javascript - 使用 Javascript AWS SDK 生成预签名的 S3 URL

Question

我试图允许从预先签名的 URL 访问 Assets ，但我不确定如何执行此操作。来自 this page我可以看到我需要以下内容:

Authorization = "AWS" + " " + AWSAccessKeyId + ":" + Signature;

Signature = Base64( HMAC-SHA1( YourSecretAccessKeyID, UTF-8-Encoding-Of( StringToSign ) ) );

StringToSign = HTTP-Verb + "\n" +
  Content-MD5 + "\n" +
  Content-Type + "\n" +
  Date + "\n" +
  CanonicalizedAmzHeaders +
  CanonicalizedResource;

CanonicalizedResource = [ "/" + Bucket ] +
  <HTTP-Request-URI, from the protocol name up to the query string> +
  [ subresource, if present. For example "?acl", "?location", "?logging", or "?torrent"];

CanonicalizedAmzHeaders = <described below>

我知道如何查找 AWSAccessKeyId 和 YourSecretAccessKeyID，但如何使用 HMAC-SHA1 对其进行编码以形成最终签名？

Answer 1

我能够生成一个预签名 URL 来获取文件，如 this Amazon S3 node example page 所示。 :

declare var AWS:any;

AWS.config.accessKeyId = "key_goes_here";
AWS.config.secretAccessKey = "secret_key_goes_here";
AWS.config.region = "region_goes_here";

params = {
    Bucket: 'bucket_name_goes_here',
    Key:  'path_to_file_goes_here'
}

s3.getSignedUrl('getObject', params, function (err, url) { 
    // Do some sort of processing with url
});