class="normal"> 73</span>
<span class="normal"> 74</span>
<span class="normal"> 75</span>
<span class="normal"> 76</span>
<span class="normal"> 77</span>
<span class="normal"> 78</span>
<span class="normal"> 79</span>
<span class="normal"> 80</span>
<span class="normal"> 81</span>
<span class="normal"> 82</span>
<span class="normal"> 83</span>
<span class="normal"> 84</span>
<span class="normal"> 85</span>
<span class="normal"> 86</span>
<span class="normal"> 87</span>
<span class="normal"> 88</span>
<span class="normal"> 89</span>
<span class="normal"> 90</span>
<span class="normal"> 91</span>
<span class="normal"> 92</span>
<span class="normal"> 93</span>
<span class="normal"> 94</span>
<span class="normal"> 95</span>
<span class="normal"> 96</span>
<span class="normal"> 97</span>
<span class="normal"> 98</span>
<span class="normal"> 99</span>
<span class="normal">100</span>
<span class="normal">101</span>
<span class="normal">102</span>
<span class="normal">103</span>
<span class="normal">104</span>
<span class="normal">105</span>
<span class="normal">106</span>
<span class="normal">107</span>
<span class="normal">108</span>
<span class="normal">109</span>
<span class="normal">110</span>
<span class="normal">111</span>
<span class="normal">112</span>
<span class="normal">113</span>
<span class="normal">114</span>
<span class="normal">115</span>
<span class="normal">116</span>
<span class="normal">117</span>
<span class="normal">118</span>
<span class="normal">119</span>
<span class="normal">120</span>
<span class="normal">121</span>
<span class="normal">122</span>
<span class="normal">123</span>
<span class="normal">124</span>
<span class="normal">125</span>
<span class="normal">126</span>
<span class="normal">127</span>
<span class="normal">128</span>
<span class="normal">129</span>
<span class="normal">130</span>
<span class="normal">131</span>
<span class="normal">132</span>
<span class="normal">133</span>
<span class="normal">134</span>
<span class="normal">135</span>
<span class="normal">136</span>
<span class="normal">137</span>
<span class="normal">138</span>
<span class="normal">139</span>
<span class="normal">140</span>
<span class="normal">141</span>
<span class="normal">142</span>
<span class="normal">143</span>
<span class="normal">144</span>
<span class="normal">145</span>
<span class="normal">146</span>
<span class="normal">147</span>
<span class="normal">148</span>
<span class="normal">149</span>
<span class="normal">150</span>
<span class="normal">151</span>
<span class="normal">152</span>
<span class="normal">153</span>
<span class="normal">154</span>
<span class="normal">155</span>
<span class="normal">156</span>
<span class="normal">157</span>
<span class="normal">158</span>
<span class="normal">159</span>
<span class="normal">160</span>
<span class="normal">161</span>
<span class="normal">162</span>
<span class="normal">163</span>
<span class="normal">164</span>
<span class="normal">165</span>
<span class="normal">166</span>
<span class="normal">167</span>
<span class="normal">168</span>
<span class="normal">169</span>
<span class="normal">170</span>
<span class="normal">171</span>
<span class="normal">172</span>
<span class="normal">173</span>
<span class="normal">174</span>
<span class="normal">175</span>
<span class="normal">176</span>
<span class="normal">177</span>
<span class="normal">178</span>
<span class="normal">179</span>
<span class="normal">180</span>
<span class="normal">181</span>
<span class="normal">182</span>
<span class="normal">183</span>
<span class="normal">184</span>
<span class="normal">185</span>
<span class="normal">186</span>
<span class="normal">187</span>
<span class="normal">188</span>
<span class="normal">189</span>
<span class="normal">190</span>
<span class="normal">191</span>
<span class="normal">192</span>
<span class="normal">193</span>
<span class="normal">194</span>
<span class="normal">195</span>
<span class="normal">196</span>
<span class="normal">197</span>
<span class="normal">198</span>
<span class="normal">199</span>
<span class="normal">200</span>
<span class="normal">201</span>
<span class="normal">202</span>
<span class="normal">203</span>
<span class="normal">204</span>
<span class="normal">205</span>
<span class="normal">206</span>
<span class="normal">207</span>
<span class="normal">208</span>
<span class="normal">209</span>
<span class="normal">210</span>
<span class="normal">211</span>
<span class="normal">212</span>
<span class="normal">213</span>
<span class="normal">214</span>
<span class="normal">215</span>
<span class="normal">216</span>
<span class="normal">217</span>
<span class="normal">218</span>
<span class="normal">219</span>
<span class="normal">220</span>
<span class="normal">221</span>
<span class="normal">222</span>
<span class="normal">223</span>
<span class="normal">224</span>
<span class="normal">225</span>
<span class="normal">226</span>
<span class="normal">227</span>
<span class="normal">228</span>
<span class="normal">229</span>
<span class="normal">230</span>
<span class="normal">231</span>
<span class="normal">232</span>
<span class="normal">233</span>
<span class="normal">234</span>
<span class="normal">235</span>
<span class="normal">236</span>
<span class="normal">237</span>
<span class="normal">238</span>
<span class="normal">239</span>
<span class="normal">240</span>
<span class="normal">241</span>
<span class="normal">242</span>
<span class="normal">243</span>
<span class="normal">244</span>
<span class="normal">245</span>
<span class="normal">246</span>
<span class="normal">247</span>
<span class="normal">248</span>
<span class="normal">249</span>
<span class="normal">250</span></pre></div></td><td class="code"><div><pre><span></span><span class="kn">import</span><span class="w"> </span><span class="nn">java.io.UnsupportedEncodingException</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.net.URLEncoder</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.security.InvalidKeyException</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.security.NoSuchAlgorithmException</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.util.ArrayList</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.util.Arrays</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.util.Base64</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.util.Collections</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.util.HashMap</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.util.List</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.util.Locale</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.util.Map</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.util.TreeMap</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.util.regex.Pattern</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">javax.crypto.Mac</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">javax.crypto.spec.SecretKeySpec</span><span class="p">;</span>
