vpruthi/doc-exports
1
0
Fork 0
forked from docs/doc-exports
Code Pull Requests Activity
doc-exports/docs/obs/api-ref/obs_04_0010.html
zhangyue d5b1108742 OBS API DOC 
Reviewed-by: Sabelnikov, Dmitriy <dmitriy.sabelnikov@t-systems.com>
Co-authored-by: zhangyue <zhangyue164@huawei.com>
Co-committed-by: zhangyue <zhangyue164@huawei.com>
2023-10-16 12:27:49 +00:00

773 lines
91 KiB
HTML
Raw Blame History

<a name="obs_04_0010"></a><a name="obs_04_0010"></a>
<h1 class="topictitle1">Authentication of Signature in a Header</h1>
<div id="body31253810"><p class="msonormal" id="obs_04_0010__p11949699">For all API operations, the most common identity authentication is to carry signatures in headers. </p>
<p class="msonormal" id="obs_04_0010__p40438427">In the header, the signature is carried in the authorization header field of the HTTP message. The format of the message header is as follows:</p>
<pre class="screen" id="obs_04_0010__screen28401526">Authorization: OBS AccessKeyID:signature</pre>
<p id="obs_04_0010__p917810464285">The signature calculation process is as follows:</p>
<p id="obs_04_0010__p97925720284">1. Construct the request character string (StringToSign).</p>
<p id="obs_04_0010__p15741059313">2. Perform UTF-8 encoding on the result obtained from the preceding step.</p>
<p id="obs_04_0010__p225613719312">3. Use the SK to perform the HMAC-SHA1 signature calculation on the result obtained from step 2.</p>
<p id="obs_04_0010__p1436915404327">4. Perform Base64 encoding on the result of step 3 to obtain the signature.</p>
<p id="obs_04_0010__p771245973610"></p>
<div class="p" id="obs_04_0010__p68921631143520">The StringToSign is constructed according to the following rules. <a href="#obs_04_0010__table34479832212511">Table 1</a> describes the parameters.<pre class="screen" id="obs_04_0010__screen34122891">StringToSign =
HTTP-Verb + "\n" +
Content-MD5 + "\n" +
Content-Type + "\n" +
Date + "\n" +
CanonicalizedHeaders + CanonicalizedResource</pre>
<div class="tablenoborder"><a name="obs_04_0010__table34479832212511"></a><a name="table34479832212511"></a><table cellpadding="4" cellspacing="0" summary="" id="obs_04_0010__table34479832212511" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Parameters required for constructing a StringToSign</caption><thead align="left"><tr id="obs_04_0010__row42478738"><th align="left" class="cellrowborder" valign="top" width="27%" id="mcps1.3.10.3.2.3.1.1"><p id="obs_04_0010__p18225769">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="73%" id="mcps1.3.10.3.2.3.1.2"><p id="obs_04_0010__p67001213">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="obs_04_0010__row58389173"><td class="cellrowborder" valign="top" width="27%" headers="mcps1.3.10.3.2.3.1.1 "><p id="obs_04_0010__p31902586">HTTP-Verb</p>
</td>
<td class="cellrowborder" valign="top" width="73%" headers="mcps1.3.10.3.2.3.1.2 "><p id="obs_04_0010__p33972659">Indicates an HTTP request method supported by the OBS REST API. The value can be an HTTP verb such as <strong id="obs_04_0010__b84235270610413">PUT</strong>, <strong id="obs_04_0010__b84235270610415">GET</strong>, or <strong id="obs_04_0010__b84235270610418">DELETE</strong>.</p>
</td>
</tr>
<tr id="obs_04_0010__row14909112213405"><td class="cellrowborder" valign="top" width="27%" headers="mcps1.3.10.3.2.3.1.1 "><p id="obs_04_0010__p132581298408">Content-MD5</p>
</td>
<td class="cellrowborder" valign="top" width="73%" headers="mcps1.3.10.3.2.3.1.2 "><p id="obs_04_0010__p102601629204016">Base64-encoded 128-bit MD5 digest of the message according to RFC 1864. This parameter can be empty. For details, see <a href="#obs_04_0010__table12510133817416">Table 6</a> and the algorithm examples below the table.</p>
</td>
</tr>
<tr id="obs_04_0010__row1824493"><td class="cellrowborder" valign="top" width="27%" headers="mcps1.3.10.3.2.3.1.1 "><p id="obs_04_0010__p13566274">Content-Type</p>
</td>
<td class="cellrowborder" valign="top" width="73%" headers="mcps1.3.10.3.2.3.1.2 "><p id="obs_04_0010__p25126432">Specifies the message type, for example, <strong id="obs_04_0010__b75786169409">text/plain</strong>.</p>
<p id="obs_04_0010__p24811297">If a request does not contain this header field, this parameter is deemed as an empty string. For details, see <a href="#obs_04_0010__table14775325212511">Table 2</a>.</p>
</td>
</tr>
<tr id="obs_04_0010__row63558046"><td class="cellrowborder" valign="top" width="27%" headers="mcps1.3.10.3.2.3.1.1 "><p id="obs_04_0010__p28804613404">Date</p>
</td>
<td class="cellrowborder" valign="top" width="73%" headers="mcps1.3.10.3.2.3.1.2 "><p id="obs_04_0010__p10901346204019">Time when a request is initiated. This parameter uses the RFC 1123 time format. If the deviation between the time specified by this parameter and the server time is over 15 minutes, the server returns error 403.</p>
<p id="obs_04_0010__p792134614016">This parameter is an empty string when the <strong id="obs_04_0010__b74723321582">x-obs-date</strong> is specified. For details, see <a href="#obs_04_0010__table12510133817416">Table 6</a>.</p>
<p id="obs_04_0010__p99420463401">If an operation (for example, obtaining an object content) is temporarily authorized, this parameter is not required.</p>
<p id="obs_04_0010__p1647620213584"></p>
</td>
</tr>
<tr id="obs_04_0010__row42990474"><td class="cellrowborder" valign="top" width="27%" headers="mcps1.3.10.3.2.3.1.1 "><p id="obs_04_0010__p59676394">CanonicalizedHeaders</p>
</td>
<td class="cellrowborder" valign="top" width="73%" headers="mcps1.3.10.3.2.3.1.2 "><p id="obs_04_0010__p1949763">OBS request header field in an HTTP request header, referring to header fields starting with <strong id="obs_04_0010__b319919585174">x-obs-</strong>, such as, <strong id="obs_04_0010__b2415161111183">x-obs-date</strong>, <strong id="obs_04_0010__b1872619143186">x-obs-acl</strong>, and <strong id="obs_04_0010__b184151419201818">x-obs-meta-*</strong>. When calling an API, choose a header that is supported by the API as required.</p>
<ol id="obs_04_0010__ol145715617477"><li id="obs_04_0010__li1685416455352">All characters of keywords in a request header field must be converted to lowercase letters (content values must be case sensitive, for example, <strong id="obs_04_0010__b111291138163018">x-obs-storage-class:STANDARD</strong>). If a request contains multiple header fields, these fields should be organized by keyword in the alphabetical order from a to z.</li><li id="obs_04_0010__li1497111394712">If multiple header fields in a request have the same prefix, combine the header fields into one. For example, <strong id="obs_04_0010__b18992135642213">x-obs-meta-name:name1</strong> and <strong id="obs_04_0010__b615756114620">x-obs-meta-name:name2</strong> should be reorganized into <strong id="obs_04_0010__b76247410237">x-obs-meta-name:name1,name2</strong>. Use comma to separate the values.</li><li id="obs_04_0010__li18224198471">Keywords in the request header field cannot contain non-ASCII or unrecognizable characters, which are also not advisable for values in the request header field. If the two types of characters are necessary, they should be encoded and decoded on the client side. Either URL encoding or Base64 encoding is acceptable, but the server does not perform decoding.</li><li id="obs_04_0010__li8253142214474">Delete meaningless spaces and tabs in a header field. For example, <strong id="obs_04_0010__b1433317110158">x-obs-meta-name: name</strong> (with a meaningless space before <strong id="obs_04_0010__b14794533166">name</strong>) must be changed to <strong id="obs_04_0010__b54278376">x-obs-meta-name:name</strong>.</li><li id="obs_04_0010__li67877331819">Each header field occupies a separate line. See <a href="#obs_04_0010__table46456687212511">Table 4</a>.</li></ol>
</td>
</tr>
<tr id="obs_04_0010__row7450793"><td class="cellrowborder" valign="top" width="27%" headers="mcps1.3.10.3.2.3.1.1 "><p id="obs_04_0010__p66643399">CanonicalizedResource</p>
</td>
<td class="cellrowborder" valign="top" width="73%" headers="mcps1.3.10.3.2.3.1.2 "><p id="obs_04_0010__p29406249">Indicates the OBS resource specified by an HTTP request. This parameter is constructed as follows:</p>
<p id="obs_04_0010__p63329656">&lt;Bucket name + Object name&gt; + [Subresource 1] + [Subresource 2] + ...</p>
<ol id="obs_04_0010__ol135483613475"><li id="obs_04_0010__li1739510379234"><span style="color:#3D3F43;">Bucket name and object name, for example, </span><strong style="color:#3D3F43;" id="obs_04_0010__b8700202932317">/<em id="obs_04_0010__i570062952317">bucket</em>/<em id="obs_04_0010__i670052922316">object</em></strong><span style="color:#3D3F43;">. If no object name is specified, for example, </span><strong style="color:#3D3F43;" id="obs_04_0010__b47021329102311">/<em id="obs_04_0010__i17703329162316">bucket</em>/</strong><span style="color:#3D3F43;">, the entire bucket is listed. If no bucket name is specified either, the value of this field is </span><strong style="color:#3D3F43;" id="obs_04_0010__b1970732915238">/</strong><span style="color:#3D3F43;">.</span></li><li id="obs_04_0010__li14147065556">If a subresource (such as <strong id="obs_04_0010__b2265729202414">?acl</strong> and <strong id="obs_04_0010__b1226662992414">?logging</strong>) exists, the subresource must be added.<p id="obs_04_0010__p1193056145515">OBS supports a variety of sub-resources, including acl, attname, cors, customdomain, delete, deletebucket, encryption, length, lifecycle, location, logging, metadata, modify, name, notification, partNumber, policy, position, quota, rename, replication, requestPayment, response-cache-control, response-content-disposition, response-content-encoding, response-content-language, response-content-type, response-expires, restore, storageClass, storagePolicy, storageinfo, tagging, torrent, truncate, uploadId, uploads, versionId, versioning, versions, website, object-lock, retention, and x-obs-security-token.</p>
</li><li id="obs_04_0010__li20542104114716">If there are multiple subresources, sort them in the alphabetical order from a to z, and use <strong id="obs_04_0010__b12446849133516">&amp;</strong> to combine the subresources.</li></ol>
