vpruthi/doc-exports
1
0
Fork 0
forked from docs/doc-exports
Code Pull Requests Activity
doc-exports/docs/obs/api-ref/obs_04_0011.html
zhangyue 8ba86cabc9 OBS API DOC 
Reviewed-by: Sabelnikov, Dmitriy <dmitriy.sabelnikov@t-systems.com>
Co-authored-by: zhangyue <zhangyue164@huawei.com>
Co-committed-by: zhangyue <zhangyue164@huawei.com>
2024-05-28 10:01:19 +00:00

678 lines
94 KiB
HTML
Raw Blame History

<a name="obs_04_0011"></a><a name="obs_04_0011"></a>
<h1 class="topictitle1">Authentication of Signature in a URL</h1>
<div id="body392368"><p class="msonormal" id="obs_04_0011__p46290527">OBS allows users to construct a URL for a specific operation. The URL contains information such as the user's AK, signature, validity period, and resources. Any user who obtains the URL can perform the operation. After receiving the request, the OBS deems that the operation is performed by the user who issues the URL. For example, if the URL of an object download request carries signature information is constructed, the user who obtains the URL can download the object, but the URL is valid only within the expiration time specified by the parameter of <strong id="obs_04_0011__b1641343263412">Expires</strong>. The URL that carries the signature is used to allow others to use the pre-issued URL for identity authentication when the SK is not provided, and perform the predefined operation.</p>
<p class="msonormal" id="obs_04_0011__p13961561">The format of the message where a signature is contained in the URL:</p>
<pre class="screen" id="obs_04_0011__screen58545191">GET /ObjectKey?AccessKeyId=AccessKeyID&amp;Expires=ExpiresValue&amp;Signature=signature HTTP/1.1
Host: bucketname.obs.<em id="obs_04_0011__i317311376538">region</em>.example.com</pre>
<p class="msonormal" id="obs_04_0011__p3427143294412">The format of the message where a temporary AK/SK pair and a security token are used in the URL for downloading objects:</p>
<pre class="screen" id="obs_04_0011__screen1142816323444">GET /ObjectKey?AccessKeyId=AccessKeyID&amp;Expires=ExpiresValue&amp;Signature=signature&amp;<span style="color:#3D3F43;">x-obs-security-token=</span>securitytoken HTTP/1.1
Host: bucketname.obs.<em id="obs_04_0011__i41621102549">region</em>.example.com</pre>
<p class="msonormal" id="obs_04_0011__p44540007"><a href="#obs_04_0011__table5447121714296">Table 1</a> describes the parameters.</p>
<div class="tablenoborder"><a name="obs_04_0011__table5447121714296"></a><a name="table5447121714296"></a><table cellpadding="4" cellspacing="0" summary="" id="obs_04_0011__table5447121714296" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Request parameters</caption><thead align="left"><tr id="obs_04_0011__row1072131"><th align="left" class="cellrowborder" valign="top" width="25.509999999999998%" id="mcps1.3.7.2.4.1.1"><p id="obs_04_0011__p19733807">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="58.160000000000004%" id="mcps1.3.7.2.4.1.2"><p id="obs_04_0011__p24649069">Description</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="16.33%" id="mcps1.3.7.2.4.1.3"><p id="obs_04_0011__p51104671">Mandatory</p>
</th>
</tr>
</thead>
<tbody><tr id="obs_04_0011__row9885913"><td class="cellrowborder" valign="top" width="25.509999999999998%" headers="mcps1.3.7.2.4.1.1 "><p id="obs_04_0011__p62561513">AccessKeyId</p>
</td>
<td class="cellrowborder" valign="top" width="58.160000000000004%" headers="mcps1.3.7.2.4.1.2 "><p id="obs_04_0011__p34317810">AK information of the issuer. OBS determines the identity of the issuer based on the AK and considers that the URL is accessed by the issuer.</p>
<p id="obs_04_0011__p40424835">Type: string</p>
</td>
<td class="cellrowborder" valign="top" width="16.33%" headers="mcps1.3.7.2.4.1.3 "><p id="obs_04_0011__p53186163">Yes</p>
</td>
</tr>
<tr id="obs_04_0011__row8913420"><td class="cellrowborder" valign="top" width="25.509999999999998%" headers="mcps1.3.7.2.4.1.1 "><p id="obs_04_0011__p50898414">Expires</p>
</td>
<td class="cellrowborder" valign="top" width="58.160000000000004%" headers="mcps1.3.7.2.4.1.2 "><p id="obs_04_0011__p29130856">Indicates when the temporarily authorized URL expires, in seconds. The time must be in Coordinated Universal Time (UTC) format and later than 00:00:00 on January 1, 1970.</p>
<p id="obs_04_0011__p60851118">Type: string</p>
</td>
<td class="cellrowborder" valign="top" width="16.33%" headers="mcps1.3.7.2.4.1.3 "><p id="obs_04_0011__p29993536">Yes</p>
</td>
</tr>
<tr id="obs_04_0011__row1506375"><td class="cellrowborder" valign="top" width="25.509999999999998%" headers="mcps1.3.7.2.4.1.1 "><p id="obs_04_0011__p54907514">Signature</p>
</td>
<td class="cellrowborder" valign="top" width="58.160000000000004%" headers="mcps1.3.7.2.4.1.2 "><p id="obs_04_0011__p18323687">The signature generated using the SK and the expiration time.</p>
<p id="obs_04_0011__p30695458">Type: string</p>
</td>
<td class="cellrowborder" valign="top" width="16.33%" headers="mcps1.3.7.2.4.1.3 "><p id="obs_04_0011__p3304150">Yes</p>
</td>
</tr>
<tr id="obs_04_0011__row142296248158"><td class="cellrowborder" valign="top" width="25.509999999999998%" headers="mcps1.3.7.2.4.1.1 "><p id="obs_04_0011__p1722982419150"><span style="color:#3D3F43;">x-obs-security-token</span></p>
</td>
<td class="cellrowborder" valign="top" width="58.160000000000004%" headers="mcps1.3.7.2.4.1.2 "><p id="obs_04_0011__p1322942441515">During temporary authentication, the temporary AK/SK and security token must be used at the same time and the <strong id="obs_04_0011__b129681510165">x-obs-security-token</strong> field must be added to the request header.</p>
<p id="obs_04_0011__p1441319203411">For details about how to obtain a temporary AK/SK pair and security token, see <a href="https://docs.otc.t-systems.com/api/iam/en-us_topic_0097949518.html" target="_blank" rel="noopener noreferrer">Obtaining a Temporary AK/SK Pair and Security Token</a>.</p>
</td>
<td class="cellrowborder" valign="top" width="16.33%" headers="mcps1.3.7.2.4.1.3 "><p id="obs_04_0011__p192295249152">No</p>
</td>
</tr>
</tbody>
</table>
</div>
<p id="obs_04_0011__p1829204354415">The process of calculating a signature is as follows:</p>
<ol id="obs_04_0011__ol178761615104618"><li id="obs_04_0011__li587641544619"><a name="obs_04_0011__li587641544619"></a><a name="li587641544619"></a>Construct the StringToSign.</li><li id="obs_04_0011__li4876101544611"><a name="obs_04_0011__li4876101544611"></a><a name="li4876101544611"></a>Encode the result of <a href="#obs_04_0011__li587641544619">1</a> in UTF-8.</li><li id="obs_04_0011__li187621516463"><a name="obs_04_0011__li187621516463"></a><a name="li187621516463"></a>Use the SK to calculate the HMAC-SHA1 signature on the result of <a href="#obs_04_0011__li4876101544611">2</a>.</li><li id="obs_04_0011__li208761159468"><a name="obs_04_0011__li208761159468"></a><a name="li208761159468"></a>Encode the result of <a href="#obs_04_0011__li187621516463">3</a> in Base64.</li><li id="obs_04_0011__li1387691554615">Encode the result of <a href="#obs_04_0011__li208761159468">4</a> in URL to obtain the signature.</li></ol>
<p id="obs_04_0011__p250708164620"></p>
<p id="obs_04_0011__p84671611203418">The StringToSign is constructed according to the following rules. <a href="#obs_04_0011__table34479832212511">Table 2</a> describes the parameters.</p>
<pre class="screen" id="obs_04_0011__screen12451234103613">StringToSign =
HTTP-Verb + <span style="color:#50A14F;">"\n"</span> +
Content-MD5 + <span style="color:#50A14F;">"\n"</span> +
Content-Type + <span style="color:#50A14F;">"\n"</span> +
Expires + <span style="color:#50A14F;">"\n"</span> +
CanonicalizedHeaders + CanonicalizedResource; </pre>
<div class="tablenoborder"><a name="obs_04_0011__table34479832212511"></a><a name="table34479832212511"></a><table cellpadding="4" cellspacing="0" summary="" id="obs_04_0011__table34479832212511" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Parameters required for constructing a StringToSign</caption><thead align="left"><tr id="obs_04_0011__row42478738"><th align="left" class="cellrowborder" valign="top" width="30%" id="mcps1.3.13.2.3.1.1"><p id="obs_04_0011__p18225769">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="70%" id="mcps1.3.13.2.3.1.2"><p id="obs_04_0011__p67001213">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="obs_04_0011__row58389173"><td class="cellrowborder" valign="top" width="30%" headers="mcps1.3.13.2.3.1.1 "><p id="obs_04_0011__p31902586">HTTP-Verb</p>
</td>
<td class="cellrowborder" valign="top" width="70%" headers="mcps1.3.13.2.3.1.2 "><p id="obs_04_0011__p33972659">Indicates an HTTP request method supported by the OBS REST API. The value can be an HTTP verb such as <strong id="obs_04_0011__b6161112442311">PUT</strong>, <strong id="obs_04_0011__b1516210248233">GET</strong>, or <strong id="obs_04_0011__b6163162412231">DELETE</strong>.</p>
</td>
</tr>
<tr id="obs_04_0011__row101952243422"><td class="cellrowborder" valign="top" width="30%" headers="mcps1.3.13.2.3.1.1 "><p id="obs_04_0011__p595111278426">Content-MD5</p>
</td>
<td class="cellrowborder" valign="top" width="70%" headers="mcps1.3.13.2.3.1.2 "><p id="obs_04_0011__p29516273427">Base64-encoded 128-bit MD5 digest of the message according to RFC 1864. This parameter can be empty.</p>
</td>
</tr>
<tr id="obs_04_0011__row1824493"><td class="cellrowborder" valign="top" width="30%" headers="mcps1.3.13.2.3.1.1 "><p id="obs_04_0011__p13566274">Content-Type</p>
</td>
<td class="cellrowborder" valign="top" width="70%" headers="mcps1.3.13.2.3.1.2 "><p id="obs_04_0011__p25126432">Specifies the message type, for example, <strong id="obs_04_0011__b166401773">text/plain</strong>.</p>
<p id="obs_04_0011__p24811297">If a request does not contain this header field, this parameter is deemed as an empty string.</p>
</td>
</tr>
<tr id="obs_04_0011__row106651047155213"><td class="cellrowborder" valign="top" width="30%" headers="mcps1.3.13.2.3.1.1 "><p id="obs_04_0011__p4666144765219">Expires</p>
</td>
