node.js - 如何在node js中限制对Google云平台上的存储桶的文件的访问

Question

这是我的 fileUploadService 文件:

import crypto from 'crypto';
var storage = require('@google-cloud/storage')();

uploadFile(req, bucket, next) {
    if (!req.file) {
        return next();
    }
    const gcsname = req.file.originalname;
    const file = bucket.file(gcsname);
    const stream = file.createWriteStream({
        metadata: {
            contentType: req.file.mimetype
        }
    });
    stream.on('error', (err) => {
        req.file.cloudStorageError = err;
        next(err);
    });
    /*stream.on('finish', () => {
        req.file.cloudStorageObject = gcsname;
        file.makePublic().then(() => {
            req.file.cloudStoragePublicUrl = this.getPublicUrl(gcsname);
            next();
        });
    });*/
    stream.end(req.file.buffer);
}

我必须使文件只能供发送者和接收者访问。有办法实现这个目标吗？

Answer 1

签名 URL 就是为此目的而设计的。

https://cloud.google.com/storage/docs/access-control/signed-urls

这个SO问题有一个在node.js中生成签名URL的示例

Create signed URLs for Google Cloud Storage with node.js for direct upload from browser