<div class="note" id="obs_04_0010__note1239815267372"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="obs_04_0010__ul116221356133916"><li id="obs_04_0010__li156221356133912">A subresource is unique. Do not add subresources with the same keyword (for example, <strong id="obs_04_0010__b377815262398">key=value1&amp;key=value2</strong>) in the same request URL. In this case, signature is computed only based on the first subresource, and only the value of the first subresource takes effect on the actual service.</li><li id="obs_04_0010__li1321451571811">Using the <strong id="obs_04_0010__b155150134218">GetObject</strong> API as an example, assume there is a bucket named <strong id="obs_04_0010__b1675333820426">bucket-test</strong> and an object named <strong id="obs_04_0010__b69171752104211">object-test</strong> in the bucket, and the object version is <strong id="obs_04_0010__b677011214435">xxx</strong>. When obtaining the object, you need to rewrite Content-Type to <strong id="obs_04_0010__b10283312104410">text/plain</strong>. Then, the <strong id="obs_04_0010__b9426921144417">CanonicalizedResource</strong> calculated by the signature is <strong id="obs_04_0010__b013203114449">/bucket-test/object-test?response-content-type=text/plain&amp;versionId=xxx</strong>.</li></ul>
</div></div>
</td>
</tr>
</tbody>
</table>
</div>
</div>
<p class="msonormal" id="obs_04_0010__p34896312">The following tables provide some examples of generating StringToSign.</p>
<div class="tablenoborder"><a name="obs_04_0010__table14775325212511"></a><a name="table14775325212511"></a><table cellpadding="4" cellspacing="0" summary="" id="obs_04_0010__table14775325212511" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Obtaining an object</caption><thead align="left"><tr id="obs_04_0010__row48189141"><th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.12.2.3.1.1"><p id="obs_04_0010__p11006326">Request Header</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.12.2.3.1.2"><p id="obs_04_0010__p19097245">StringToSign</p>
</th>
</tr>
</thead>
<tbody><tr id="obs_04_0010__row3372975"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.12.2.3.1.1 "><p id="obs_04_0010__p4775574">GET /object.txt HTTP/1.1</p>
<p id="obs_04_0010__p31181923204810">Host: bucket.obs.<em id="obs_04_0010__i18110202494817">region</em>.example.com</p>
<p id="obs_04_0010__p51277242">Date: Sat, 12 Oct 2015 08:12:38 GMT</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.12.2.3.1.2 "><p id="obs_04_0010__p59815938">GET \n</p>
<p id="obs_04_0010__p164481243202215">\n</p>
<p id="obs_04_0010__p1472535">\n</p>
<p id="obs_04_0010__p13252823">Sat, 12 Oct 2015 08:12:38 GMT\n</p>
<p id="obs_04_0010__p52166545">/bucket/object.txt</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="obs_04_0010__table25826370212511" frame="border" border="1" rules="all"><caption><b>Table 3 </b>Using temporary AK/SK and security token to upload objects</caption><thead align="left"><tr id="obs_04_0010__row13863750"><th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.13.2.3.1.1"><p id="obs_04_0010__p49222002">Request Header</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.13.2.3.1.2"><p id="obs_04_0010__p27559193">StringToSign</p>
</th>
</tr>
</thead>
<tbody><tr id="obs_04_0010__row17702181"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.13.2.3.1.1 "><p id="obs_04_0010__p1379614265212">PUT /object.txt HTTP/1.1</p>
<p id="obs_04_0010__p19988723">User-Agent: curl/7.15.5</p>
<p id="obs_04_0010__p1472059134810">Host: bucket.obs.<em id="obs_04_0010__i15472597484">region</em>.example.com</p>
<p id="obs_04_0010__p8473833">x-obs-date:Tue, 15 Oct 2015 07:20:09 GMT</p>
<p id="obs_04_0010__p15509910161817"><span style="color:#3D3F43;">x-obs-security-token:</span> YwkaRTbdY8g7q....</p>
<p id="obs_04_0010__p9155637">content-type: text/plain</p>
<p id="obs_04_0010__p15291872">Content-Length: 5913339</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.13.2.3.1.2 "><p id="obs_04_0010__p30682111">PUT\n</p>
<p id="obs_04_0010__p7703550">\n</p>
<p id="obs_04_0010__p2223087">text/plain\n</p>
<p id="obs_04_0010__p5775546153911">\n</p>
<p id="obs_04_0010__p20007789">x-obs-date:Tue, 15 Oct 2015 07:20:09 GMT\n</p>
<p id="obs_04_0010__p66077328189"><span style="color:#3D3F43;">x-obs-security-token:</span>YwkaRTbdY8g7q....\n</p>
<p id="obs_04_0010__p45852376">/bucket/object.txt</p>
<p id="obs_04_0010__p14535105184111"></p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="note" id="obs_04_0010__note11435321903"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="obs_04_0010__p243520211401">For details about how to obtain a temporary AK/SK pair and security token, see <a href="https://docs.otc.t-systems.com/api/iam/en-us_topic_0097949518.html" target="_blank" rel="noopener noreferrer">Obtaining a Temporary AK/SK Pair</a>.</p>
</div></div>
<div class="tablenoborder"><a name="obs_04_0010__table46456687212511"></a><a name="table46456687212511"></a><table cellpadding="4" cellspacing="0" summary="" id="obs_04_0010__table46456687212511" frame="border" border="1" rules="all"><caption><b>Table 4 </b>An object upload request containing header fields</caption><thead align="left"><tr id="obs_04_0010__row1033238"><th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.15.2.3.1.1"><p id="obs_04_0010__p16583492">Request Header</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.15.2.3.1.2"><p id="obs_04_0010__p1085622">StringToSign</p>
</th>
</tr>
</thead>
<tbody><tr id="obs_04_0010__row20826581"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.15.2.3.1.1 "><p id="obs_04_0010__p9231496">PUT /object.txt HTTP/1.1</p>
<p id="obs_04_0010__p15974605">User-Agent: curl/7.15.5</p>
<p id="obs_04_0010__p19501265502">Host: bucket.obs.<em id="obs_04_0010__i1809451175019">region</em>.example.com</p>
<p id="obs_04_0010__p18874618">Date: Mon, 14 Oct 2015 12:08:34 GMT</p>
<p id="obs_04_0010__p35653836">x-obs-acl: public-read</p>
<p id="obs_04_0010__p52449071">content-type: text/plain</p>
<p id="obs_04_0010__p2279597">Content-Length: 5913339</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.15.2.3.1.2 "><p id="obs_04_0010__p50429634">PUT\n</p>
<p id="obs_04_0010__p51213523">\n</p>
<p id="obs_04_0010__p58268531">text/plain\n</p>
<p id="obs_04_0010__p54654738">Mon, 14 Oct 2015 12:08:34 GMT\n</p>
<p id="obs_04_0010__p22130602">x-obs-acl:public-read\n</p>
<p id="obs_04_0010__p64957690">/bucket/object.txt</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="obs_04_0010__table47748300" frame="border" border="1" rules="all"><caption><b>Table 5 </b>Obtaining an object ACL</caption><thead align="left"><tr id="obs_04_0010__row66793295"><th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.16.2.3.1.1"><p id="obs_04_0010__p41547828">Request Header</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.16.2.3.1.2"><p id="obs_04_0010__p9930893">StringToSign</p>
</th>
</tr>
</thead>
<tbody><tr id="obs_04_0010__row66204867"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.16.2.3.1.1 "><p id="obs_04_0010__p60993981">GET /object.txt?acl HTTP/1.1</p>
<p id="obs_04_0010__p07710137509">Host: bucket.obs.<em id="obs_04_0010__i107751365012">region</em>.example.com</p>
<p id="obs_04_0010__p41565411">Date: Sat, 12 Oct 2015 08:12:38 GMT</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.16.2.3.1.2 "><p id="obs_04_0010__p11355167">GET \n</p>
<p id="obs_04_0010__p35087639">\n</p>
<p id="obs_04_0010__p1478816075319">\n</p>
<p id="obs_04_0010__p47353302">Sat, 12 Oct 2015 08:12:38 GMT\n</p>
<p id="obs_04_0010__p23526540">/bucket/object.txt?acl</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><a name="obs_04_0010__table12510133817416"></a><a name="table12510133817416"></a><table cellpadding="4" cellspacing="0" summary="" id="obs_04_0010__table12510133817416" frame="border" border="1" rules="all"><caption><b>Table 6 </b>An object upload request carrying the Content-MD5 header</caption><thead align="left"><tr id="obs_04_0010__row45100381645"><th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.17.2.3.1.1"><p id="obs_04_0010__p115720411659">Request Header</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.17.2.3.1.2"><p id="obs_04_0010__p457234112512">StringToSign</p>
</th>
</tr>
</thead>
<tbody><tr id="obs_04_0010__row651113384416"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.17.2.3.1.1 "><p id="obs_04_0010__p35721411659">PUT /object.txt HTTP/1.1</p>
<p id="obs_04_0010__p79318112535">Host: bucket.obs.<em id="obs_04_0010__i1093171185318">region</em>.example.com</p>
<p id="obs_04_0010__p657313411653">x-obs-date:Tue, 15 Oct 2015 07:20:09 GMT</p>
<p id="obs_04_0010__p75734411054">Content-MD5: I5pU0r4+sgO9Emgl1KMQUg==</p>
<p id="obs_04_0010__p1757310411519">Content-Length: 5913339</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.17.2.3.1.2 "><p id="obs_04_0010__p1957316411258">PUT\n</p>
<p id="obs_04_0010__p357324118513">I5pU0r4+sgO9Emgl1KMQUg==\n</p>
<p id="obs_04_0010__p19573134115512">\n</p>
<p id="obs_04_0010__p19713125114013">\n</p>
<p id="obs_04_0010__p1657364111516">x-obs-date:Tue, 15 Oct 2015 07:20:09 GMT\n</p>
<p id="obs_04_0010__p12573141352">/bucket/object.txt</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="obs_04_0010__table83121210163615" frame="border" border="1" rules="all"><caption><b>Table 7 </b>Uploading an object through a user domain name</caption><thead align="left"><tr id="obs_04_0010__row63121210133615"><th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.18.2.3.1.1"><p id="obs_04_0010__p13312171014366">Request Header</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.18.2.3.1.2"><p id="obs_04_0010__p3313210133612">StringToSign</p>
</th>
</tr>
</thead>
<tbody><tr id="obs_04_0010__row53131810193615"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.18.2.3.1.1 "><p id="obs_04_0010__p19313101015361">PUT /object.txt HTTP/1.1</p>
<p id="obs_04_0010__p429395923715">Host: obs.ccc.com</p>
<p id="obs_04_0010__p15313210153615">x-obs-date:Tue, 15 Oct 2015 07:20:09 GMT</p>
<p id="obs_04_0010__p031311013362">Content-MD5: I5pU0r4+sgO9Emgl1KMQUg==</p>
<p id="obs_04_0010__p93131010173616">Content-Length: 5913339</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.18.2.3.1.2 "><p id="obs_04_0010__p131311023610">PUT\n</p>