<td class="cellrowborder" valign="top" width="70%" headers="mcps1.3.13.2.3.1.2 "><p id="obs_04_0011__p106661347145210">Expiration time of the temporary authorization, that is, the value of parameter <strong id="obs_04_0011__b535810541316">Expires</strong> in the request message: <strong id="obs_04_0011__b310353213215">ExpiresValue</strong>.</p>
</td>
</tr>
<tr id="obs_04_0011__row42990474"><td class="cellrowborder" valign="top" width="30%" headers="mcps1.3.13.2.3.1.1 "><p id="obs_04_0011__p59676394">CanonicalizedHeaders</p>
</td>
<td class="cellrowborder" valign="top" width="70%" headers="mcps1.3.13.2.3.1.2 "><p id="obs_04_0011__p1949763">OBS request header field in an HTTP request header, referring to header fields starting with <strong id="obs_04_0011__b392010210819">x-obs-</strong>, such as, <strong id="obs_04_0011__b692082382">x-obs-date</strong>, <strong id="obs_04_0011__b3920621280">x-obs-acl</strong>, and <strong id="obs_04_0011__b1892019213811">x-obs-meta-*</strong>.</p>
<ol id="obs_04_0011__ol145715617477"><li id="obs_04_0011__li75756104712">All characters of keywords in the header field must be converted to lower-case letters. If a request contains multiple header fields, these fields should be organized by keywords in the alphabetical order from a to z.</li><li id="obs_04_0011__li1497111394712">If multiple header fields in a request have the same prefix, combine the header fields into one. For example, <strong id="obs_04_0011__b14763015115016">x-obs-meta-name:name1</strong> and <strong id="obs_04_0011__b67632015125013">x-obs-meta-name:name2</strong> should be reorganized into <strong id="obs_04_0011__b1763515155017">x-obs-meta-name:name1,name2</strong>. Use comma to separate the values.</li><li id="obs_04_0011__li18224198471">Keywords in the request header field cannot contain non-ASCII or unrecognizable characters, which are also not advisable for values in the request header field. If the two types of characters are necessary, they should be encoded and decoded on the client side. Either URL encoding or Base64 encoding is acceptable, but the server does not perform decoding.</li><li id="obs_04_0011__li8253142214474">Delete meaningless spaces and tabs in a header field. For example, <strong id="obs_04_0011__b1347516196813">x-obs-meta-name: name</strong> (with a meaningless space before <strong id="obs_04_0011__b15475219784">name</strong>) must be changed to <strong id="obs_04_0011__b147515192089">x-obs-meta-name:name</strong>.</li><li id="obs_04_0011__li1011862617470">Each header field occupies a separate line.</li></ol>
</td>
</tr>
<tr id="obs_04_0011__row7450793"><td class="cellrowborder" valign="top" width="30%" headers="mcps1.3.13.2.3.1.1 "><p id="obs_04_0011__p66643399">CanonicalizedResource</p>
</td>
<td class="cellrowborder" valign="top" width="70%" headers="mcps1.3.13.2.3.1.2 "><p id="obs_04_0011__p29406249">Indicates the OBS resource specified by an HTTP request. This parameter is constructed as follows:</p>
<p id="obs_04_0011__p63329656">&lt;Bucket name + Object name&gt; + [Subresource 1] + [Subresource 2] + ...</p>
<ol id="obs_04_0011__ol135483613475"><li id="obs_04_0011__li1739510379234">Bucket name and object name, for example, <strong id="obs_04_0011__b126351417152615">/<em id="obs_04_0011__i863461782611">bucket</em>/<em id="obs_04_0011__i9634191720269">object</em></strong>. If no object name is specified, for example, <strong id="obs_04_0011__b176365177263">/<em id="obs_04_0011__i96351717182611">bucket</em>/</strong>, the entire bucket is listed. If no bucket name is specified either, the value of this field is <strong id="obs_04_0011__b12636171716265">/</strong>.</li><li id="obs_04_0011__li94301458125415">If a subresource (such as <strong id="obs_04_0011__b19735101091020">?acl</strong> and <strong id="obs_04_0011__b67471610161010">?logging</strong>) exists, the subresource must be added.<p id="obs_04_0011__p167755915411">OBS supports a variety of sub-resources, including acl, attname, cors, customdomain, delete, deletebucket, encryption, inventory, length, lifecycle, location, logging, metadata, modify, name, notification, partNumber, policy, position, quota, rename, replication, requestPayment, response-cache-control, response-content-disposition, response-content-encoding, response-content-language, response-content-type, response-expires, restore, storageClass, storagePolicy, storageinfo, tagging, torrent, truncate, uploadId, uploads, versionId, versioning, versions, website, object-lock, retention, and x-obs-security-token.</p>
</li><li id="obs_04_0011__li20542104114716">If there are multiple subresources, sort them in the alphabetical order from a to z, and use <strong id="obs_04_0011__b217162384717">&amp;</strong> to combine the subresources.</li></ol>
<div class="note" id="obs_04_0011__note196756717914"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="obs_04_0011__ul116221356133916"><li id="obs_04_0011__li156221356133912">A subresource is unique. Do not add subresources with the same keyword (for example, <strong id="obs_04_0011__b66581225164712">key=value1&amp;key=value2</strong>) in the same request URL. In this case, signature is computed only based on the first subresource, and only the value of the first subresource takes effect on the actual service.</li><li id="obs_04_0011__li1321451571811">Using the <strong id="obs_04_0011__b1155512711478">GetObject</strong> API as an example, assume there is a bucket named <strong id="obs_04_0011__b155564274479">bucket-test</strong> and an object named <strong id="obs_04_0011__b1755682764710">object-test</strong> in the bucket, and the object version is <strong id="obs_04_0011__b355610273472">xxx</strong>. When obtaining the object, you need to rewrite Content-Type to <strong id="obs_04_0011__b05561327154712">text/plain</strong>. Then, the <strong id="obs_04_0011__b13556627144714">CanonicalizedResource</strong> calculated by the signature is <strong id="obs_04_0011__b205561627194720">/bucket-test/object-test?response-content-type=text/plain&amp;versionId=xxx</strong>.</li></ul>
</div></div>
</td>
</tr>
</tbody>
</table>
</div>
<p id="obs_04_0011__p1327215229377">The signature is generated as follows based on the StringToSign and SK. The hash-based message authentication code algorithm (HMAC algorithm) is used to generate the signature.</p>
<pre class="screen" id="obs_04_0011__screen149461737419">Signature = URL-Encode( Base64( HMAC-SHA1( YourSecretAccessKeyID, UTF-8-Encoding-Of( StringToSign ) ) ) )</pre>
<p class="msonormal" id="obs_04_0011__p50970824">The method for calculating the signature carried in the URL is different from that for calculating the authorization signature carried in a header.</p>
<ul id="obs_04_0011__ul56084236"><li id="obs_04_0011__li29737353">The signature in the URL must be encoded using the URL after Base64 encoding.</li><li id="obs_04_0011__li66309591"><strong id="obs_04_0011__b64244561">Expires</strong> in <strong id="obs_04_0011__b41330139">StringToSign</strong> corresponds to <strong id="obs_04_0011__b36426933">Date</strong> in authorization information.</li></ul>
<p id="obs_04_0011__p7875151012718"></p>
<p id="obs_04_0011__p101529616496">Generate a predefined URL instance for the browser by carrying the signature in the URL.</p>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="obs_04_0011__table47748300" frame="border" border="1" rules="all"><caption><b>Table 3 </b>Request that has the signature carried in the URL and the StringToSign</caption><thead align="left"><tr id="obs_04_0011__row66793295"><th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.20.2.3.1.1"><p id="obs_04_0011__p41547828">Request Header</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.20.2.3.1.2"><p id="obs_04_0011__p9930893">StringToSign</p>
</th>
</tr>
</thead>
<tbody><tr id="obs_04_0011__row66204867"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.20.2.3.1.1 "><p id="obs_04_0011__p422518916476">GET /objectkey?AccessKeyId=<span style="color:#3D3F43;">MFyfvK41ba2giqM7Uio6PznpdUKGpownRZlmVmHc</span>&amp;Expires=1532779451&amp;Signature=0Akylf43Bm3mD1bh2rM3dmVp1Bo%3D HTTP/1.1</p>
<p id="obs_04_0011__p1372944308">Host: examplebucket.obs.<em id="obs_04_0011__i116431445401">region</em>.example.com</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.20.2.3.1.2 "><p id="obs_04_0011__p11355167">GET \n</p>
<p id="obs_04_0011__p35087639">\n</p>
<p id="obs_04_0011__p15827441520">\n</p>
<p id="obs_04_0011__p47353302">1532779451\n</p>
<p id="obs_04_0011__p23526540">/examplebucket/objectkey</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="obs_04_0011__table104365472404" frame="border" border="1" rules="all"><caption><b>Table 4 </b>Object download request that has the temporary AK/SK and security token carried in the URL and the StringToSign</caption><thead align="left"><tr id="obs_04_0011__row84376477405"><th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.21.2.3.1.1"><p id="obs_04_0011__p643774764016">Request Header</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.21.2.3.1.2"><p id="obs_04_0011__p977482218417">StringToSign</p>
</th>
</tr>
</thead>
<tbody><tr id="obs_04_0011__row19437547184013"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.21.2.3.1.1 "><p id="obs_04_0011__p131218290418">GET /objectkey?AccessKeyId=<span style="color:#3D3F43;">MFyfvK41ba2giqM7Uio6PznpdUKGpownRZlmVmHc</span>&amp;Expires=1532779451&amp;Signature=0Akylf43Bm3mD1bh2rM3dmVp1Bo%3D&amp;<span style="color:#3D3F43;">x-obs-security-token=</span>YwkaRTbdY8g7q.... HTTP/1.1</p>
<p id="obs_04_0011__p6122029164116">Host: examplebucket.obs.<em id="obs_04_0011__i111252914111">region</em>.example.com</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.21.2.3.1.2 "><p id="obs_04_0011__p12133293414">GET \n</p>
<p id="obs_04_0011__p2137294411">\n</p>
<p id="obs_04_0011__p181352954119">\n</p>
<p id="obs_04_0011__p151392964112">1532779451\n</p>
<p id="obs_04_0011__p31318296418">/examplebucket/objectkey?<span style="color:#3D3F43;">x-obs-security-token=</span>YwkaRTbdY8g7q....</p>
</td>
</tr>
</tbody>
</table>
</div>