<span class="kd">public</span><span class="w"> </span><span class="kd">class</span> <span class="nc">SignDemo</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="kd">private</span><span class="w"> </span><span class="kd">static</span><span class="w"> </span><span class="kd">final</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">SIGN_SEP</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">&quot;\n&quot;</span><span class="p">;</span>
<span class="w"> </span><span class="kd">private</span><span class="w"> </span><span class="kd">static</span><span class="w"> </span><span class="kd">final</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">OBS_PREFIX</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">&quot;x-obs-&quot;</span><span class="p">;</span>
<span class="w"> </span><span class="kd">private</span><span class="w"> </span><span class="kd">static</span><span class="w"> </span><span class="kd">final</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">DEFAULT_ENCODING</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">&quot;UTF-8&quot;</span><span class="p">;</span>
<span class="w"> </span><span class="kd">private</span><span class="w"> </span><span class="kd">static</span><span class="w"> </span><span class="kd">final</span><span class="w"> </span><span class="n">List</span><span class="o">&lt;</span><span class="n">String</span><span class="o">&gt;</span><span class="w"> </span><span class="n">SUB_RESOURCES</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">Collections</span><span class="p">.</span><span class="na">unmodifiableList</span><span class="p">(</span><span class="n">Arrays</span><span class="p">.</span><span class="na">asList</span><span class="p">(</span>
<span class="w"> </span><span class="s">&quot;CDNNotifyConfiguration&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;acl&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;attname&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;cors&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;customdomain&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;delete&quot;</span><span class="p">,</span>
<span class="w"> </span><span class="s">&quot;deletebucket&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;encryption&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;inventory&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;length&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;lifecycle&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;location&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;logging&quot;</span><span class="p">,</span>
<span class="w"> </span><span class="s">&quot;metadata&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;mirrorBackToSource&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;modify&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;name&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;notification&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;obscompresspolicy&quot;</span><span class="p">,</span><span class="w"> </span>
<span class="w"> </span><span class="s">&quot;partNumber&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;policy&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;position&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;quota&quot;</span><span class="p">,</span><span class="s">&quot;rename&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;replication&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;requestPayment&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;response-cache-control&quot;</span><span class="p">,</span><span class="w"> </span>
<span class="w"> </span><span class="s">&quot;response-content-disposition&quot;</span><span class="p">,</span><span class="s">&quot;response-content-encoding&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;response-content-language&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;response-content-type&quot;</span><span class="p">,</span><span class="w"> </span>
<span class="w"> </span><span class="s">&quot;response-expires&quot;</span><span class="p">,</span><span class="s">&quot;restore&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;storageClass&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;storagePolicy&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;storageinfo&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;tagging&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;torrent&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;truncate&quot;</span><span class="p">,</span>
<span class="w"> </span><span class="s">&quot;uploadId&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;uploads&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;versionId&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;versioning&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;versions&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;website&quot;</span><span class="p">,</span><span class="w"> </span>
<span class="w"> </span><span class="s">&quot;x-obs-security-token&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;object-lock&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;retention&quot;</span><span class="p">));</span>
<span class="w"> </span><span class="kd">private</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">ak</span><span class="p">;</span>
<span class="w"> </span><span class="kd">private</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">sk</span><span class="p">;</span>
<span class="w"> </span><span class="kd">private</span><span class="w"> </span><span class="kt">boolean</span><span class="w"> </span><span class="nf">isBucketNameValid</span><span class="p">(</span><span class="n">String</span><span class="w"> </span><span class="n">bucketName</span><span class="p">)</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="n">bucketName</span><span class="w"> </span><span class="o">==</span><span class="w"> </span><span class="kc">null</span><span class="w"> </span><span class="o">||</span><span class="w"> </span><span class="n">bucketName</span><span class="p">.</span><span class="na">length</span><span class="p">()</span><span class="w"> </span><span class="o">&gt;</span><span class="w"> </span><span class="mi">63</span><span class="w"> </span><span class="o">||</span><span class="w"> </span><span class="n">bucketName</span><span class="p">.</span><span class="na">length</span><span class="p">()</span><span class="w"> </span><span class="o">&lt;</span><span class="w"> </span><span class="mi">3</span><span class="p">)</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="kc">false</span><span class="p">;</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="o">!</span><span class="n">Pattern</span><span class="p">.</span><span class="na">matches</span><span class="p">(</span><span class="s">&quot;^[a-z0-9][a-z0-9.