<p id="obs_04_0010__p16313131053619">I5pU0r4+sgO9Emgl1KMQUg==\n</p>
<p id="obs_04_0010__p331314108369">\n</p>
<p id="obs_04_0010__p2313161033613">\n</p>
<p id="obs_04_0010__p83131310153620">x-obs-date:Tue, 15 Oct 2015 07:20:09 GMT\n</p>
<p id="obs_04_0010__p0313121093620">/obs.ccc.com/object.txt</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="section" id="obs_04_0010__section1255031191518"><h4 class="sectiontitle">Content-MD5 Algorithm in Java</h4><div class="codecoloring" codetype="Java" id="obs_04_0010__screen203261746171919"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal"> 1</span>
<span class="normal"> 2</span>
<span class="normal"> 3</span>
<span class="normal"> 4</span>
<span class="normal"> 5</span>
<span class="normal"> 6</span>
<span class="normal"> 7</span>
<span class="normal"> 8</span>
<span class="normal"> 9</span>
<span class="normal">10</span>
<span class="normal">11</span>
<span class="normal">12</span>
<span class="normal">13</span>
<span class="normal">14</span>
<span class="normal">15</span>
<span class="normal">16</span>
<span class="normal">17</span>
<span class="normal">18</span>
<span class="normal">19</span></pre></div></td><td class="code"><div><pre><span></span><span class="kn">import</span><span class="w"> </span><span class="nn">java.security.MessageDigest</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">sun.misc.BASE64Encoder</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.io.UnsupportedEncodingException</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.security.NoSuchAlgorithmException</span><span class="p">;</span>
<span class="kd">public</span><span class="w"> </span><span class="kd">class</span> <span class="nc">Md5</span><span class="p">{</span>
<span class="w"> </span><span class="kd">public</span><span class="w"> </span><span class="kd">static</span><span class="w"> </span><span class="kt">void</span><span class="w"> </span><span class="nf">main</span><span class="p">(</span><span class="n">String</span><span class="o">[]</span><span class="w"> </span><span class="n">args</span><span class="p">)</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="k">try</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">exampleString</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">&quot;blog&quot;</span><span class="p">;</span>
<span class="w"> </span><span class="n">MessageDigest</span><span class="w"> </span><span class="n">messageDigest</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">MessageDigest</span><span class="p">.</span><span class="na">getInstance</span><span class="p">(</span><span class="s">&quot;MD5&quot;</span><span class="p">);</span><span class="w"> </span>
<span class="w"> </span><span class="n">BASE64Encoder</span><span class="w"> </span><span class="n">encoder</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">BASE64Encoder</span><span class="p">();</span><span class="w"> </span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">contentMd5</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">encoder</span><span class="p">.</span><span class="na">encode</span><span class="p">(</span><span class="n">messageDigest</span><span class="p">.</span><span class="na">digest</span><span class="p">(</span><span class="n">exampleString</span><span class="p">.</span><span class="na">getBytes</span><span class="p">(</span><span class="s">&quot;utf-8&quot;</span><span class="p">)));</span>
<span class="w"> </span><span class="n">System</span><span class="p">.</span><span class="na">out</span><span class="p">.</span><span class="na">println</span><span class="p">(</span><span class="s">&quot;Content-MD5:&quot;</span><span class="w"> </span><span class="o">+</span><span class="w"> </span><span class="n">contentMd5</span><span class="p">);</span><span class="w"> </span>
<span class="w"> </span><span class="p">}</span><span class="w"> </span><span class="k">catch</span><span class="w"> </span><span class="p">(</span><span class="n">NoSuchAlgorithmException</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">UnsupportedEncodingException</span><span class="w"> </span><span class="n">e</span><span class="p">)</span><span class="w"> </span>
<span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">e</span><span class="p">.</span><span class="na">printStackTrace</span><span class="p">();</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="p">}</span>
<span class="p">}</span>
</pre></div></td></tr></table></div>
</div>
</div>
<div class="p" id="obs_04_0010__p1327215229377">The signature is generated as follows based on the StringToSign and SK. The hash-based message authentication code algorithm (HMAC algorithm) is used to generate the signature.<pre class="screen" id="obs_04_0010__screen150142413554">Signature = Base64( HMAC-SHA1( YourSecretAccessKeyID, UTF-8-Encoding-Of( StringToSign ) ) )</pre>
</div>
<p id="obs_04_0010__p1533212278457"></p>
<div class="p" id="obs_04_0010__p0492171931017">For example, to create a private bucket named <strong id="obs_04_0010__b529993718413">newbucketname2</strong> in a region, the client request format is as follows:<pre class="screen" id="obs_04_0010__screen8127628105617">PUT / HTTP/1.1
Host: newbucketname2.obs.<em id="obs_04_0010__i153011141175118">region</em>.example.com
Content-Length: <em id="obs_04_0010__i167312141565">length</em>
Date: Fri, 06 Jul 2018 03:45:51 GMT
x-obs-acl:private
x-obs-storage-class:STANDARD
Authorization: OBS UDSIAMSTUBTEST000254:ydH8ffpcbS6YpeOMcEZfn0wE90c=
&lt;CreateBucketConfiguration xmlns="http://obs.<em id="obs_04_0010__i19318527175220">region</em>.example.com/doc/2015-06-30/"&gt;
&lt;Location&gt;<em id="obs_04_0010__i1478319555234">region</em>&lt;/Location&gt;
&lt;/CreateBucketConfiguration&gt;</pre>
</div>
<p id="obs_04_0010__p16568936164513"></p>
<div class="section" id="obs_04_0010__section131611926171613"><h4 class="sectiontitle">Signature Calculation in Java</h4><div class="codecoloring" codetype="Java" id="obs_04_0010__screen10483183017405"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal"> 1</span>
<span class="normal"> 2</span>
<span class="normal"> 3</span>
<span class="normal"> 4</span>
<span class="normal"> 5</span>
<span class="normal"> 6</span>
<span class="normal"> 7</span>
<span class="normal"> 8</span>
<span class="normal"> 9</span>
<span class="normal"> 10</span>
<span class="normal"> 11</span>
<span class="normal"> 12</span>
<span class="normal"> 13</span>
<span class="normal"> 14</span>
<span class="normal"> 15</span>
<span class="normal"> 16</span>
<span class="normal"> 17</span>
<span class="normal"> 18</span>
<span class="normal"> 19</span>
<span class="normal"> 20</span>
<span class="normal"> 21</span>
<span class="normal"> 22</span>
<span class="normal"> 23</span>
<span class="normal"> 24</span>
<span class="normal"> 25</span>
<span class="normal"> 26</span>
<span class="normal"> 27</span>
<span class="normal"> 28</span>
<span class="normal"> 29</span>
<span class="normal"> 30</span>
<span class="normal"> 31</span>
<span class="normal"> 32</span>
<span class="normal"> 33</span>
<span class="normal"> 34</span>
<span class="normal"> 35</span>
<span class="normal"> 36</span>
<span class="normal"> 37</span>
<span class="normal"> 38</span>
<span class="normal"> 39</span>
<span class="normal"> 40</span>
<span class="normal"> 41</span>
<span class="normal"> 42</span>
<span class="normal"> 43</span>
<span class="normal"> 44</span>
<span class="normal"> 45</span>
<span class="normal"> 46</span>
<span class="normal"> 47</span>
<span class="normal"> 48</span>
<span class="normal"> 49</span>
<span class="normal"> 50</span>
<span class="normal"> 51</span>
<span class="normal"> 52</span>
<span class="normal"> 53</span>
<span class="normal"> 54</span>
<span class="normal"> 55</span>
<span class="normal"> 56</span>
<span class="normal"> 57</span>
<span class="normal"> 58</span>
<span class="normal"> 59</span>
<span class="normal"> 60</span>
<span class="normal"> 61</span>
<span class="normal"> 62</span>
<span class="normal"> 63</span>
<span class="normal"> 64</span>
<span class="normal"> 65</span>
<span class="normal"> 66</span>
<span class="normal"> 67</span>
<span class="normal"> 68</span>
<span class="normal"> 69</span>
<span class="normal"> 70</span>
<span class="normal"> 71</span>
<span class="normal"> 72</span>
<span class="normal"> 73</span>
<span class="normal"> 74</span>
<span class="normal"> 75</span>
<span class="normal"> 76</span>
<span class="normal"> 77</span>
<span class="normal"> 78</span>
<span class="normal"> 79</span>
<span class="normal"> 80</span>
<span class="normal"> 81</span>
<span class="normal"> 82</span>
<span class="normal"> 83</span>
<span class="normal"> 84</span>
<span class="normal"> 85</span>
<span class="normal"> 86</span>
<span class="normal"> 87</span>
<span class="normal"> 88</span>
<span class="normal"> 89</span>
<span class="normal"> 90</span>
<span class="normal"> 91</span>
<span class="normal"> 92</span>
<span class="normal"> 93</span>
<span class="normal"> 94</span>
<span class="normal"> 95</span>
<span class="normal"> 96</span>
<span class="normal"> 97</span>
<span class="normal"> 98</span>
<span class="normal"> 99</span>
<span class="normal">100</span>
<span class="normal">101</span>
<span class="normal">102</span>
<span class="normal">103</span>
<span class="normal">104</span>
<span class="normal">105</span>
<span class="normal">106</span>
<span class="normal">107</span>
<span class="normal">108</span>
<span class="normal">109</span>
<span class="normal">110</span>
<span class="normal">111</span>
<span class="normal">112</span>
<span class="normal">113</span>
<span class="normal">114</span>
<span class="normal">115</span>
<span class="normal">116</span>
<span class="normal">117</span>
<span class="normal">118</span>
<span class="normal">119</span>
<span class="normal">120</span>
<span class="normal">121</span>
<span class="normal">122</span>
<span class="normal">123</span>
<span class="normal">124</span>
<span class="normal">125</span>
<span class="normal">126</span>
<span class="normal">127</span>