<p id="obs_04_0011__p6969185355414">Calculation rule of the signature</p>
<pre class="screen" id="obs_04_0011__screen3282186165515">Signature = URL-Encode( Base64( HMAC-SHA1( YourSecretAccessKeyID, UTF-8-Encoding-Of( StringToSign ) ) ) )</pre>
<p id="obs_04_0011__p1944104195517">Calculate the signature and use the host as the prefix of the URL to generate a predefined URL:</p>
<p id="obs_04_0011__p1364618274112">http(s)://examplebucket.obs.<em id="obs_04_0011__i1749314281013">region</em>.example.com/objectkey?AccessKeyId=AccessKeyID&amp;Expires=1532779451&amp;Signature=0Akylf43Bm3mD1bh2rM3dmVp1Bo%3D</p>
<p id="obs_04_0011__p6821252165918">If you enter the address in the browser, then the object <strong id="obs_04_0011__b1377451633517">objectkey</strong> in the <strong id="obs_04_0011__b54493329350">examplebucket</strong> bucket can be downloaded. The validity period of this link is <strong id="obs_04_0011__b1544254193517">1532779451</strong> (indicating Sat Jul 28 20:04:11 CST 2018).</p>
<p id="obs_04_0011__p197521651362">In the Linux operating system, when running the <strong id="obs_04_0011__b855152915266">curl</strong> command, you need to add a forward slash (\) to escape the character (&amp;). The following command can download the <strong id="obs_04_0011__b23234320297">objectkey</strong> object to the <strong id="obs_04_0011__b19435193614294">output</strong> file:</p>
<p id="obs_04_0011__p767220191439">curl http(s)://examplebucket.obs.<em id="obs_04_0011__i136721619154313">region</em>.example.com/objectkey?AccessKeyId=AccessKeyID\&amp;Expires=1532779451\&amp;Signature=0Akylf43Bm3mD1bh2rM3dmVp1Bo%3D -X GET -o output</p>
<div class="note" id="obs_04_0011__note114221355114513"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="obs_04_0011__p9876603478">If you want to use the pre-defined URL generated by the signature carried in the URL in the browser, do not use Content-MD5, Content-Type, or CanonicalizedHeaders that can only be carried in the header to calculate the signature. Otherwise, the browser cannot carry these parameters. After the request is sent to the server, a message is displayed indicating that the signature is incorrect.</p>
</div></div>
<div class="section" id="obs_04_0011__section131611926171613"><h4 class="sectiontitle">Signature Calculation in Java</h4><div class="codecoloring" codetype="Java" id="obs_04_0011__screen10483183017405"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal"> 1</span>
<span class="normal"> 2</span>
<span class="normal"> 3</span>
<span class="normal"> 4</span>
<span class="normal"> 5</span>
<span class="normal"> 6</span>
<span class="normal"> 7</span>
<span class="normal"> 8</span>
<span class="normal"> 9</span>
<span class="normal"> 10</span>
<span class="normal"> 11</span>
<span class="normal"> 12</span>
<span class="normal"> 13</span>
<span class="normal"> 14</span>
<span class="normal"> 15</span>
<span class="normal"> 16</span>
<span class="normal"> 17</span>
<span class="normal"> 18</span>
<span class="normal"> 19</span>
<span class="normal"> 20</span>
<span class="normal"> 21</span>
<span class="normal"> 22</span>
<span class="normal"> 23</span>
<span class="normal"> 24</span>
<span class="normal"> 25</span>
<span class="normal"> 26</span>
<span class="normal"> 27</span>
<span class="normal"> 28</span>
<span class="normal"> 29</span>
<span class="normal"> 30</span>
<span class="normal"> 31</span>
<span class="normal"> 32</span>
<span class="normal"> 33</span>
<span class="normal"> 34</span>
<span class="normal"> 35</span>
<span class="normal"> 36</span>
<span class="normal"> 37</span>
<span class="normal"> 38</span>
<span class="normal"> 39</span>
<span class="normal"> 40</span>
<span class="normal"> 41</span>
<span class="normal"> 42</span>
<span class="normal"> 43</span>
<span class="normal"> 44</span>
<span class="normal"> 45</span>
<span class="normal"> 46</span>
<span class="normal"> 47</span>
<span class="normal"> 48</span>
<span class="normal"> 49</span>
<span class="normal"> 50</span>
<span class="normal"> 51</span>
<span class="normal"> 52</span>
<span class="normal"> 53</span>
<span class="normal"> 54</span>
<span class="normal"> 55</span>
<span class="normal"> 56</span>
<span class="normal"> 57</span>
<span class="normal"> 58</span>
<span class="normal"> 59</span>
<span class="normal"> 60</span>
<span class="normal"> 61</span>
<span class="normal"> 62</span>
<span class="normal"> 63</span>
<span class="normal"> 64</span>
<span class="normal"> 65</span>
<span class="normal"> 66</span>
<span class="normal"> 67</span>
<span class="normal"> 68</span>
<span class="normal"> 69</span>
<span class="normal"> 70</span>
<span class="normal"> 71</span>
<span class="normal"> 72</span>
<span class="normal"> 73</span>
<span class="normal"> 74</span>
<span class="normal"> 75</span>
<span class="normal"> 76</span>
<span class="normal"> 77</span>
<span class="normal"> 78</span>
<span class="normal"> 79</span>
<span class="normal"> 80</span>
<span class="normal"> 81</span>
<span class="normal"> 82</span>
<span class="normal"> 83</span>
<span class="normal"> 84</span>
<span class="normal"> 85</span>
<span class="normal"> 86</span>
<span class="normal"> 87</span>
<span class="normal"> 88</span>
<span class="normal"> 89</span>
<span class="normal"> 90</span>
<span class="normal"> 91</span>
<span class="normal"> 92</span>
<span class="normal"> 93</span>
<span class="normal"> 94</span>
<span class="normal"> 95</span>
<span class="normal"> 96</span>
<span class="normal"> 97</span>
<span class="normal"> 98</span>
<span class="normal"> 99</span>
<span class="normal">100</span>
<span class="normal">101</span>
<span class="normal">102</span>
<span class="normal">103</span>
<span class="normal">104</span>
<span class="normal">105</span>
<span class="normal">106</span>
<span class="normal">107</span>
<span class="normal">108</span>
<span class="normal">109</span>
<span class="normal">110</span>
<span class="normal">111</span>
<span class="normal">112</span>
<span class="normal">113</span>
<span class="normal">114</span>
<span class="normal">115</span>
<span class="normal">116</span>
<span class="normal">117</span>
<span class="normal">118</span>
<span class="normal">119</span>
<span class="normal">120</span>
<span class="normal">121</span>
<span class="normal">122</span>
<span class="normal">123</span>
<span class="normal">124</span>
<span class="normal">125</span>
<span class="normal">126</span>
<span class="normal">127</span>
<span class="normal">128</span>
<span class="normal">129</span>
<span class="normal">130</span>
<span class="normal">131</span>
<span class="normal">132</span>
<span class="normal">133</span>
<span class="normal">134</span>
<span class="normal">135</span>
<span class="normal">136</span>
<span class="normal">137</span>
<span class="normal">138</span>
<span class="normal">139</span>
<span class="normal">140</span>
<span class="normal">141</span>
<span class="normal">142</span>
<span class="normal">143</span>
<span class="normal">144</span>
<span class="normal">145</span>
<span class="normal">146</span>
<span class="normal">147</span>
<span class="normal">148</span>
<span class="normal">149</span>
<span class="normal">150</span>
<span class="normal">151</span>
<span class="normal">152</span>
<span class="normal">153</span>
<span class="normal">154</span>
<span class="normal">155</span>
<span class="normal">156</span>
<span class="normal">157</span>
<span class="normal">158</span>
<span class="normal">159</span>
<span class="normal">160</span>
<span class="normal">161</span>
<span class="normal">162</span>
<span class="normal">163</span>
<span class="normal">164</span>
<span class="normal">165</span>
<span class="normal">166</span>
<span class="normal">167</span>
<span class="normal">168</span>
<span class="normal">169</span>
<span class="normal">170</span>
<span class="normal">171</span>
<span class="normal">172</span>
<span class="normal">173</span>
<span class="normal">174</span>
<span class="normal">175</span>
<span class="normal">176</span>
<span class="normal">177</span>
<span class="normal">178</span>
<span class="normal">179</span>
<span class="normal">180</span>
<span class="normal">181</span>
<span class="normal">182</span>
<span class="normal">183</span>
<span class="normal">184</span>
<span class="normal">185</span>
<span class="normal">186</span>
<span class="normal">187</span>
<span class="normal">188</span>
<span class="normal">189</span>
<span class="normal">190</span>
<span class="normal">191</span>
<span class="normal">192</span>
<span class="normal">193</span>
<span class="normal">194</span>
<span class="normal">195</span>
<span class="normal">196</span>
<span class="normal">197</span>
<span class="normal">198</span>
<span class="normal">199</span>
<span class="normal">200</span>
<span class="normal">201</span>
<span class="normal">202</span>
<span class="normal">203</span>
<span class="normal">204</span>
<span class="normal">205</span>
<span class="normal">206</span>
<span class="normal">207</span>
<span class="normal">208</span>
<span class="normal">209</span>
<span class="normal">210</span>
<span class="normal">211</span>
<span class="normal">212</span>
<span class="normal">213</span>
<span class="normal">214</span>
<span class="normal">215</span>
<span class="normal">216</span>
<span class="normal">217</span>
<span class="normal">218</span>
<span class="normal">219</span>
<span class="normal">220</span>
<span class="normal">221</span>
<span class="normal">222</span>
<span class="normal">223</span>
<span class="normal">224</span>
<span class="normal">225</span>
<span class="normal">226</span>
<span class="normal">227</span>
<span class="normal">228</span>
<span class="normal">229</span>
<span class="normal">230</span>
<span class="normal">231</span>
<span class="normal">232</span>
<span class="normal">233</span>
<span class="normal">234</span>
<span class="normal">235</span>
<span class="normal">236</span>
<span class="normal">237</span>
<span class="normal">238</span>