-]+$&quot;</span><span class="p">,</span><span class="w"> </span><span class="n">bucketName</span><span class="p">))</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="kc">false</span><span class="p">;</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="n">Pattern</span><span class="p">.</span><span class="na">matches</span><span class="p">(</span><span class="s">&quot;(\\d{1,3}\\.){3}\\d{1,3}&quot;</span><span class="p">,</span><span class="w"> </span><span class="n">bucketName</span><span class="p">))</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="kc">false</span><span class="p">;</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="n">String</span><span class="o">[]</span><span class="w"> </span><span class="n">fragments</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">bucketName</span><span class="p">.</span><span class="na">split</span><span class="p">(</span><span class="s">&quot;\\.&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="k">for</span><span class="w"> </span><span class="p">(</span><span class="kt">int</span><span class="w"> </span><span class="n">i</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="mi">0</span><span class="p">;</span><span class="w"> </span><span class="n">i</span><span class="w"> </span><span class="o">&lt;</span><span class="w"> </span><span class="n">fragments</span><span class="p">.</span><span class="na">length</span><span class="p">;</span><span class="w"> </span><span class="n">i</span><span class="o">++</span><span class="p">)</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="n">Pattern</span><span class="p">.</span><span class="na">matches</span><span class="p">(</span><span class="s">&quot;^-.*&quot;</span><span class="p">,</span><span class="w"> </span><span class="n">fragments</span><span class="o">[</span><span class="n">i</span><span class="o">]</span><span class="p">)</span><span class="w"> </span><span class="o">||</span><span class="w"> </span><span class="n">Pattern</span><span class="p">.</span><span class="na">matches</span><span class="p">(</span><span class="s">&quot;.*-$&quot;</span><span class="p">,</span><span class="w"> </span><span class="n">fragments</span><span class="o">[</span><span class="n">i</span><span class="o">]</span><span class="p">)</span>
<span class="w"> </span><span class="o">||</span><span class="w"> </span><span class="n">Pattern</span><span class="p">.</span><span class="na">matches</span><span class="p">(</span><span class="s">&quot;^$&quot;</span><span class="p">,</span><span class="w"> </span><span class="n">fragments</span><span class="o">[</span><span class="n">i</span><span class="o">]</span><span class="p">))</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="kc">false</span><span class="p">;</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="kc">true</span><span class="p">;</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="kd">public</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="nf">encodeUrlString</span><span class="p">(</span><span class="n">String</span><span class="w"> </span><span class="n">path</span><span class="p">)</span><span class="w"> </span><span class="kd">throws</span><span class="w"> </span><span class="n">UnsupportedEncodingException</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="n">URLEncoder</span><span class="p">.</span><span class="na">encode</span><span class="p">(</span><span class="n">path</span><span class="p">,</span><span class="w"> </span><span class="n">DEFAULT_ENCODING</span><span class="p">)</span>
<span class="w"> </span><span class="p">.</span><span class="na">replaceAll</span><span class="p">(</span><span class="s">&quot;\\+&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;%20&quot;</span><span class="p">)</span>
<span class="w"> </span><span class="p">.</span><span class="na">replaceAll</span><span class="p">(</span><span class="s">&quot;\\*&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;%2A&quot;</span><span class="p">)</span>
<span class="w"> </span><span class="p">.</span><span class="na">replaceAll</span><span class="p">(</span><span class="s">&quot;%7E&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;~&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="kd">public</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="nf">encodeObjectName</span><span class="p">(</span><span class="n">String</span><span class="w"> </span><span class="n">objectName</span><span class="p">)</span><span class="w"> </span><span class="kd">throws</span><span class="w"> </span><span class="n">UnsupportedEncodingException</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">StringBuilder</span><span class="w"> </span><span class="n">result</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">StringBuilder</span><span class="p">();</span>
<span class="w"> </span><span class="n">String</span><span class="o">[]</span><span class="w"> </span><span class="n">tokens</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">objectName</span><span class="p">.</span><span class="na">split</span><span class="p">(</span><span class="s">&quot;/&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="k">for</span><span class="w"> </span><span class="p">(</span><span class="kt">int</span><span class="w"> </span><span class="n">i</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="mi">0</span><span class="p">;</span><span class="w"> </span><span class="n">i</span><span class="w"> </span><span class="o">&lt;</span><span class="w"> </span><span class="n">tokens</span><span class="p">.</span><span class="na">length</span><span class="p">;</span><span class="w"> </span><span class="n">i</span><span class="o">++</span><span class="p">)</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">result</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="k">this</span><span class="p">.</span><span class="na">encodeUrlString</span><span class="p">(</span><span class="n">tokens</span><span class="o">[</span><span class="n">i</span><span class="o">]</span><span class="p">));</span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="n">i</span><span class="w"> </span><span class="o">&lt;</span><span class="w"> </span><span class="n">tokens</span><span class="p">.</span><span class="na">length</span><span class="w"> </span><span class="o">-</span><span class="w"> </span><span class="mi">1</span><span class="p">)</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">result</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="s">&quot;/&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="n">result</span><span class="p">.</span><span class="na">toString</span><span class="p">();</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="kd">private</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="nf">join</span><span class="p">(</span><span class="n">List</span><span class="o">&lt;?&gt;</span><span class="w"> </span><span class="n">items</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">delimiter</span><span class="p">)</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">StringBuilder</span><span class="w"> </span><span class="n">sb</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">StringBuilder</span><span class="p">();</span>