<span class="normal">128</span>
<span class="normal">129</span>
<span class="normal">130</span>
<span class="normal">131</span>
<span class="normal">132</span>
<span class="normal">133</span>
<span class="normal">134</span>
<span class="normal">135</span>
<span class="normal">136</span>
<span class="normal">137</span>
<span class="normal">138</span>
<span class="normal">139</span>
<span class="normal">140</span>
<span class="normal">141</span>
<span class="normal">142</span>
<span class="normal">143</span>
<span class="normal">144</span>
<span class="normal">145</span>
<span class="normal">146</span>
<span class="normal">147</span>
<span class="normal">148</span>
<span class="normal">149</span>
<span class="normal">150</span>
<span class="normal">151</span>
<span class="normal">152</span>
<span class="normal">153</span>
<span class="normal">154</span>
<span class="normal">155</span>
<span class="normal">156</span>
<span class="normal">157</span>
<span class="normal">158</span>
<span class="normal">159</span>
<span class="normal">160</span>
<span class="normal">161</span>
<span class="normal">162</span>
<span class="normal">163</span>
<span class="normal">164</span>
<span class="normal">165</span>
<span class="normal">166</span>
<span class="normal">167</span>
<span class="normal">168</span>
<span class="normal">169</span>
<span class="normal">170</span>
<span class="normal">171</span>
<span class="normal">172</span>
<span class="normal">173</span>
<span class="normal">174</span>
<span class="normal">175</span>
<span class="normal">176</span>
<span class="normal">177</span>
<span class="normal">178</span>
<span class="normal">179</span>
<span class="normal">180</span>
<span class="normal">181</span>
<span class="normal">182</span>
<span class="normal">183</span>
<span class="normal">184</span>
<span class="normal">185</span>
<span class="normal">186</span>
<span class="normal">187</span>
<span class="normal">188</span>
<span class="normal">189</span>
<span class="normal">190</span>
<span class="normal">191</span>
<span class="normal">192</span>
<span class="normal">193</span>
<span class="normal">194</span>
<span class="normal">195</span>
<span class="normal">196</span>
<span class="normal">197</span>
<span class="normal">198</span>
<span class="normal">199</span>
<span class="normal">200</span>
<span class="normal">201</span>
<span class="normal">202</span>
<span class="normal">203</span>
<span class="normal">204</span>
<span class="normal">205</span>
<span class="normal">206</span>
<span class="normal">207</span>
<span class="normal">208</span>
<span class="normal">209</span>
<span class="normal">210</span>
<span class="normal">211</span>
<span class="normal">212</span>
<span class="normal">213</span>
<span class="normal">214</span>
<span class="normal">215</span>
<span class="normal">216</span>
<span class="normal">217</span>
<span class="normal">218</span>
<span class="normal">219</span>
<span class="normal">220</span></pre></div></td><td class="code"><div><pre><span></span><span class="kn">import</span><span class="w"> </span><span class="nn">java.io.UnsupportedEncodingException</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.net.URLEncoder</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.security.InvalidKeyException</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.security.NoSuchAlgorithmException</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.util.ArrayList</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.util.Arrays</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.util.Base64</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.util.Collections</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.util.HashMap</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.util.List</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.util.Locale</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.util.Map</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">java.util.TreeMap</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">javax.crypto.Mac</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">javax.crypto.spec.SecretKeySpec</span><span class="p">;</span>
<span class="kn">import</span><span class="w"> </span><span class="nn">org.omg.CosNaming.IstringHelper</span><span class="p">;</span>
<span class="kd">public</span><span class="w"> </span><span class="kd">class</span> <span class="nc">SignDemo</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span>
<span class="w"> </span><span class="kd">private</span><span class="w"> </span><span class="kd">static</span><span class="w"> </span><span class="kd">final</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">SIGN_SEP</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">&quot;\n&quot;</span><span class="p">;</span>
<span class="w"> </span>
<span class="w"> </span><span class="kd">private</span><span class="w"> </span><span class="kd">static</span><span class="w"> </span><span class="kd">final</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">OBS_PREFIX</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">&quot;x-obs-&quot;</span><span class="p">;</span>
<span class="w"> </span>
<span class="w"> </span><span class="kd">private</span><span class="w"> </span><span class="kd">static</span><span class="w"> </span><span class="kd">final</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">DEFAULT_ENCODING</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">&quot;UTF-8&quot;</span><span class="p">;</span>
<span class="w"> </span>
<span class="w"> </span><span class="kd">private</span><span class="w"> </span><span class="kd">static</span><span class="w"> </span><span class="kd">final</span><span class="w"> </span><span class="n">List</span><span class="o">&lt;</span><span class="n">String</span><span class="o">&gt;</span><span class="w"> </span><span class="n">SUB_RESOURCES</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">Collections</span><span class="p">.</span><span class="na">unmodifiableList</span><span class="p">(</span><span class="n">Arrays</span><span class="p">.</span><span class="na">asList</span><span class="p">(</span>
<span class="w"> </span><span class="s">&quot;CDNNotifyConfiguration&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;acl&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;attname&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;cors&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;customdomain&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;delete&quot;</span><span class="p">,</span>
<span class="w"> </span><span class="s">&quot;deletebucket&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;encryption&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;length&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;lifecycle&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;location&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;logging&quot;</span><span class="p">,</span>
<span class="w"> </span><span class="s">&quot;metadata&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;mirrorBackToSource&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;modify&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;name&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;notification&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;obscompresspolicy&quot;</span><span class="p">,</span><span class="w"> </span>
<span class="w"> </span><span class="s">&quot;partNumber&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;policy&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;position&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;quota&quot;</span><span class="p">,</span><span class="s">&quot;rename&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;replication&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;requestPayment&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;response-cache-control&quot;</span><span class="p">,</span><span class="w"> </span>
<span class="w"> </span><span class="s">&quot;response-content-disposition&quot;</span><span class="p">,</span><span class="s">&quot;response-content-encoding&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;response-content-language&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;response-content-type&quot;</span><span class="p">,</span><span class="w"> </span>
<span class="w"> </span><span class="s">&quot;response-expires&quot;</span><span class="p">,</span><span class="s">&quot;restore&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;storageClass&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;storagePolicy&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;storageinfo&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;tagging&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;torrent&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;truncate&quot;</span><span class="p">,</span>
<span class="w"> </span><span class="s">&quot;uploadId&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;uploads&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;versionId&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;versioning&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;versions&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;website&quot;</span><span class="p">,</span><span class="w"> </span>
<span class="w"> </span><span class="s">&quot;x-obs-security-token&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;object-lock&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;retention&quot;</span><span class="p">));</span>
<span class="w"> </span>
<span class="w"> </span><span class="kd">private</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">ak</span><span class="p">;</span>
<span class="w"> </span>
<span class="w"> </span><span class="kd">private</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">sk</span><span class="p">;</span>
<span class="w"> </span>
<span class="w"> </span><span class="kd">public</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="nf">urlEncode</span><span class="p">(</span><span class="n">String</span><span class="w"> </span><span class="n">input</span><span class="p">)</span><span class="w"> </span><span class="kd">throws</span><span class="w"> </span><span class="n">UnsupportedEncodingException</span>