<span class="normal">239</span>
<span class="normal">240</span>
<span class="normal">241</span>
<span class="normal">242</span>
<span class="normal">243</span>
<span class="normal">244</span>
<span class="normal">245</span>
<span class="normal">246</span>
<span class="normal">247</span>
<span class="normal">248</span>
<span class="normal">249</span>
<span class="normal">250</span></pre></div></td><td class="code"><div><pre><span></span><span class="kn">import</span><span class="w"> </span><span class="nn">java.io.UnsupportedEncodingException</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.net.URLEncoder</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.security.InvalidKeyException</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.security.NoSuchAlgorithmException</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.util.ArrayList</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.util.Arrays</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.util.Base64</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.util.Collections</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.util.HashMap</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.util.List</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.util.Locale</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.util.Map</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.util.TreeMap</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.util.regex.Pattern</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">javax.crypto.Mac</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">javax.crypto.spec.SecretKeySpec</span><span class="p">;</span>
<span class="kd">public</span><span class="w"> </span><span class="kd">class</span> <span class="nc">SignDemo</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="kd">private</span><span class="w"> </span><span class="kd">static</span><span class="w"> </span><span class="kd">final</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">SIGN_SEP</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">&quot;\n&quot;</span><span class="p">;</span>
<span class="w"> </span><span class="kd">private</span><span class="w"> </span><span class="kd">static</span><span class="w"> </span><span class="kd">final</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">OBS_PREFIX</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">&quot;x-obs-&quot;</span><span class="p">;</span>
<span class="w"> </span><span class="kd">private</span><span class="w"> </span><span class="kd">static</span><span class="w"> </span><span class="kd">final</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">DEFAULT_ENCODING</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">&quot;UTF-8&quot;</span><span class="p">;</span>
<span class="w"> </span><span class="kd">private</span><span class="w"> </span><span class="kd">static</span><span class="w"> </span><span class="kd">final</span><span class="w"> </span><span class="n">List</span><span class="o">&lt;</span><span class="n">String</span><span class="o">&gt;</span><span class="w"> </span><span class="n">SUB_RESOURCES</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">Collections</span><span class="p">.</span><span class="na">unmodifiableList</span><span class="p">(</span><span class="n">Arrays</span><span class="p">.</span><span class="na">asList</span><span class="p">(</span>
<span class="w"> </span><span class="s">&quot;CDNNotifyConfiguration&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;acl&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;attname&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;cors&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;customdomain&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;delete&quot;</span><span class="p">,</span>
<span class="w"> </span><span class="s">&quot;deletebucket&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;encryption&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;inventory&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;length&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;lifecycle&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;location&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;logging&quot;</span><span class="p">,</span>
<span class="w"> </span><span class="s">&quot;metadata&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;mirrorBackToSource&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;modify&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;name&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;notification&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;obscompresspolicy&quot;</span><span class="p">,</span><span class="w"> </span>
<span class="w"> </span><span class="s">&quot;partNumber&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;policy&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;position&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;quota&quot;</span><span class="p">,</span><span class="s">&quot;rename&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;replication&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;requestPayment&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;response-cache-control&quot;</span><span class="p">,</span><span class="w"> </span>
<span class="w"> </span><span class="s">&quot;response-content-disposition&quot;</span><span class="p">,</span><span class="s">&quot;response-content-encoding&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;response-content-language&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;response-content-type&quot;</span><span class="p">,</span><span class="w"> </span>
<span class="w"> </span><span class="s">&quot;response-expires&quot;</span><span class="p">,</span><span class="s">&quot;restore&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;storageClass&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;storagePolicy&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;storageinfo&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;tagging&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;torrent&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;truncate&quot;</span><span class="p">,</span>
<span class="w"> </span><span class="s">&quot;uploadId&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;uploads&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;versionId&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;versioning&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;versions&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;website&quot;</span><span class="p">,</span><span class="w"> </span>
<span class="w"> </span><span class="s">&quot;x-obs-security-token&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;object-lock&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;retention&quot;</span><span class="p">));</span>
<span class="w"> </span><span class="kd">private</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">ak</span><span class="p">;</span>
<span class="w"> </span><span class="kd">private</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">sk</span><span class="p">;</span>
<span class="w"> </span><span class="kd">private</span><span class="w"> </span><span class="kt">boolean</span><span class="w"> </span><span class="nf">isBucketNameValid</span><span class="p">(</span><span class="n">String</span><span class="w"> </span><span class="n">bucketName</span><span class="p">)</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="n">bucketName</span><span class="w"> </span><span class="o">==</span><span class="w"> </span><span class="kc">null</span><span class="w"> </span><span class="o">||</span><span class="w"> </span><span class="n">bucketName</span><span class="p">.</span><span class="na">length</span><span class="p">()</span><span class="w"> </span><span class="o">&gt;</span><span class="w"> </span><span class="mi">63</span><span class="w"> </span><span class="o">||</span><span class="w"> </span><span class="n">bucketName</span><span class="p">.</span><span class="na">length</span><span class="p">()</span><span class="w"> </span><span class="o">&lt;</span><span class="w"> </span><span class="mi">3</span><span class="p">)</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="kc">false</span><span class="p">;</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="o">!</span><span class="n">Pattern</span><span class="p">.</span><span class="na">matches</span><span class="p">(</span><span class="s">&quot;^[a-z0-9][a-z0-9.-]+$&quot;</span><span class="p">,</span><span class="w"> </span><span class="n">bucketName</span><span class="p">))</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="kc">false</span><span class="p">;</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="n">Pattern</span><span class="p">.</span><span class="na">matches</span><span class="p">(</span><span class="s">&quot;(\\d{1,3}\\.){3}\\d{1,3}&quot;</span><span class="p">,</span><span class="w"> </span><span class="n">bucketName</span><span class="p">))</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="kc">false</span><span class="p">;</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="n">String</span><span class="o">[]</span><span class="w"> </span><span class="n">fragments</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">bucketName</span><span class="p">.</span><span class="na">split</span><span class="p">(</span><span class="s">&quot;\\.&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="k">for</span><span class="w"> </span><span class="p">(</span><span class="kt">int</span><span class="w"> </span><span class="n">i</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="mi">0</span><span class="p">;</span><span class="w"> </span><span class="n">i</span><span class="w"> </span><span class="o">&lt;</span><span class="w"> </span><span class="n">fragments</span><span class="p">.</span><span class="na">length</span><span class="p">;</span><span class="w"> </span><span class="n">i</span><span class="o">++</span><span class="p">)</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="n">Pattern</span><span class="p">.</span><span class="na">matches</span><span class="p">(</span><span class="s">&quot;^-.*&quot;</span><span class="p">,</span><span class="w"> </span><span class="n">fragments</span><span class="o">[</span><span class="n">i</span><span class="o">]</span><span class="p">)</span><span class="w"> </span><span class="o">||</span><span class="w"> </span><span class="n">Pattern</span><span class="p">.</span><span class="na">matches</span><span class="p">(</span><span class="s">&quot;.*-$&quot;</span><span class="p">,</span><span class="w"> </span><span class="n">fragments</span><span class="o">[</span><span class="n">i</span><span class="o">]</span><span class="p">)</span>