<span class="w"> </span><span class="k">for</span><span class="w"> </span><span class="p">(</span><span class="kt">int</span><span class="w"> </span><span class="n">i</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="mi">0</span><span class="p">;</span><span class="w"> </span><span class="n">i</span><span class="w"> </span><span class="o">&lt;</span><span class="w"> </span><span class="n">items</span><span class="p">.</span><span class="na">size</span><span class="p">();</span><span class="w"> </span><span class="n">i</span><span class="o">++</span><span class="p">)</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">item</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">items</span><span class="p">.</span><span class="na">get</span><span class="p">(</span><span class="n">i</span><span class="p">).</span><span class="na">toString</span><span class="p">();</span>
<span class="w"> </span><span class="n">sb</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="n">item</span><span class="p">);</span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="n">i</span><span class="w"> </span><span class="o">&lt;</span><span class="w"> </span><span class="n">items</span><span class="p">.</span><span class="na">size</span><span class="p">()</span><span class="w"> </span><span class="o">-</span><span class="w"> </span><span class="mi">1</span><span class="p">)</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">sb</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="n">delimiter</span><span class="p">);</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="n">sb</span><span class="p">.</span><span class="na">toString</span><span class="p">();</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="kd">private</span><span class="w"> </span><span class="kt">boolean</span><span class="w"> </span><span class="nf">isValid</span><span class="p">(</span><span class="n">String</span><span class="w"> </span><span class="n">input</span><span class="p">)</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="n">input</span><span class="w"> </span><span class="o">!=</span><span class="w"> </span><span class="kc">null</span><span class="w"> </span><span class="o">&amp;&amp;</span><span class="w"> </span><span class="o">!</span><span class="n">input</span><span class="p">.</span><span class="na">equals</span><span class="p">(</span><span class="s">&quot;&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="kd">public</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="nf">hmacSha1</span><span class="p">(</span><span class="n">String</span><span class="w"> </span><span class="n">input</span><span class="p">)</span><span class="w"> </span><span class="kd">throws</span><span class="w"> </span><span class="n">NoSuchAlgorithmException</span><span class="p">,</span><span class="w"> </span><span class="n">InvalidKeyException</span><span class="p">,</span><span class="w"> </span><span class="n">UnsupportedEncodingException</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">SecretKeySpec</span><span class="w"> </span><span class="n">signingKey</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">SecretKeySpec</span><span class="p">(</span><span class="k">this</span><span class="p">.</span><span class="na">sk</span><span class="p">.</span><span class="na">getBytes</span><span class="p">(</span><span class="n">DEFAULT_ENCODING</span><span class="p">),</span><span class="w"> </span><span class="s">&quot;HmacSHA1&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="n">Mac</span><span class="w"> </span><span class="n">mac</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">Mac</span><span class="p">.</span><span class="na">getInstance</span><span class="p">(</span><span class="s">&quot;HmacSHA1&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="n">mac</span><span class="p">.</span><span class="na">init</span><span class="p">(</span><span class="n">signingKey</span><span class="p">);</span>
<span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="n">Base64</span><span class="p">.</span><span class="na">getEncoder</span><span class="p">().</span><span class="na">encodeToString</span><span class="p">(</span><span class="n">mac</span><span class="p">.</span><span class="na">doFinal</span><span class="p">(</span><span class="n">input</span><span class="p">.</span><span class="na">getBytes</span><span class="p">(</span><span class="n">DEFAULT_ENCODING</span><span class="p">)));</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="kd">private</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="nf">stringToSign</span><span class="p">(</span><span class="n">String</span><span class="w"> </span><span class="n">httpMethod</span><span class="p">,</span><span class="w"> </span><span class="n">Map</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">[]&gt;</span><span class="w"> </span><span class="n">headers</span><span class="p">,</span><span class="w"> </span><span class="n">Map</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">&gt;</span><span class="w"> </span><span class="n">queries</span><span class="p">,</span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">bucketName</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">objectName</span><span class="p">,</span><span class="w"> </span><span class="kt">long</span><span class="w"> </span><span class="n">expires</span><span class="p">)</span><span class="w"> </span><span class="kd">throws</span><span class="w"> </span><span class="n">Exception</span><span class="w"> </span><span class="p">{</span><span class="w"> </span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">contentMd5</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">&quot;&quot;</span><span class="p">;</span><span class="w"> </span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">contentType</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">&quot;&quot;</span><span class="p">;</span><span class="w"> </span>
<span class="w"> </span><span class="n">TreeMap</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">&gt;</span><span class="w"> </span><span class="n">canonicalizedHeaders</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">TreeMap</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">&gt;</span><span class="p">();</span><span class="w"> </span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">key</span><span class="p">;</span><span class="w"> </span>