<span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="n">URLEncoder</span><span class="p">.</span><span class="na">encode</span><span class="p">(</span><span class="n">input</span><span class="p">,</span><span class="w"> </span><span class="n">DEFAULT_ENCODING</span><span class="p">)</span>
<span class="w"> </span><span class="p">.</span><span class="na">replaceAll</span><span class="p">(</span><span class="s">&quot;%7E&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;~&quot;</span><span class="p">)</span><span class="w"> </span><span class="c1">//for browser</span>
<span class="w"> </span><span class="p">.</span><span class="na">replaceAll</span><span class="p">(</span><span class="s">&quot;%2F&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;/&quot;</span><span class="p">)</span>
<span class="w"> </span><span class="p">.</span><span class="na">replaceAll</span><span class="p">(</span><span class="s">&quot;%20&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;+&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span>
<span class="w"> </span><span class="kd">private</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="nf">join</span><span class="p">(</span><span class="n">List</span><span class="o">&lt;?&gt;</span><span class="w"> </span><span class="n">items</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">delimiter</span><span class="p">)</span>
<span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">StringBuilder</span><span class="w"> </span><span class="n">sb</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">StringBuilder</span><span class="p">();</span>
<span class="w"> </span><span class="k">for</span><span class="w"> </span><span class="p">(</span><span class="kt">int</span><span class="w"> </span><span class="n">i</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="mi">0</span><span class="p">;</span><span class="w"> </span><span class="n">i</span><span class="w"> </span><span class="o">&lt;</span><span class="w"> </span><span class="n">items</span><span class="p">.</span><span class="na">size</span><span class="p">();</span><span class="w"> </span><span class="n">i</span><span class="o">++</span><span class="p">)</span>
<span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">item</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">items</span><span class="p">.</span><span class="na">get</span><span class="p">(</span><span class="n">i</span><span class="p">).</span><span class="na">toString</span><span class="p">();</span>
<span class="w"> </span><span class="n">sb</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="n">item</span><span class="p">);</span>
<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="n">i</span><span class="w"> </span><span class="o">&lt;</span><span class="w"> </span><span class="n">items</span><span class="p">.</span><span class="na">size</span><span class="p">()</span><span class="w"> </span><span class="o">-</span><span class="w"> </span><span class="mi">1</span><span class="p">)</span>
<span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">sb</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="n">delimiter</span><span class="p">);</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="n">sb</span><span class="p">.</span><span class="na">toString</span><span class="p">();</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span>
<span class="w"> </span><span class="kd">private</span><span class="w"> </span><span class="kt">boolean</span><span class="w"> </span><span class="nf">isValid</span><span class="p">(</span><span class="n">String</span><span class="w"> </span><span class="n">input</span><span class="p">)</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="n">input</span><span class="w"> </span><span class="o">!=</span><span class="w"> </span><span class="kc">null</span><span class="w"> </span><span class="o">&amp;&amp;</span><span class="w"> </span><span class="o">!</span><span class="n">input</span><span class="p">.</span><span class="na">equals</span><span class="p">(</span><span class="s">&quot;&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span>
<span class="w"> </span><span class="kd">public</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="nf">hamcSha1</span><span class="p">(</span><span class="n">String</span><span class="w"> </span><span class="n">input</span><span class="p">)</span><span class="w"> </span><span class="kd">throws</span><span class="w"> </span><span class="n">NoSuchAlgorithmException</span><span class="p">,</span><span class="w"> </span><span class="n">InvalidKeyException</span><span class="p">,</span><span class="w"> </span><span class="n">UnsupportedEncodingException</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">SecretKeySpec</span><span class="w"> </span><span class="n">signingKey</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">SecretKeySpec</span><span class="p">(</span><span class="k">this</span><span class="p">.</span><span class="na">sk</span><span class="p">.</span><span class="na">getBytes</span><span class="p">(</span><span class="n">DEFAULT_ENCODING</span><span class="p">),</span><span class="w"> </span><span class="s">&quot;HmacSHA1&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="n">Mac</span><span class="w"> </span><span class="n">mac</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">Mac</span><span class="p">.</span><span class="na">getInstance</span><span class="p">(</span><span class="s">&quot;HmacSHA1&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="n">mac</span><span class="p">.</span><span class="na">init</span><span class="p">(</span><span class="n">signingKey</span><span class="p">);</span>
<span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="n">Base64</span><span class="p">.</span><span class="na">getEncoder</span><span class="p">().</span><span class="na">encodeToString</span><span class="p">(</span><span class="n">mac</span><span class="p">.</span><span class="na">doFinal</span><span class="p">(</span><span class="n">input</span><span class="p">.</span><span class="na">getBytes</span><span class="p">(</span><span class="n">DEFAULT_ENCODING</span><span class="p">)));</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span>
<span class="w"> </span><span class="kd">private</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="nf">stringToSign</span><span class="p">(</span><span class="n">String</span><span class="w"> </span><span class="n">httpMethod</span><span class="p">,</span><span class="w"> </span><span class="n">Map</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">[]&gt;</span><span class="w"> </span><span class="n">headers</span><span class="p">,</span><span class="w"> </span><span class="n">Map</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">&gt;</span><span class="w"> </span><span class="n">queries</span><span class="p">,</span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">bucketName</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">objectName</span><span class="p">)</span><span class="w"> </span><span class="kd">throws</span><span class="w"> </span><span class="n">Exception</span><span class="p">{</span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">contentMd5</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">&quot;&quot;</span><span class="p">;</span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">contentType</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">&quot;&quot;</span><span class="p">;</span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">date</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">&quot;&quot;</span><span class="p">;</span>
<span class="w"> </span>
<span class="w"> </span><span class="n">TreeMap</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">&gt;</span><span class="w"> </span><span class="n">canonicalizedHeaders</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">TreeMap</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">&gt;</span><span class="p">();</span>
<span class="w"> </span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">key</span><span class="p">;</span>
<span class="w"> </span><span class="n">List</span><span class="o">&lt;</span><span class="n">String</span><span class="o">&gt;</span><span class="w"> </span><span class="n">temp</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">ArrayList</span><span class="o">&lt;</span><span class="n">String</span><span class="o">&gt;</span><span class="p">();</span>
<span class="w"> </span><span class="k">for</span><span class="p">(</span><span class="n">Map</span><span class="p">.</span><span class="na">Entry</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">[]&gt;</span><span class="w"> </span><span class="n">entry</span><span class="w"> </span><span class="p">:</span><span class="w"> </span><span class="n">headers</span><span class="p">.</span><span class="na">entrySet</span><span class="p">())</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">key</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">entry</span><span class="p">.</span><span class="na">getKey</span><span class="p">();</span>
<span class="w"> </span><span class="k">if</span><span class="p">(</span><span class="n">key</span><span class="w"> </span><span class="o">==</span><span class="w"> </span><span class="kc">null</span><span class="w"> </span><span class="o">||</span><span class="w"> </span><span class="n">entry</span><span class="p">.</span><span class="na">getValue</span><span class="p">()</span><span class="w"> </span><span class="o">==</span><span class="w"> </span><span class="kc">null</span><span class="w"> </span><span class="o">||</span><span class="w"> </span><span class="n">entry</span><span class="p">.</span><span class="na">getValue</span><span class="p">().</span><span class="na">length</span><span class="w"> </span><span class="o">==</span><span class="w"> </span><span class="mi">0</span><span class="p">)</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="k">continue</span><span class="p">;</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span>