<span class="w"> </span><span class="o">||</span><span class="w"> </span><span class="n">Pattern</span><span class="p">.</span><span class="na">matches</span><span class="p">(</span><span class="s">&quot;^$&quot;</span><span class="p">,</span><span class="w"> </span><span class="n">fragments</span><span class="o">[</span><span class="n">i</span><span class="o">]</span><span class="p">))</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="kc">false</span><span class="p">;</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="kc">true</span><span class="p">;</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="kd">public</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="nf">encodeUrlString</span><span class="p">(</span><span class="n">String</span><span class="w"> </span><span class="n">path</span><span class="p">)</span><span class="w"> </span><span class="kd">throws</span><span class="w"> </span><span class="n">UnsupportedEncodingException</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="n">URLEncoder</span><span class="p">.</span><span class="na">encode</span><span class="p">(</span><span class="n">path</span><span class="p">,</span><span class="w"> </span><span class="n">DEFAULT_ENCODING</span><span class="p">)</span>
<span class="w"> </span><span class="p">.</span><span class="na">replaceAll</span><span class="p">(</span><span class="s">&quot;\\+&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;%20&quot;</span><span class="p">)</span>
<span class="w"> </span><span class="p">.</span><span class="na">replaceAll</span><span class="p">(</span><span class="s">&quot;\\*&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;%2A&quot;</span><span class="p">)</span>
<span class="w"> </span><span class="p">.</span><span class="na">replaceAll</span><span class="p">(</span><span class="s">&quot;%7E&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;~&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="kd">public</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="nf">encodeObjectName</span><span class="p">(</span><span class="n">String</span><span class="w"> </span><span class="n">objectName</span><span class="p">)</span><span class="w"> </span><span class="kd">throws</span><span class="w"> </span><span class="n">UnsupportedEncodingException</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">StringBuilder</span><span class="w"> </span><span class="n">result</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">StringBuilder</span><span class="p">();</span>
<span class="w"> </span><span class="n">String</span><span class="o">[]</span><span class="w"> </span><span class="n">tokens</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">objectName</span><span class="p">.</span><span class="na">split</span><span class="p">(</span><span class="s">&quot;/&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="k">for</span><span class="w"> </span><span class="p">(</span><span class="kt">int</span><span class="w"> </span><span class="n">i</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="mi">0</span><span class="p">;</span><span class="w"> </span><span class="n">i</span><span class="w"> </span><span class="o">&lt;</span><span class="w"> </span><span class="n">tokens</span><span class="p">.</span><span class="na">length</span><span class="p">;</span><span class="w"> </span><span class="n">i</span><span class="o">++</span><span class="p">)</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">result</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="k">this</span><span class="p">.</span><span class="na">encodeUrlString</span><span class="p">(</span><span class="n">tokens</span><span class="o">[</span><span class="n">i</span><span class="o">]</span><span class="p">));</span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="n">i</span><span class="w"> </span><span class="o">&lt;</span><span class="w"> </span><span class="n">tokens</span><span class="p">.</span><span class="na">length</span><span class="w"> </span><span class="o">-</span><span class="w"> </span><span class="mi">1</span><span class="p">)</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">result</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="s">&quot;/&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="n">result</span><span class="p">.</span><span class="na">toString</span><span class="p">();</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="kd">private</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="nf">join</span><span class="p">(</span><span class="n">List</span><span class="o">&lt;?&gt;</span><span class="w"> </span><span class="n">items</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">delimiter</span><span class="p">)</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">StringBuilder</span><span class="w"> </span><span class="n">sb</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">StringBuilder</span><span class="p">();</span>
<span class="w"> </span><span class="k">for</span><span class="w"> </span><span class="p">(</span><span class="kt">int</span><span class="w"> </span><span class="n">i</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="mi">0</span><span class="p">;</span><span class="w"> </span><span class="n">i</span><span class="w"> </span><span class="o">&lt;</span><span class="w"> </span><span class="n">items</span><span class="p">.</span><span class="na">size</span><span class="p">();</span><span class="w"> </span><span class="n">i</span><span class="o">++</span><span class="p">)</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">item</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">items</span><span class="p">.</span><span class="na">get</span><span class="p">(</span><span class="n">i</span><span class="p">).</span><span class="na">toString</span><span class="p">();</span>
<span class="w"> </span><span class="n">sb</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="n">item</span><span class="p">);</span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="n">i</span><span class="w"> </span><span class="o">&lt;</span><span class="w"> </span><span class="n">items</span><span class="p">.</span><span class="na">size</span><span class="p">()</span><span class="w"> </span><span class="o">-</span><span class="w"> </span><span class="mi">1</span><span class="p">)</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">sb</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="n">delimiter</span><span class="p">);</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="n">sb</span><span class="p">.</span><span class="na">toString</span><span class="p">();</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="kd">private</span><span class="w"> </span><span class="kt">boolean</span><span class="w"> </span><span class="nf">isValid</span><span class="p">(</span><span class="n">String</span><span class="w"> </span><span class="n">input</span><span class="p">)</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="n">input</span><span class="w"> </span><span class="o">!=</span><span class="w"> </span><span class="kc">null</span><span class="w"> </span><span class="o">&amp;&amp;</span><span class="w"> </span><span class="o">!</span><span class="n">input</span><span class="p">.</span><span class="na">equals</span><span class="p">(</span><span class="s">&quot;&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="kd">public</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="nf">hmacSha1</span><span class="p">(</span><span class="n">String</span><span class="w"> </span><span class="n">input</span><span class="p">)</span><span class="w"> </span><span class="kd">throws</span><span class="w"> </span><span class="n">NoSuchAlgorithmException</span><span class="p">,</span><span class="w"> </span><span class="n">InvalidKeyException</span><span class="p">,</span><span class="w"> </span><span class="n">UnsupportedEncodingException</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">SecretKeySpec</span><span class="w"> </span><span class="n">signingKey</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">SecretKeySpec</span><span class="p">(</span><span class="k">this</span><span class="p">.</span><span class="na">sk</span><span class="p">.</span><span class="na">getBytes</span><span class="p">(</span><span class="n">DEFAULT_ENCODING</span><span class="p">),</span><span class="w"> </span><span class="s">&quot;HmacSHA1&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="n">Mac</span><span class="w"> </span><span class="n">mac</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">Mac</span><span class="p">.</span><span class="na">getInstance</span><span class="p">(</span><span class="s">&quot;HmacSHA1&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="n">mac</span><span class="p">.</span><span class="na">init</span><span class="p">(</span><span class="n">signingKey</span><span class="p">);</span>