<span class="w"> </span><span class="n">List</span><span class="o">&lt;</span><span class="n">String</span><span class="o">&gt;</span><span class="w"> </span><span class="n">temp</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">ArrayList</span><span class="o">&lt;</span><span class="n">String</span><span class="o">&gt;</span><span class="p">();</span><span class="w"> </span>
<span class="w"> </span><span class="k">for</span><span class="w"> </span><span class="p">(</span><span class="n">Map</span><span class="p">.</span><span class="na">Entry</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">[]&gt;</span><span class="w"> </span><span class="n">entry</span><span class="w"> </span><span class="p">:</span><span class="w"> </span><span class="n">headers</span><span class="p">.</span><span class="na">entrySet</span><span class="p">())</span><span class="w"> </span><span class="p">{</span><span class="w"> </span>
<span class="w"> </span><span class="n">key</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">entry</span><span class="p">.</span><span class="na">getKey</span><span class="p">();</span><span class="w"> </span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="n">key</span><span class="w"> </span><span class="o">==</span><span class="w"> </span><span class="kc">null</span><span class="w"> </span><span class="o">||</span><span class="w"> </span><span class="n">entry</span><span class="p">.</span><span class="na">getValue</span><span class="p">()</span><span class="w"> </span><span class="o">==</span><span class="w"> </span><span class="kc">null</span><span class="w"> </span><span class="o">||</span><span class="w"> </span><span class="n">entry</span><span class="p">.</span><span class="na">getValue</span><span class="p">().</span><span class="na">length</span><span class="w"> </span><span class="o">==</span><span class="w"> </span><span class="mi">0</span><span class="p">)</span><span class="w"> </span><span class="p">{</span><span class="w"> </span>
<span class="w"> </span><span class="k">continue</span><span class="p">;</span><span class="w"> </span>
<span class="w"> </span><span class="p">}</span><span class="w"> </span>
<span class="w"> </span><span class="n">key</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">key</span><span class="p">.</span><span class="na">trim</span><span class="p">().</span><span class="na">toLowerCase</span><span class="p">(</span><span class="n">Locale</span><span class="p">.</span><span class="na">ENGLISH</span><span class="p">);</span><span class="w"> </span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="n">key</span><span class="p">.</span><span class="na">equals</span><span class="p">(</span><span class="s">&quot;content-md5&quot;</span><span class="p">))</span><span class="w"> </span><span class="p">{</span><span class="w"> </span>
<span class="w"> </span><span class="n">contentMd5</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">entry</span><span class="p">.</span><span class="na">getValue</span><span class="p">()</span><span class="o">[</span><span class="mi">0</span><span class="o">]</span><span class="p">;</span><span class="w"> </span>
<span class="w"> </span><span class="k">continue</span><span class="p">;</span><span class="w"> </span>
<span class="w"> </span><span class="p">}</span><span class="w"> </span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="n">key</span><span class="p">.</span><span class="na">equals</span><span class="p">(</span><span class="s">&quot;content-type&quot;</span><span class="p">))</span><span class="w"> </span><span class="p">{</span><span class="w"> </span>
<span class="w"> </span><span class="n">contentType</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">entry</span><span class="p">.</span><span class="na">getValue</span><span class="p">()</span><span class="o">[</span><span class="mi">0</span><span class="o">]</span><span class="p">;</span><span class="w"> </span>
<span class="w"> </span><span class="k">continue</span><span class="p">;</span><span class="w"> </span>
<span class="w"> </span><span class="p">}</span><span class="w"> </span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="n">key</span><span class="p">.</span><span class="na">startsWith</span><span class="p">(</span><span class="n">OBS_PREFIX</span><span class="p">))</span><span class="w"> </span><span class="p">{</span><span class="w"> </span>
<span class="w"> </span><span class="k">for</span><span class="w"> </span><span class="p">(</span><span class="n">String</span><span class="w"> </span><span class="n">value</span><span class="w"> </span><span class="p">:</span><span class="w"> </span><span class="n">entry</span><span class="p">.</span><span class="na">getValue</span><span class="p">())</span><span class="w"> </span><span class="p">{</span><span class="w"> </span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="n">value</span><span class="w"> </span><span class="o">!=</span><span class="w"> </span><span class="kc">null</span><span class="p">)</span><span class="w"> </span><span class="p">{</span><span class="w"> </span>
<span class="w"> </span><span class="n">temp</span><span class="p">.</span><span class="na">add</span><span class="p">(</span><span class="n">value</span><span class="p">.</span><span class="na">trim</span><span class="p">());</span><span class="w"> </span>
<span class="w"> </span><span class="p">}</span><span class="w"> </span>
<span class="w"> </span><span class="p">}</span><span class="w"> </span>
<span class="w"> </span><span class="n">canonicalizedHeaders</span><span class="p">.</span><span class="na">put</span><span class="p">(</span><span class="n">key</span><span class="p">,</span><span class="w"> </span><span class="k">this</span><span class="p">.</span><span class="na">join</span><span class="p">(</span><span class="n">temp</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;,&quot;</span><span class="p">));</span><span class="w"> </span>
<span class="w"> </span><span class="n">temp</span><span class="p">.</span><span class="na">clear</span><span class="p">();</span><span class="w"> </span>
<span class="w"> </span><span class="p">}</span><span class="w"> </span>
<span class="w"> </span><span class="p">}</span><span class="w"> </span>
<span class="w"> </span><span class="c1">// handle method/content-md5/content-type</span>
<span class="w"> </span><span class="n">StringBuilder</span><span class="w"> </span><span class="n">stringToSign</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">StringBuilder</span><span class="p">();</span>
<span class="w"> </span><span class="n">stringToSign</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="n">httpMethod</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="n">SIGN_SEP</span><span class="p">)</span>
<span class="w"> </span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="n">contentMd5</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="n">SIGN_SEP</span><span class="p">)</span>
<span class="w"> </span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="n">contentType</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="n">SIGN_SEP</span><span class="p">)</span>