<span class="w"> </span><span class="n">key</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">key</span><span class="p">.</span><span class="na">trim</span><span class="p">().</span><span class="na">toLowerCase</span><span class="p">(</span><span class="n">Locale</span><span class="p">.</span><span class="na">ENGLISH</span><span class="p">);</span>
<span class="w"> </span><span class="k">if</span><span class="p">(</span><span class="n">key</span><span class="p">.</span><span class="na">equals</span><span class="p">(</span><span class="s">&quot;content-md5&quot;</span><span class="p">))</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">contentMd5</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">entry</span><span class="p">.</span><span class="na">getValue</span><span class="p">()</span><span class="o">[</span><span class="mi">0</span><span class="o">]</span><span class="p">;</span>
<span class="w"> </span><span class="k">continue</span><span class="p">;</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span>
<span class="w"> </span><span class="k">if</span><span class="p">(</span><span class="n">key</span><span class="p">.</span><span class="na">equals</span><span class="p">(</span><span class="s">&quot;content-type&quot;</span><span class="p">))</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">contentType</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">entry</span><span class="p">.</span><span class="na">getValue</span><span class="p">()</span><span class="o">[</span><span class="mi">0</span><span class="o">]</span><span class="p">;</span>
<span class="w"> </span><span class="k">continue</span><span class="p">;</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span>
<span class="w"> </span><span class="k">if</span><span class="p">(</span><span class="n">key</span><span class="p">.</span><span class="na">equals</span><span class="p">(</span><span class="s">&quot;date&quot;</span><span class="p">))</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">date</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">entry</span><span class="p">.</span><span class="na">getValue</span><span class="p">()</span><span class="o">[</span><span class="mi">0</span><span class="o">]</span><span class="p">;</span>
<span class="w"> </span><span class="k">continue</span><span class="p">;</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span>
<span class="w"> </span><span class="k">if</span><span class="p">(</span><span class="n">key</span><span class="p">.</span><span class="na">startsWith</span><span class="p">(</span><span class="n">OBS_PREFIX</span><span class="p">))</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span>
<span class="w"> </span><span class="k">for</span><span class="p">(</span><span class="n">String</span><span class="w"> </span><span class="n">value</span><span class="w"> </span><span class="p">:</span><span class="w"> </span><span class="n">entry</span><span class="p">.</span><span class="na">getValue</span><span class="p">())</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="k">if</span><span class="p">(</span><span class="n">value</span><span class="w"> </span><span class="o">!=</span><span class="w"> </span><span class="kc">null</span><span class="p">)</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">temp</span><span class="p">.</span><span class="na">add</span><span class="p">(</span><span class="n">value</span><span class="p">.</span><span class="na">trim</span><span class="p">());</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="n">canonicalizedHeaders</span><span class="p">.</span><span class="na">put</span><span class="p">(</span><span class="n">key</span><span class="p">,</span><span class="w"> </span><span class="k">this</span><span class="p">.</span><span class="na">join</span><span class="p">(</span><span class="n">temp</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;,&quot;</span><span class="p">));</span>
<span class="w"> </span><span class="n">temp</span><span class="p">.</span><span class="na">clear</span><span class="p">();</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span>
<span class="w"> </span><span class="k">if</span><span class="p">(</span><span class="n">canonicalizedHeaders</span><span class="p">.</span><span class="na">containsKey</span><span class="p">(</span><span class="s">&quot;x-obs-date&quot;</span><span class="p">))</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">date</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">&quot;&quot;</span><span class="p">;</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span>
<span class="w"> </span>
<span class="w"> </span><span class="c1">// handle method/content-md5/content-type/date</span>
<span class="w"> </span><span class="n">StringBuilder</span><span class="w"> </span><span class="n">stringToSign</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">StringBuilder</span><span class="p">();</span>
<span class="w"> </span><span class="n">stringToSign</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="n">httpMethod</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="n">SIGN_SEP</span><span class="p">)</span>
<span class="w"> </span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="n">contentMd5</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="n">SIGN_SEP</span><span class="p">)</span>
<span class="w"> </span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="n">contentType</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="n">SIGN_SEP</span><span class="p">)</span>
<span class="w"> </span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="n">date</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="n">SIGN_SEP</span><span class="p">);</span>
<span class="w"> </span>
<span class="w"> </span><span class="c1">// handle canonicalizedHeaders</span>
<span class="w"> </span><span class="k">for</span><span class="p">(</span><span class="n">Map</span><span class="p">.</span><span class="na">Entry</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">&gt;</span><span class="w"> </span><span class="n">entry</span><span class="w"> </span><span class="p">:</span><span class="w"> </span><span class="n">canonicalizedHeaders</span><span class="p">.</span><span class="na">entrySet</span><span class="p">())</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">stringToSign</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="n">entry</span><span class="p">.</span><span class="na">getKey</span><span class="p">()).</span><span class="na">append</span><span class="p">(</span><span class="s">&quot;:&quot;</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="n">entry</span><span class="p">.</span><span class="na">getValue</span><span class="p">()).</span><span class="na">append</span><span class="p">(</span><span class="n">SIGN_SEP</span><span class="p">);</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span>
<span class="w"> </span><span class="c1">// handle CanonicalizedResource</span>
<span class="w"> </span><span class="n">stringToSign</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="s">&quot;/&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="k">if</span><span class="p">(</span><span class="k">this</span><span class="p">.</span><span class="na">isValid</span><span class="p">(</span><span class="n">bucketName</span><span class="p">))</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">stringToSign</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="n">bucketName</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="s">&quot;/&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="k">if</span><span class="p">(</span><span class="k">this</span><span class="p">.</span><span class="na">isValid</span><span class="p">(</span><span class="n">objectName</span><span class="p">))</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">stringToSign</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="k">this</span><span class="p">.</span><span class="na">urlEncode</span><span class="p">(</span><span class="n">objectName</span><span class="p">));</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span>
<span class="w"> </span><span class="n">TreeMap</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">&gt;</span><span class="w"> </span><span class="n">canonicalizedResource</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">TreeMap</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">&gt;</span><span class="p">();</span>
<span class="w"> </span><span class="k">for</span><span class="p">(</span><span class="n">Map</span><span class="p">.</span><span class="na">Entry</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">&gt;</span><span class="w"> </span><span class="n">entry</span><span class="w"> </span><span class="p">:</span><span class="w"> </span><span class="n">queries</span><span class="p">.</span><span class="na">entrySet</span><span class="p">())</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">key</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">entry</span><span class="p">.</span><span class="na">getKey</span><span class="p">();</span>
<span class="w"> </span><span class="k">if</span><span class="p">(</span><span class="n">key</span><span class="w"> </span><span class="o">==</span><span class="w"> </span><span class="kc">null</span><span class="p">)</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="k">continue</span><span class="p">;</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span>
<span class="w"> </span><span class="k">if</span><span class="p">(</span><span class="n">SUB_RESOURCES</span><span class="p">.</span><span class="na">contains</span><span class="p">(</span><span class="n">key</span><span class="p">))</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">canonicalizedResource</span><span class="p">.</span><span class="na">put</span><span class="p">(</span><span class="n">key</span><span class="p">,</span><span class="w"> </span><span class="n">entry</span><span class="p">.</span><span class="na">getValue</span><span class="p">());</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span>