<span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="n">Base64</span><span class="p">.</span><span class="na">getEncoder</span><span class="p">().</span><span class="na">encodeToString</span><span class="p">(</span><span class="n">mac</span><span class="p">.</span><span class="na">doFinal</span><span class="p">(</span><span class="n">input</span><span class="p">.</span><span class="na">getBytes</span><span class="p">(</span><span class="n">DEFAULT_ENCODING</span><span class="p">)));</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="kd">private</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="nf">stringToSign</span><span class="p">(</span><span class="n">String</span><span class="w"> </span><span class="n">httpMethod</span><span class="p">,</span><span class="w"> </span><span class="n">Map</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">[]&gt;</span><span class="w"> </span><span class="n">headers</span><span class="p">,</span><span class="w"> </span><span class="n">Map</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">&gt;</span><span class="w"> </span><span class="n">queries</span><span class="p">,</span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">bucketName</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">objectName</span><span class="p">,</span><span class="w"> </span><span class="kt">long</span><span class="w"> </span><span class="n">expires</span><span class="p">)</span><span class="w"> </span><span class="kd">throws</span><span class="w"> </span><span class="n">Exception</span><span class="w"> </span><span class="p">{</span><span class="w"> </span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">contentMd5</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">&quot;&quot;</span><span class="p">;</span><span class="w"> </span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">contentType</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">&quot;&quot;</span><span class="p">;</span><span class="w"> </span>
<span class="w"> </span><span class="n">TreeMap</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">&gt;</span><span class="w"> </span><span class="n">canonicalizedHeaders</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">TreeMap</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">&gt;</span><span class="p">();</span><span class="w"> </span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">key</span><span class="p">;</span><span class="w"> </span>
<span class="w"> </span><span class="n">List</span><span class="o">&lt;</span><span class="n">String</span><span class="o">&gt;</span><span class="w"> </span><span class="n">temp</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">ArrayList</span><span class="o">&lt;</span><span class="n">String</span><span class="o">&gt;</span><span class="p">();</span><span class="w"> </span>
<span class="w"> </span><span class="k">for</span><span class="w"> </span><span class="p">(</span><span class="n">Map</span><span class="p">.</span><span class="na">Entry</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">[]&gt;</span><span class="w"> </span><span class="n">entry</span><span class="w"> </span><span class="p">:</span><span class="w"> </span><span class="n">headers</span><span class="p">.</span><span class="na">entrySet</span><span class="p">())</span><span class="w"> </span><span class="p">{</span><span class="w"> </span>
<span class="w"> </span><span class="n">key</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">entry</span><span class="p">.</span><span class="na">getKey</span><span class="p">();</span><span class="w"> </span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="n">key</span><span class="w"> </span><span class="o">==</span><span class="w"> </span><span class="kc">null</span><span class="w"> </span><span class="o">||</span><span class="w"> </span><span class="n">entry</span><span class="p">.</span><span class="na">getValue</span><span class="p">()</span><span class="w"> </span><span class="o">==</span><span class="w"> </span><span class="kc">null</span><span class="w"> </span><span class="o">||</span><span class="w"> </span><span class="n">entry</span><span class="p">.</span><span class="na">getValue</span><span class="p">().</span><span class="na">length</span><span class="w"> </span><span class="o">==</span><span class="w"> </span><span class="mi">0</span><span class="p">)</span><span class="w"> </span><span class="p">{</span><span class="w"> </span>
<span class="w"> </span><span class="k">continue</span><span class="p">;</span><span class="w"> </span>
<span class="w"> </span><span class="p">}</span><span class="w"> </span>
<span class="w"> </span><span class="n">key</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">key</span><span class="p">.</span><span class="na">trim</span><span class="p">().</span><span class="na">toLowerCase</span><span class="p">(</span><span class="n">Locale</span><span class="p">.</span><span class="na">ENGLISH</span><span class="p">);</span><span class="w"> </span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="n">key</span><span class="p">.</span><span class="na">equals</span><span class="p">(</span><span class="s">&quot;content-md5&quot;</span><span class="p">))</span><span class="w"> </span><span class="p">{</span><span class="w"> </span>
<span class="w"> </span><span class="n">contentMd5</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">entry</span><span class="p">.</span><span class="na">getValue</span><span class="p">()</span><span class="o">[</span><span class="mi">0</span><span class="o">]</span><span class="p">;</span><span class="w"> </span>
<span class="w"> </span><span class="k">continue</span><span class="p">;</span><span class="w"> </span>
<span class="w"> </span><span class="p">}</span><span class="w"> </span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="n">key</span><span class="p">.</span><span class="na">equals</span><span class="p">(</span><span class="s">&quot;content-type&quot;</span><span class="p">))</span><span class="w"> </span><span class="p">{</span><span class="w"> </span>
<span class="w"> </span><span class="n">contentType</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">entry</span><span class="p">.</span><span class="na">getValue</span><span class="p">()</span><span class="o">[</span><span class="mi">0</span><span class="o">]</span><span class="p">;</span><span class="w"> </span>
<span class="w"> </span><span class="k">continue</span><span class="p">;</span><span class="w"> </span>
<span class="w"> </span><span class="p">}</span><span class="w"> </span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="n">key</span><span class="p">.</span><span class="na">startsWith</span><span class="p">(</span><span class="n">OBS_PREFIX</span><span class="p">))</span><span class="w"> </span><span class="p">{</span><span class="w"> </span>
<span class="w"> </span><span class="k">for</span><span class="w"> </span><span class="p">(</span><span class="n">String</span><span class="w"> </span><span class="n">value</span><span class="w"> </span><span class="p">:</span><span class="w"> </span><span class="n">entry</span><span class="p">.</span><span class="na">getValue</span><span class="p">())</span><span class="w"> </span><span class="p">{</span><span class="w"> </span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="n">value</span><span class="w"> </span><span class="o">!=</span><span class="w"> </span><span class="kc">null</span><span class="p">)</span><span class="w"> </span><span class="p">{</span><span class="w"> </span>
<span class="w"> </span><span class="n">temp</span><span class="p">.</span><span class="na">add</span><span class="p">(</span><span class="n">value</span><span class="p">.</span><span class="na">trim</span><span class="p">());</span><span class="w"> </span>
<span class="w"> </span><span class="p">}</span><span class="w"> </span>
<span class="w"> </span><span class="p">}</span><span class="w"> </span>
<span class="w"> </span><span class="n">canonicalizedHeaders</span><span class="p">.</span><span class="na">put</span><span class="p">(</span><span class="n">key</span><span class="p">,</span><span class="w"> </span><span class="k">this</span><span class="p">.</span><span class="na">join</span><span class="p">(</span><span class="n">temp</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;,&quot;</span><span class="p">));</span><span class="w"> </span>
<span class="w"> </span><span class="n">temp</span><span class="p">.</span><span class="na">clear</span><span class="p">();</span><span class="w"> </span>
<span class="w"> </span><span class="p">}</span><span class="w"> </span>
<span class="w"> </span><span class="p">}</span><span class="w"> </span>
<span class="w"> </span><span class="c1">// handle method/content-md5/content-type</span>
<span class="w"> </span><span class="n">StringBuilder</span><span class="w"> </span><span class="n">stringToSign</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">StringBuilder</span><span class="p">();</span>
<span class="w"> </span><span class="n">stringToSign</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="n">httpMethod</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="n">SIGN_SEP</span><span class="p">)</span>
<span class="w"> </span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="n">contentMd5</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="n">SIGN_SEP</span><span class="p">)</span>
<span class="w"> </span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="n">contentType</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="n">SIGN_SEP</span><span class="p">)</span>
<span class="w"> </span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="n">expires</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="n">SIGN_SEP</span><span class="p">);</span>
<span class="w"> </span><span class="c1">// handle canonicalizedHeaders</span>