<span class="w"> </span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="n">expires</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="n">SIGN_SEP</span><span class="p">);</span>
<span class="w"> </span><span class="c1">// handle canonicalizedHeaders</span>
<span class="w"> </span><span class="k">for</span><span class="w"> </span><span class="p">(</span><span class="n">Map</span><span class="p">.</span><span class="na">Entry</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">&gt;</span><span class="w"> </span><span class="n">entry</span><span class="w"> </span><span class="p">:</span><span class="w"> </span><span class="n">canonicalizedHeaders</span><span class="p">.</span><span class="na">entrySet</span><span class="p">())</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">stringToSign</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="n">entry</span><span class="p">.</span><span class="na">getKey</span><span class="p">()).</span><span class="na">append</span><span class="p">(</span><span class="s">&quot;:&quot;</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="n">entry</span><span class="p">.</span><span class="na">getValue</span><span class="p">()).</span><span class="na">append</span><span class="p">(</span><span class="n">SIGN_SEP</span><span class="p">);</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="c1">// handle CanonicalizedResource</span>
<span class="w"> </span><span class="n">stringToSign</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="s">&quot;/&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="k">this</span><span class="p">.</span><span class="na">isValid</span><span class="p">(</span><span class="n">bucketName</span><span class="p">))</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">stringToSign</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="n">bucketName</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="s">&quot;/&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="k">this</span><span class="p">.</span><span class="na">isValid</span><span class="p">(</span><span class="n">objectName</span><span class="p">))</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">stringToSign</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="k">this</span><span class="p">.</span><span class="na">encodeObjectName</span><span class="p">(</span><span class="n">objectName</span><span class="p">));</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="n">TreeMap</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">&gt;</span><span class="w"> </span><span class="n">canonicalizedResource</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">TreeMap</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">&gt;</span><span class="p">();</span>
<span class="w"> </span><span class="k">for</span><span class="w"> </span><span class="p">(</span><span class="n">Map</span><span class="p">.</span><span class="na">Entry</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">&gt;</span><span class="w"> </span><span class="n">entry</span><span class="w"> </span><span class="p">:</span><span class="w"> </span><span class="n">queries</span><span class="p">.</span><span class="na">entrySet</span><span class="p">())</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">key</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">entry</span><span class="p">.</span><span class="na">getKey</span><span class="p">();</span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="n">key</span><span class="w"> </span><span class="o">==</span><span class="w"> </span><span class="kc">null</span><span class="p">)</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="k">continue</span><span class="p">;</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="n">SUB_RESOURCES</span><span class="p">.</span><span class="na">contains</span><span class="p">(</span><span class="n">key</span><span class="p">))</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">canonicalizedResource</span><span class="p">.</span><span class="na">put</span><span class="p">(</span><span class="n">key</span><span class="p">,</span><span class="w"> </span><span class="n">entry</span><span class="p">.</span><span class="na">getValue</span><span class="p">());</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="n">canonicalizedResource</span><span class="p">.</span><span class="na">size</span><span class="p">()</span><span class="w"> </span><span class="o">&gt;</span><span class="w"> </span><span class="mi">0</span><span class="p">)</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">stringToSign</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="s">&quot;?&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="k">for</span><span class="w"> </span><span class="p">(</span><span class="n">Map</span><span class="p">.</span><span class="na">Entry</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">&gt;</span><span class="w"> </span><span class="n">entry</span><span class="w"> </span><span class="p">:</span><span class="w"> </span><span class="n">canonicalizedResource</span><span class="p">.</span><span class="na">entrySet</span><span class="p">())</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">stringToSign</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="n">entry</span><span class="p">.</span><span class="na">getKey</span><span class="p">());</span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="k">this</span><span class="p">.</span><span class="na">isValid</span><span class="p">(</span><span class="n">entry</span><span class="p">.</span><span class="na">getValue</span><span class="p">()))</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">stringToSign</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="s">&quot;=&quot;</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="n">entry</span><span class="p">.</span><span class="na">getValue</span><span class="p">());</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="n">stringToSign</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="s">&quot;&amp;&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="n">stringToSign</span><span class="p">.</span><span class="na">deleteCharAt</span><span class="p">(</span><span class="n">stringToSign</span><span class="p">.</span><span class="na">length</span><span class="p">()</span><span class="w"> </span><span class="o">-</span><span class="w"> </span><span class="mi">1</span><span class="p">);</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="c1">// System.out.println(String.format(&quot;StringToSign:%s%s&quot;, SIGN_SEP, stringToSign.toString()));</span>