<span class="w"> </span><span class="k">if</span><span class="p">(</span><span class="n">canonicalizedResource</span><span class="p">.</span><span class="na">size</span><span class="p">()</span><span class="w"> </span><span class="o">&gt;</span><span class="w"> </span><span class="mi">0</span><span class="p">)</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">stringToSign</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="s">&quot;?&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="k">for</span><span class="p">(</span><span class="n">Map</span><span class="p">.</span><span class="na">Entry</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">&gt;</span><span class="w"> </span><span class="n">entry</span><span class="w"> </span><span class="p">:</span><span class="w"> </span><span class="n">canonicalizedResource</span><span class="p">.</span><span class="na">entrySet</span><span class="p">())</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">stringToSign</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="n">entry</span><span class="p">.</span><span class="na">getKey</span><span class="p">());</span>
<span class="w"> </span><span class="k">if</span><span class="p">(</span><span class="k">this</span><span class="p">.</span><span class="na">isValid</span><span class="p">(</span><span class="n">entry</span><span class="p">.</span><span class="na">getValue</span><span class="p">()))</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">stringToSign</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="s">&quot;=&quot;</span><span class="p">).</span><span class="na">append</span><span class="p">(</span><span class="n">entry</span><span class="p">.</span><span class="na">getValue</span><span class="p">());</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="n">stringToSign</span><span class="p">.</span><span class="na">append</span><span class="p">(</span><span class="s">&quot;&amp;&quot;</span><span class="p">);</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="n">stringToSign</span><span class="p">.</span><span class="na">deleteCharAt</span><span class="p">(</span><span class="n">stringToSign</span><span class="p">.</span><span class="na">length</span><span class="p">()</span><span class="o">-</span><span class="mi">1</span><span class="p">);</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span>
<span class="c1">// System.out.println(String.format(&quot;StringToSign:%s%s&quot;, SIGN_SEP, stringToSign.toString()));</span>
<span class="w"> </span>
<span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="n">stringToSign</span><span class="p">.</span><span class="na">toString</span><span class="p">();</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span>
<span class="w"> </span><span class="kd">public</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="nf">headerSignature</span><span class="p">(</span><span class="n">String</span><span class="w"> </span><span class="n">httpMethod</span><span class="p">,</span><span class="w"> </span><span class="n">Map</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">[]&gt;</span><span class="w"> </span><span class="n">headers</span><span class="p">,</span><span class="w"> </span><span class="n">Map</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">&gt;</span><span class="w"> </span><span class="n">queries</span><span class="p">,</span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">bucketName</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">objectName</span><span class="p">)</span><span class="w"> </span><span class="kd">throws</span><span class="w"> </span><span class="n">Exception</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="c1">//1. stringToSign</span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">stringToSign</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">this</span><span class="p">.</span><span class="na">stringToSign</span><span class="p">(</span><span class="n">httpMethod</span><span class="p">,</span><span class="w"> </span><span class="n">headers</span><span class="p">,</span><span class="w"> </span><span class="n">queries</span><span class="p">,</span><span class="w"> </span><span class="n">bucketName</span><span class="p">,</span><span class="w"> </span><span class="n">objectName</span><span class="p">);</span>
<span class="w"> </span>
<span class="w"> </span><span class="c1">//2. signature</span>
<span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="n">String</span><span class="p">.</span><span class="na">format</span><span class="p">(</span><span class="s">&quot;OBS %s:%s&quot;</span><span class="p">,</span><span class="w"> </span><span class="k">this</span><span class="p">.</span><span class="na">ak</span><span class="p">,</span><span class="w"> </span><span class="k">this</span><span class="p">.</span><span class="na">hamcSha1</span><span class="p">(</span><span class="n">stringToSign</span><span class="p">));</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span>
<span class="w"> </span>
<span class="w"> </span><span class="kd">public</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="nf">querySignature</span><span class="p">(</span><span class="n">String</span><span class="w"> </span><span class="n">httpMethod</span><span class="p">,</span><span class="w"> </span><span class="n">Map</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">[]&gt;</span><span class="w"> </span><span class="n">headers</span><span class="p">,</span><span class="w"> </span><span class="n">Map</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">&gt;</span><span class="w"> </span><span class="n">queries</span><span class="p">,</span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">bucketName</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">objectName</span><span class="p">,</span><span class="w"> </span><span class="kt">long</span><span class="w"> </span><span class="n">expires</span><span class="p">)</span><span class="w"> </span><span class="kd">throws</span><span class="w"> </span><span class="n">Exception</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="k">if</span><span class="p">(</span><span class="n">headers</span><span class="p">.</span><span class="na">containsKey</span><span class="p">(</span><span class="s">&quot;x-obs-date&quot;</span><span class="p">))</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">headers</span><span class="p">.</span><span class="na">put</span><span class="p">(</span><span class="s">&quot;x-obs-date&quot;</span><span class="p">,</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">String</span><span class="o">[]</span><span class="w"> </span><span class="p">{</span><span class="n">String</span><span class="p">.</span><span class="na">valueOf</span><span class="p">(</span><span class="n">expires</span><span class="p">)});</span>
<span class="w"> </span><span class="p">}</span><span class="k">else</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span><span class="n">headers</span><span class="p">.</span><span class="na">put</span><span class="p">(</span><span class="s">&quot;date&quot;</span><span class="p">,</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">String</span><span class="o">[]</span><span class="w"> </span><span class="p">{</span><span class="n">String</span><span class="p">.</span><span class="na">valueOf</span><span class="p">(</span><span class="n">expires</span><span class="p">)});</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span><span class="c1">//1. stringToSign</span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">stringToSign</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">this</span><span class="p">.</span><span class="na">stringToSign</span><span class="p">(</span><span class="n">httpMethod</span><span class="p">,</span><span class="w"> </span><span class="n">headers</span><span class="p">,</span><span class="w"> </span><span class="n">queries</span><span class="p">,</span><span class="w"> </span><span class="n">bucketName</span><span class="p">,</span><span class="w"> </span><span class="n">objectName</span><span class="p">);</span>
<span class="w"> </span>
<span class="w"> </span><span class="c1">//2. signature</span>
<span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="k">this</span><span class="p">.</span><span class="na">urlEncode</span><span class="p">(</span><span class="k">this</span><span class="p">.</span><span class="na">hamcSha1</span><span class="p">(</span><span class="n">stringToSign</span><span class="p">));</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span>
<span class="w"> </span><span class="kd">public</span><span class="w"> </span><span class="kd">static</span><span class="w"> </span><span class="kt">void</span><span class="w"> </span><span class="nf">main</span><span class="p">(</span><span class="n">String</span><span class="o">[]</span><span class="w"> </span><span class="n">args</span><span class="p">)</span><span class="w"> </span><span class="kd">throws</span><span class="w"> </span><span class="n">Exception</span><span class="w"> </span><span class="p">{</span>
<span class="w"> </span>
<span class="w"> </span><span class="n">SignDemo</span><span class="w"> </span><span class="n">demo</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">SignDemo</span><span class="p">();</span>
<span class="w"> </span><span class="n">demo</span><span class="p">.</span><span class="na">ak</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">&quot;&lt;your-access-key-id&gt;&quot;</span><span class="p">;</span>
<span class="w"> </span><span class="n">demo</span><span class="p">.</span><span class="na">sk</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">&quot;&lt;your-secret-key-id&gt;&quot;</span><span class="p">;</span>
<span class="w"> </span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">bucketName</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">&quot;bucket-test&quot;</span><span class="p">;</span>