<span class="w"> </span><span class="k">for</span><span class="w"> </span><span class="p">(</span><span class="n">Map</span><span class="p">.</span><span class="na">Entry</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">&gt;</span><span class="w"> </span><span class="n">entry</span><span class="w"> </span><span class="p">:</span><span class="w"> </span><span class="n">canonicalizedHeaders</span><span class="p">.</span><span class="na">entrySet</span><span class="p">())</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">stringToSign</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="n">entry</span><span class="p">.</span><span class="na">getKey</span><span class="p">()).</span><span class="na">append</span><span class="p">(</span><span class="s">&quot;:&quot;</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="n">entry</span><span class="p">.</span><span class="na">getValue</span><span class="p">()).</span><span class="na">append</span><span class="p">(</span><span class="n">SIGN_SEP</span><span class="p">);</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="c1">// handle CanonicalizedResource</span>
<span class="w"> </span><span class="n">stringToSign</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="s">&quot;/&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="k">this</span><span class="p">.</span><span class="na">isValid</span><span class="p">(</span><span class="n">bucketName</span><span class="p">))</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">stringToSign</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="n">bucketName</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="s">&quot;/&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="k">this</span><span class="p">.</span><span class="na">isValid</span><span class="p">(</span><span class="n">objectName</span><span class="p">))</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">stringToSign</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="k">this</span><span class="p">.</span><span class="na">encodeObjectName</span><span class="p">(</span><span class="n">objectName</span><span class="p">));</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="n">TreeMap</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">&gt;</span><span class="w"> </span><span class="n">canonicalizedResource</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">TreeMap</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">&gt;</span><span class="p">();</span>
<span class="w"> </span><span class="k">for</span><span class="w"> </span><span class="p">(</span><span class="n">Map</span><span class="p">.</span><span class="na">Entry</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">&gt;</span><span class="w"> </span><span class="n">entry</span><span class="w"> </span><span class="p">:</span><span class="w"> </span><span class="n">queries</span><span class="p">.</span><span class="na">entrySet</span><span class="p">())</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">key</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">entry</span><span class="p">.</span><span class="na">getKey</span><span class="p">();</span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="n">key</span><span class="w"> </span><span class="o">==</span><span class="w"> </span><span class="kc">null</span><span class="p">)</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="k">continue</span><span class="p">;</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="n">SUB_RESOURCES</span><span class="p">.</span><span class="na">contains</span><span class="p">(</span><span class="n">key</span><span class="p">))</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">canonicalizedResource</span><span class="p">.</span><span class="na">put</span><span class="p">(</span><span class="n">key</span><span class="p">,</span><span class="w"> </span><span class="n">entry</span><span class="p">.</span><span class="na">getValue</span><span class="p">());</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="n">canonicalizedResource</span><span class="p">.</span><span class="na">size</span><span class="p">()</span><span class="w"> </span><span class="o">&gt;</span><span class="w"> </span><span class="mi">0</span><span class="p">)</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">stringToSign</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="s">&quot;?&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="k">for</span><span class="w"> </span><span class="p">(</span><span class="n">Map</span><span class="p">.</span><span class="na">Entry</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">&gt;</span><span class="w"> </span><span class="n">entry</span><span class="w"> </span><span class="p">:</span><span class="w"> </span><span class="n">canonicalizedResource</span><span class="p">.</span><span class="na">entrySet</span><span class="p">())</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">stringToSign</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="n">entry</span><span class="p">.</span><span class="na">getKey</span><span class="p">());</span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="k">this</span><span class="p">.</span><span class="na">isValid</span><span class="p">(</span><span class="n">entry</span><span class="p">.</span><span class="na">getValue</span><span class="p">()))</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">stringToSign</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="s">&quot;=&quot;</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="n">entry</span><span class="p">.</span><span class="na">getValue</span><span class="p">());</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="n">stringToSign</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="s">&quot;&amp;&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="n">stringToSign</span><span class="p">.</span><span class="na">deleteCharAt</span><span class="p">(</span><span class="n">stringToSign</span><span class="p">.</span><span class="na">length</span><span class="p">()</span><span class="w"> </span><span class="o">-</span><span class="w"> </span><span class="mi">1</span><span class="p">);</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="c1">// System.out.println(String.format(&quot;StringToSign:%s%s&quot;, SIGN_SEP, stringToSign.toString()));</span>
<span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="n">stringToSign</span><span class="p">.</span><span class="na">toString</span><span class="p">();</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="kd">public</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="nf">querySignature</span><span class="p">(</span><span class="n">String</span><span class="w"> </span><span class="n">httpMethod</span><span class="p">,</span><span class="w"> </span><span class="n">Map</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">[]&gt;</span><span class="w"> </span><span class="n">headers</span><span class="p">,</span><span class="w"> </span><span class="n">Map</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">&gt;</span><span class="w"> </span><span class="n">queries</span><span class="p">,</span><span class="w"> </span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">bucketName</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">objectName</span><span class="p">,</span><span class="w"> </span><span class="kt">long</span><span class="w"> </span><span class="n">expires</span><span class="p">)</span><span class="w"> </span><span class="kd">throws</span><span class="w"> </span><span class="n">Exception</span><span class="w"> </span><span class="p">{</span><span class="w"> </span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="o">!</span><span class="n">isBucketNameValid</span><span class="p">(</span><span class="n">bucketName</span><span class="p">))</span><span class="w"> </span><span class="p">{</span><span class="w"> </span>
<span class="w"> </span><span class="k">throw</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">IllegalArgumentException</span><span class="p">(</span><span class="s">&quot;the bucketName is illegal&quot;</span><span class="p">);</span><span class="w"> </span>
<span class="w"> </span><span class="p">}</span><span class="w"> </span>
<span class="w"> </span><span class="c1">//1. stringToSign </span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">stringToSign</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">this</span><span class="p">.</span><span class="na">stringToSign</span><span class="p">(</span><span class="n">httpMethod</span><span class="p">,</span><span class="w"> </span><span class="n">headers</span><span class="p">,</span><span class="w"> </span><span class="n">queries</span><span class="p">,</span><span class="w"> </span><span class="n">bucketName</span><span class="p">,</span><span class="w"> </span><span class="n">objectName</span><span class="p">,</span><span class="w"> </span><span class="n">expires</span><span class="p">);</span><span class="w"> </span>
<span class="w"> </span>
<span class="w"> </span><span class="c1">//2. signature </span>
<span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="k">this</span><span class="p">.</span><span class="na">encodeUrlString</span><span class="p">(</span><span class="k">this</span><span class="p">.</span><span class="na">hmacSha1</span><span class="p">(</span><span class="n">stringToSign</span><span class="p">));</span><span class="w"> </span>
<span class="w"> </span><span class="p">}</span><span class="w"> </span>
<span class="w"> </span><span class="kd">public</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="nf">getURL</span><span class="p">(</span><span class="n">String</span><span class="w"> </span><span class="n">endpoint</span><span class="p">,</span><span class="w"> </span><span class="n">Map</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">&gt;</span><span class="w"> </span><span class="n">queries</span><span class="p">,</span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">bucketName</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">objectName</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">signature</span><span class="p">,</span><span class="w"> </span><span class="kt">long</span><span class="w"> </span><span class="n">expires</span><span class="p">)</span><span class="w"> </span><span class="kd">throws</span><span class="w"> </span><span class="n">UnsupportedEncodingException</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">StringBuilder</span><span class="w"> </span><span class="n">URL</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">StringBuilder</span><span class="p">();</span>