<span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="n">stringToSign</span><span class="p">.</span><span class="na">toString</span><span class="p">();</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="kd">public</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="nf">querySignature</span><span class="p">(</span><span class="n">String</span><span class="w"> </span><span class="n">httpMethod</span><span class="p">,</span><span class="w"> </span><span class="n">Map</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">[]&gt;</span><span class="w"> </span><span class="n">headers</span><span class="p">,</span><span class="w"> </span><span class="n">Map</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">&gt;</span><span class="w"> </span><span class="n">queries</span><span class="p">,</span><span class="w"> </span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">bucketName</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">objectName</span><span class="p">,</span><span class="w"> </span><span class="kt">long</span><span class="w"> </span><span class="n">expires</span><span class="p">)</span><span class="w"> </span><span class="kd">throws</span><span class="w"> </span><span class="n">Exception</span><span class="w"> </span><span class="p">{</span><span class="w"> </span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="o">!</span><span class="n">isBucketNameValid</span><span class="p">(</span><span class="n">bucketName</span><span class="p">))</span><span class="w"> </span><span class="p">{</span><span class="w"> </span>
<span class="w"> </span><span class="k">throw</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">IllegalArgumentException</span><span class="p">(</span><span class="s">&quot;the bucketName is illegal&quot;</span><span class="p">);</span><span class="w"> </span>
<span class="w"> </span><span class="p">}</span><span class="w"> </span>
<span class="w"> </span><span class="c1">//1. stringToSign </span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">stringToSign</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">this</span><span class="p">.</span><span class="na">stringToSign</span><span class="p">(</span><span class="n">httpMethod</span><span class="p">,</span><span class="w"> </span><span class="n">headers</span><span class="p">,</span><span class="w"> </span><span class="n">queries</span><span class="p">,</span><span class="w"> </span><span class="n">bucketName</span><span class="p">,</span><span class="w"> </span><span class="n">objectName</span><span class="p">,</span><span class="w"> </span><span class="n">expires</span><span class="p">);</span><span class="w"> </span>
<span class="w"> </span>
<span class="w"> </span><span class="c1">//2. signature </span>
<span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="k">this</span><span class="p">.</span><span class="na">encodeUrlString</span><span class="p">(</span><span class="k">this</span><span class="p">.</span><span class="na">hmacSha1</span><span class="p">(</span><span class="n">stringToSign</span><span class="p">));</span><span class="w"> </span>
<span class="w"> </span><span class="p">}</span><span class="w"> </span>
<span class="w"> </span><span class="kd">public</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="nf">getURL</span><span class="p">(</span><span class="n">String</span><span class="w"> </span><span class="n">endpoint</span><span class="p">,</span><span class="w"> </span><span class="n">Map</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">&gt;</span><span class="w"> </span><span class="n">queries</span><span class="p">,</span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">bucketName</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">objectName</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">signature</span><span class="p">,</span><span class="w"> </span><span class="kt">long</span><span class="w"> </span><span class="n">expires</span><span class="p">)</span><span class="w"> </span><span class="kd">throws</span><span class="w"> </span><span class="n">UnsupportedEncodingException</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">StringBuilder</span><span class="w"> </span><span class="n">URL</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">StringBuilder</span><span class="p">();</span>
<span class="w"> </span><span class="n">URL</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="s">&quot;https://&quot;</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="n">bucketName</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="s">&quot;.&quot;</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="n">endpoint</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="s">&quot;/&quot;</span><span class="p">).</span>
<span class="w"> </span><span class="n">append</span><span class="p">(</span><span class="k">this</span><span class="p">.</span><span class="na">encodeObjectName</span><span class="p">(</span><span class="n">objectName</span><span class="p">)).</span><span class="na">append</span><span class="p">(</span><span class="s">&quot;?&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">key</span><span class="p">;</span>
<span class="w"> </span><span class="k">for</span><span class="w"> </span><span class="p">(</span><span class="n">Map</span><span class="p">.</span><span class="na">Entry</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">&gt;</span><span class="w"> </span><span class="n">entry</span><span class="w"> </span><span class="p">:</span><span class="w"> </span><span class="n">queries</span><span class="p">.</span><span class="na">entrySet</span><span class="p">())</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">key</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">entry</span><span class="p">.</span><span class="na">getKey</span><span class="p">();</span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="n">key</span><span class="w"> </span><span class="o">==</span><span class="w"> </span><span class="kc">null</span><span class="p">)</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="k">continue</span><span class="p">;</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="n">SUB_RESOURCES</span><span class="p">.</span><span class="na">contains</span><span class="p">(</span><span class="n">key</span><span class="p">))</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">value</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">entry</span><span class="p">.</span><span class="na">getValue</span><span class="p">();</span>