<span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">objectName</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">&quot;hello.jpg&quot;</span><span class="p">;</span>
<span class="w"> </span><span class="n">Map</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">[]&gt;</span><span class="w"> </span><span class="n">headers</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">HashMap</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">[]&gt;</span><span class="p">();</span>
<span class="w"> </span><span class="n">headers</span><span class="p">.</span><span class="na">put</span><span class="p">(</span><span class="s">&quot;date&quot;</span><span class="p">,</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">String</span><span class="o">[]</span><span class="w"> </span><span class="p">{</span><span class="s">&quot;Sat, 12 Oct 2015 08:12:38 GMT&quot;</span><span class="p">});</span>
<span class="w"> </span><span class="n">headers</span><span class="p">.</span><span class="na">put</span><span class="p">(</span><span class="s">&quot;x-obs-acl&quot;</span><span class="p">,</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">String</span><span class="o">[]</span><span class="w"> </span><span class="p">{</span><span class="s">&quot;public-read&quot;</span><span class="p">});</span>
<span class="w"> </span><span class="n">headers</span><span class="p">.</span><span class="na">put</span><span class="p">(</span><span class="s">&quot;x-obs-meta-key1&quot;</span><span class="p">,</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">String</span><span class="o">[]</span><span class="w"> </span><span class="p">{</span><span class="s">&quot;value1&quot;</span><span class="p">});</span>
<span class="w"> </span><span class="n">headers</span><span class="p">.</span><span class="na">put</span><span class="p">(</span><span class="s">&quot;x-obs-meta-key2&quot;</span><span class="p">,</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">String</span><span class="o">[]</span><span class="w"> </span><span class="p">{</span><span class="s">&quot;value2&quot;</span><span class="p">,</span><span class="w"> </span><span class="s">&quot;value3&quot;</span><span class="p">});</span>
<span class="w"> </span><span class="n">Map</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">&gt;</span><span class="w"> </span><span class="n">queries</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">HashMap</span><span class="o">&lt;</span><span class="n">String</span><span class="p">,</span><span class="w"> </span><span class="n">String</span><span class="o">&gt;</span><span class="p">();</span>
<span class="w"> </span><span class="n">queries</span><span class="p">.</span><span class="na">put</span><span class="p">(</span><span class="s">&quot;acl&quot;</span><span class="p">,</span><span class="w"> </span><span class="kc">null</span><span class="p">);</span>
<span class="w"> </span>
<span class="w"> </span><span class="n">System</span><span class="p">.</span><span class="na">out</span><span class="p">.</span><span class="na">println</span><span class="p">(</span><span class="n">demo</span><span class="p">.</span><span class="na">headerSignature</span><span class="p">(</span><span class="s">&quot;PUT&quot;</span><span class="p">,</span><span class="w"> </span><span class="n">headers</span><span class="p">,</span><span class="w"> </span><span class="n">queries</span><span class="p">,</span><span class="w"> </span><span class="n">bucketName</span><span class="p">,</span><span class="w"> </span><span class="n">objectName</span><span class="p">));</span>
<span class="w"> </span><span class="p">}</span>
<span class="w"> </span>
<span class="p">}</span>
</pre></div></td></tr></table></div>
</div>
<p id="obs_04_0010__p122581724201019">The calculation result of the signature is <strong id="obs_04_0010__b196241228510">ydH8ffpcbS6YpeOMcEZfn0wE90c=</strong>, which varies depending on the execution time.</p>
</div>
<div class="section" id="obs_04_0010__section1875724541612"><h4 class="sectiontitle">Signature Algorithm in Python</h4><div class="codecoloring" codetype="Python" id="obs_04_0010__screen359133017429"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal"> 1</span>
<span class="normal"> 2</span>
<span class="normal"> 3</span>
<span class="normal"> 4</span>
<span class="normal"> 5</span>
<span class="normal"> 6</span>
<span class="normal"> 7</span>
<span class="normal"> 8</span>
<span class="normal"> 9</span>
<span class="normal">10</span>
<span class="normal">11</span>
<span class="normal">12</span>
<span class="normal">13</span>
<span class="normal">14</span>
<span class="normal">15</span>
<span class="normal">16</span>
<span class="normal">17</span>
<span class="normal">18</span>
<span class="normal">19</span>
<span class="normal">20</span>
<span class="normal">21</span>
<span class="normal">22</span></pre></div></td><td class="code"><div><pre><span></span><span class="kn">import</span> <span class="nn">sys</span>
<span class="kn">import</span> <span class="nn">hashlib</span>
<span class="kn">import</span> <span class="nn">hmac</span>
<span class="kn">import</span> <span class="nn">binascii</span>
<span class="kn">from</span> <span class="nn">datetime</span> <span class="kn">import</span> <span class="n">datetime</span>
<span class="n">IS_PYTHON2</span> <span class="o">=</span> <span class="n">sys</span><span class="o">.</span><span class="n">version_info</span><span class="o">.</span><span class="n">major</span> <span class="o">==</span> <span class="mi">2</span> <span class="ow">or</span> <span class="n">sys</span><span class="o">.</span><span class="n">version</span> <span class="o">&lt;</span> <span class="s1">'3'</span>
<span class="n">yourSecretAccessKeyID</span> <span class="o">=</span> <span class="s1">'275hSvB6EEOorBNsMDEfOaICQnilYaPZhXUaSK64'</span>
<span class="n">httpMethod</span> <span class="o">=</span> <span class="s2">&quot;PUT&quot;</span>
<span class="n">contentType</span> <span class="o">=</span> <span class="s2">&quot;application/xml&quot;</span>
<span class="c1"># &quot;date&quot; is the time when the request was actually generated</span>
<span class="n">date</span> <span class="o">=</span> <span class="n">datetime</span><span class="o">.</span><span class="n">utcnow</span><span class="p">()</span><span class="o">.</span><span class="n">strftime</span><span class="p">(</span><span class="s1">'</span><span class="si">%a</span><span class="s1">, </span><span class="si">%d</span><span class="s1"> %b %Y %H:%M:%S GMT'</span><span class="p">)</span>
<span class="n">canonicalizedHeaders</span> <span class="o">=</span> <span class="s2">&quot;x-obs-acl:private</span><span class="se">\n</span><span class="s2">&quot;</span>
<span class="n">CanonicalizedResource</span> <span class="o">=</span> <span class="s2">&quot;/newbucketname2&quot;</span>
<span class="n">canonical_string</span> <span class="o">=</span> <span class="n">httpMethod</span> <span class="o">+</span> <span class="s2">&quot;</span><span class="se">\n</span><span class="s2">&quot;</span> <span class="o">+</span> <span class="s2">&quot;</span><span class="se">\n</span><span class="s2">&quot;</span> <span class="o">+</span> <span class="n">contentType</span> <span class="o">+</span> <span class="s2">&quot;</span><span class="se">\n</span><span class="s2">&quot;</span> <span class="o">+</span> <span class="n">date</span> <span class="o">+</span> <span class="s2">&quot;</span><span class="se">\n</span><span class="s2">&quot;</span> <span class="o">+</span> <span class="n">canonicalizedHeaders</span> <span class="o">+</span> <span class="n">CanonicalizedResource</span>
<span class="k">if</span> <span class="n">IS_PYTHON2</span><span class="p">:</span>
<span class="n">hashed</span> <span class="o">=</span> <span class="n">hmac</span><span class="o">.</span><span class="n">new</span><span class="p">(</span><span class="n">yourSecretAccessKeyID</span><span class="p">,</span> <span class="n">canonical_string</span><span class="p">,</span> <span class="n">hashlib</span><span class="o">.</span><span class="n">sha1</span><span class="p">)</span>
<span class="n">encode_canonical</span> <span class="o">=</span> <span class="n">binascii</span><span class="o">.</span><span class="n">b2a_base64</span><span class="p">(</span><span class="n">hashed</span><span class="o">.</span><span class="n">digest</span><span class="p">())[:</span><span class="o">-</span><span class="mi">1</span><span class="p">]</span>
<span class="k">else</span><span class="p">:</span>
<span class="n">hashed</span> <span class="o">=</span> <span class="n">hmac</span><span class="o">.</span><span class="n">new</span><span class="p">(</span><span class="n">yourSecretAccessKeyID</span><span class="o">.</span><span class="n">encode</span><span class="p">(</span><span class="s1">'UTF-8'</span><span class="p">),</span> <span class="n">canonical_string</span><span class="o">.</span><span class="n">encode</span><span class="p">(</span><span class="s1">'UTF-8'</span><span class="p">),</span><span class="n">hashlib</span><span class="o">.</span><span class="n">sha1</span><span class="p">)</span>
<span class="n">encode_canonical</span> <span class="o">=</span> <span class="n">binascii</span><span class="o">.</span><span class="n">b2a_base64</span><span class="p">(</span><span class="n">hashed</span><span class="o">.</span><span class="n">digest</span><span class="p">())[:</span><span class="o">-</span><span class="mi">1</span><span class="p">]</span><span class="o">.</span><span class="n">decode</span><span class="p">(</span><span class="s1">'UTF-8'</span><span class="p">)</span>
<span class="nb">print</span><span class="p">(</span><span class="n">encode_canonical</span><span class="p">)</span>
</pre></div></td></tr></table></div>
</div>
<p id="obs_04_0010__p277391515108">The calculation result of the signature is <strong id="obs_04_0010__b22772046216">ydH8ffpcbS6YpeOMcEZfn0wE90c=</strong>, which varies depending on the execution time.</p>
</div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="obs_04_0008.html">Authentication</a></div>
</div>
</div>
View Git Blame Copy Permalink