<span class="w"> </span><span class="n">URL</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="s">&quot;https://&quot;</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="n">bucketName</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="s">&quot;.&quot;</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="n">endpoint</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="s">&quot;/&quot;</span><span class="p">).</span>
<span class="w"> </span><span class="n">append</span><span class="p">(</span><span class="k">this</span><span class="p">.</span><span class="na">encodeObjectName</span><span class="p">(</span><span class="n">objectName</span><span class="p">)).</span><span class="na">append</span><span class="p">(</span><span class="s">&quot;?&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">key</span><span class="p">;</span>
<span class="w"> </span><span class="k">for</span><span class="w"> </span><span class="p">(</span><span class="n">Map</span><span class="p">.</span><span class="na">Entry</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">&gt;</span><span class="w"> </span><span class="n">entry</span><span class="w"> </span><span class="p">:</span><span class="w"> </span><span class="n">queries</span><span class="p">.</span><span class="na">entrySet</span><span class="p">())</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">key</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">entry</span><span class="p">.</span><span class="na">getKey</span><span class="p">();</span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="n">key</span><span class="w"> </span><span class="o">==</span><span class="w"> </span><span class="kc">null</span><span class="p">)</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="k">continue</span><span class="p">;</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="n">SUB_RESOURCES</span><span class="p">.</span><span class="na">contains</span><span class="p">(</span><span class="n">key</span><span class="p">))</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">value</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">entry</span><span class="p">.</span><span class="na">getValue</span><span class="p">();</span>
<span class="w"> </span><span class="n">URL</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="n">key</span><span class="p">);</span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="n">value</span><span class="w"> </span><span class="o">!=</span><span class="w"> </span><span class="kc">null</span><span class="p">)</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">URL</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="s">&quot;=&quot;</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="n">value</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="s">&quot;&amp;&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="p">}</span><span class="w"> </span><span class="k">else</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">URL</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="s">&quot;&amp;&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="n">URL</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="s">&quot;AccessKeyId=&quot;</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="k">this</span><span class="p">.</span><span class="na">ak</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="s">&quot;&amp;Expires=&quot;</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="n">expires</span><span class="p">).</span>
<span class="w"> </span><span class="n">append</span><span class="p">(</span><span class="s">&quot;&amp;Signature=&quot;</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="n">signature</span><span class="p">);</span>
<span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="n">URL</span><span class="p">.</span><span class="na">toString</span><span class="p">();</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="kd">public</span><span class="w"> </span><span class="kd">static</span><span class="w"> </span><span class="kt">void</span><span class="w"> </span><span class="nf">main</span><span class="p">(</span><span class="n">String</span><span class="o">[]</span><span class="w"> </span><span class="n">args</span><span class="p">)</span><span class="w"> </span><span class="kd">throws</span><span class="w"> </span><span class="n">Exception</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">SignDemo</span><span class="w"> </span><span class="n">demo</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">SignDemo</span><span class="p">();</span>
<span class="w"> </span><span class="cm">/* Hard-coded or plaintext AK and SK are risky. For security purposes, encrypt your AK and SK and store them in the configuration file or environment variables.</span>
<span class="cm"> In this example, the AK and SK are stored in environment variables for identity authentication. Before running the code in this example, configure environment variables OTCCLOUD_SDK_AK and OTCCLOUD_SDK_SK. */</span>
<span class="w"> </span><span class="n">demo</span><span class="p">.</span><span class="na">ak</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">System</span><span class="p">.</span><span class="na">getenv</span><span class="p">(</span><span class="s">&quot;OTCCLOUD_SDK_AK&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="n">demo</span><span class="p">.</span><span class="na">sk</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">System</span><span class="p">.</span><span class="na">getenv</span><span class="p">(</span><span class="s">&quot;OTCCLOUD_SDK_SK&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">endpoint</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">&quot;&lt;your-endpoint&gt;&quot;</span><span class="p">;</span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">bucketName</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">&quot;bucket-test&quot;</span><span class="p">;</span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">objectName</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">&quot;hello.jpg&quot;</span><span class="p">;</span>
<span class="w"> </span><span class="c1">// A header cannot be carried if you want to use a URL to access OBS with a browser. If a header is added to headers, the signature does not match. To use headers, it must be processed by the client.</span>
<span class="w"> </span><span class="n">Map</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">[]&gt;</span><span class="w"> </span><span class="n">headers</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">HashMap</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">[]&gt;</span><span class="p">();</span>
<span class="w"> </span><span class="n">Map</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">&gt;</span><span class="w"> </span><span class="n">queries</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">HashMap</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">&gt;</span><span class="p">();</span>
<span class="w"> </span><span class="c1">// Expiration time. Set it to expire in 24 hours.</span>
<span class="w"> </span><span class="kt">long</span><span class="w"> </span><span class="n">expires</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="p">(</span><span class="n">System</span><span class="p">.</span><span class="na">currentTimeMillis</span><span class="p">()</span><span class="w"> </span><span class="o">+</span><span class="w"> </span><span class="mi">86400000L</span><span class="p">)</span><span class="w"> </span><span class="o">/</span><span class="w"> </span><span class="mi">1000</span><span class="p">;</span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">signature</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">demo</span><span class="p">.</span><span class="na">querySignature</span><span class="p">(</span><span class="s">&quot;GET&quot;</span><span class="p">,</span><span class="w"> </span><span class="n">headers</span><span class="p">,</span><span class="w"> </span><span class="n">queries</span><span class="p">,</span><span class="w"> </span><span class="n">bucketName</span><span class="p">,</span><span class="w"> </span><span class="n">objectName</span><span class="p">,</span><span class="w"> </span><span class="n">expires</span><span class="p">);</span>
<span class="w"> </span><span class="n">System</span><span class="p">.</span><span class="na">out</span><span class="p">.</span><span class="na">println</span><span class="p">(</span><span class="n">signature</span><span class="p">);</span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">URL</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">demo</span><span class="p">.</span><span class="na">getURL</span><span class="p">(</span><span class="n">endpoint</span><span class="p">,</span><span class="w"> </span><span class="n">queries</span><span class="p">,</span><span class="w"> </span><span class="n">bucketName</span><span class="p">,</span><span class="w"> </span><span class="n">objectName</span><span class="p">,</span><span class="w"> </span><span class="n">signature</span><span class="p">,</span><span class="w"> </span><span class="n">expires</span><span class="p">);</span>
<span class="w"> </span><span class="n">System</span><span class="p">.</span><span class="na">out</span><span class="p">.</span><span class="na">println</span><span class="p">(</span><span class="n">URL</span><span class="p">);</span>
<span class="w"> </span><span class="p">}</span>
<span class="p">}</span>
</pre></div></td></tr></table></div>
</div>
</div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="obs_04_0008.html">Authentication</a></div>
</div>
</div>
View Git Blame Copy Permalink