<span class="w"> </span><span class="n">URL</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="n">key</span><span class="p">);</span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="n">value</span><span class="w"> </span><span class="o">!=</span><span class="w"> </span><span class="kc">null</span><span class="p">)</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">URL</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="s">&quot;=&quot;</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="n">value</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="s">&quot;&amp;&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="p">}</span><span class="w"> </span><span class="k">else</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">URL</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="s">&quot;&amp;&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="n">URL</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="s">&quot;AccessKeyId=&quot;</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="k">this</span><span class="p">.</span><span class="na">ak</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="s">&quot;&amp;Expires=&quot;</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="n">expires</span><span class="p">).</span>
<span class="w"> </span><span class="n">append</span><span class="p">(</span><span class="s">&quot;&amp;Signature=&quot;</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="n">signature</span><span class="p">);</span>
<span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="n">URL</span><span class="p">.</span><span class="na">toString</span><span class="p">();</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="kd">public</span><span class="w"> </span><span class="kd">static</span><span class="w"> </span><span class="kt">void</span><span class="w"> </span><span class="nf">main</span><span class="p">(</span><span class="n">String</span><span class="o">[]</span><span class="w"> </span><span class="n">args</span><span class="p">)</span><span class="w"> </span><span class="kd">throws</span><span class="w"> </span><span class="n">Exception</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">SignDemo</span><span class="w"> </span><span class="n">demo</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">SignDemo</span><span class="p">();</span>
<span class="w"> </span><span class="cm">/* Hard-coded or plaintext AK and SK are risky. For security purposes, encrypt your AK and SK and store them in the configuration file or environment variables.</span>
<span class="cm"> In this example, the AK and SK are stored in environment variables for identity authentication. Before running the code in this example, configure environment variables OTCCLOUD_SDK_AK and OTCCLOUD_SDK_SK. */</span>
<span class="w"> </span><span class="n">demo</span><span class="p">.</span><span class="na">ak</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">System</span><span class="p">.</span><span class="na">getenv</span><span class="p">(</span><span class="s">&quot;OTCCLOUD_SDK_AK&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="n">demo</span><span class="p">.</span><span class="na">sk</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">System</span><span class="p">.</span><span class="na">getenv</span><span class="p">(</span><span class="s">&quot;OTCCLOUD_SDK_SK&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">endpoint</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">&quot;&lt;your-endpoint&gt;&quot;</span><span class="p">;</span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">bucketName</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">&quot;bucket-test&quot;</span><span class="p">;</span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">objectName</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">&quot;hello.jpg&quot;</span><span class="p">;</span>
<span class="w"> </span><span class="c1">// A header cannot be included if you want to use a URL to access OBS with a browser. If a header is added to headers, the signature does not match. To use headers, it must be processed by the client.</span>
<span class="w"> </span><span class="n">Map</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">[]&gt;</span><span class="w"> </span><span class="n">headers</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">HashMap</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">[]&gt;</span><span class="p">();</span>
<span class="w"> </span><span class="n">Map</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">&gt;</span><span class="w"> </span><span class="n">queries</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">HashMap</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">&gt;</span><span class="p">();</span>
<span class="w"> </span><span class="c1">// Expiration time. Set it to expire in 24 hours.</span>
<span class="w"> </span><span class="kt">long</span><span class="w"> </span><span class="n">expires</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="p">(</span><span class="n">System</span><span class="p">.</span><span class="na">currentTimeMillis</span><span class="p">()</span><span class="w"> </span><span class="o">+</span><span class="w"> </span><span class="mi">86400000L</span><span class="p">)</span><span class="w"> </span><span class="o">/</span><span class="w"> </span><span class="mi">1000</span><span class="p">;</span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">signature</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">demo</span><span class="p">.</span><span class="na">querySignature</span><span class="p">(</span><span class="s">&quot;GET&quot;</span><span class="p">,</span><span class="w"> </span><span class="n">headers</span><span class="p">,</span><span class="w"> </span><span class="n">queries</span><span class="p">,</span><span class="w"> </span><span class="n">bucketName</span><span class="p">,</span><span class="w"> </span><span class="n">objectName</span><span class="p">,</span><span class="w"> </span><span class="n">expires</span><span class="p">);</span>
<span class="w"> </span><span class="n">System</span><span class="p">.</span><span class="na">out</span><span class="p">.</span><span class="na">println</span><span class="p">(</span><span class="n">signature</span><span class="p">);</span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">URL</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">demo</span><span class="p">.</span><span class="na">getURL</span><span class="p">(</span><span class="n">endpoint</span><span class="p">,</span><span class="w"> </span><span class="n">queries</span><span class="p">,</span><span class="w"> </span><span class="n">bucketName</span><span class="p">,</span><span class="w"> </span><span class="n">objectName</span><span class="p">,</span><span class="w"> </span><span class="n">signature</span><span class="p">,</span><span class="w"> </span><span class="n">expires</span><span class="p">);</span>
<span class="w"> </span><span class="n">System</span><span class="p">.</span><span class="na">out</span><span class="p">.</span><span class="na">println</span><span class="p">(</span><span class="n">URL</span><span class="p">);</span>
<span class="w"> </span><span class="p">}</span>
<span class="p">}</span>
</pre></div></td></tr></table></div>
</div>
</div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="obs_04_0008.html">Authentication</a></div>
</div>
</div>
View Git Blame Copy Permalink