阿里云OSS代码集
2022-06-08 本文已影响0人
AC编程
一、取url的bucketName 、endpoint 、objectName
public static void main(String[] args) throws MalformedURLException {
String fileName = "https://alanchen-bucket.oss-cn-shenzhen.aliyuncs.com/groupFile/a.jpg";
URL address = new URL(fileName);
//alanchen-bucket.oss-cn-shenzhen.aliyuncs.com
String host = address.getHost();
//alanchen-bucket
String bucketName = host.split("\\.")[0];
//oss-cn-shenzhen.aliyuncs.com
String endpoint = host.replace(bucketName, "").replaceFirst(".","");
//groupFile/a.jpg
String objectName = address.getPath().replaceFirst("/", "");
}
二、OSS url授权给第三方使用(文件送审)
2.1 方式一
public String getOssUrl(String url) {
try {
URL address = new URL(url);
String buckName = address.getHost().replace(ossConfig.getEndpoint(), "").replace(".","");
String objectName = address.getPath().replaceFirst("/", "");
String uri =OssUtils.getOSSUrlByObjectName(ossConfig.getEndpoint(), ossConfig.getAccessKeyId(), ossConfig.getAccessKeySecret(),ossConfig.getRoleArn(), buckName, objectName);
return uri;
} catch (MalformedURLException malformedURLException) {
log.warn(malformedURLException.getMessage());
}
return null;
}
2.2 方式二
/**
* https://help.aliyun.com/document_detail/32016.html
* demo:https://alanchen-bucket.oss-cn-shenzhen.aliyuncs.com/groupFile/a.jpg
* @param fileName
* @return
*/
@ApiOperation(value = "送审临时授权")
@GetMapping("generatePresignedUrl")
public Result<String> generatePresignedUrl(@RequestParam("fileName") String fileName) {
OSS ossClient = null;
try {
URL address = new URL(fileName);
//alanchen-bucket.oss-cn-shenzhen.aliyuncs.com
String host = address.getHost();
//alanchen-bucket
String bucketName = host.split("\\.")[0];
//oss-cn-shenzhen.aliyuncs.com
String endpoint = host.replace(bucketName, "").replaceFirst(".","");
//groupFile/a.jpg
String objectName = address.getPath().replaceFirst("/", "");
Map<String, String> tokenMap = OssUtils.generateToken(
ossConfig.getAccessKeyId(),
ossConfig.getAccessKeySecret(),
ossConfig.getRoleArn(),
ossConfig.getDurationSeconds(),
endpoint,
bucketName);
String accessKeyId = tokenMap.get("AccessKeyId");
String accessKeySecret = tokenMap.get("AccessKeySecret");
String securityToken = tokenMap.get("SecurityToken");
Date expiration = new Date(System.currentTimeMillis() + 3600 * 1000);
ossClient = new OSSClientBuilder().build(endpoint, accessKeyId, accessKeySecret, securityToken);
URL url = ossClient.generatePresignedUrl(bucketName, objectName, expiration);
return Result.success(url.toString());
} catch (Exception e) {
log.error(e.getMessage());
} finally {
if (ossClient != null) {
ossClient.shutdown();
}
}
return Result.failed();
}
三、获取ossToken
@ApiOperation(value = "获取ossToken")
@ApiResponse(code = 200, message = "获取ossToken成功")
@GetMapping("token")
public Result getOssToken() {
try {
Map<String, String> token = OssUtils.generateToken(
ossConfig.getAccessKeyId(),
ossConfig.getAccessKeySecret(),
ossConfig.getRoleArn(),
ossConfig.getDurationSeconds(),
ossConfig.getEndpoint(),
ossConfig.getBucketName()
);
if (token != null) {
return Result.success(token);
}
} catch (ClientException ex) {
throw new Exception(ex.getMessage());
}
return Result.failed(I18nUtils.message("oss.token"));
}
四、获取OSS元信息
@ApiOperation(value = "获取OSS元信息")
@ApiResponse(code = 200, message = "获取oss获取SimplifiedMeta成功")
@GetMapping("simplifiedMeta")
public Result getSimplifiedMeta(@RequestParam("objectName")String objectName) {
try {
SimplifiedObjectMeta meta = OssUtils.getOSSMetaByObjectName(
ossConfig.getEndpoint(),
ossConfig.getAccessKeyId(),
ossConfig.getAccessKeySecret(),
ossConfig.getBucketName(),
objectName);
if (meta != null) {
return Result.success(meta);
}
} catch (Exception ex) {
throw new Exception(ex.getMessage());
}
return Result.failed(I18nUtils.message("oss.simplified.meta"));
}
五、Service
import com.aliyun.oss.OSS;
import com.aliyun.oss.OSSClientBuilder;
import com.aliyuncs.DefaultAcsClient;
import com.aliyuncs.IAcsClient;
import com.aliyuncs.auth.sts.AssumeRoleRequest;
import com.aliyuncs.auth.sts.AssumeRoleResponse;
import com.aliyuncs.exceptions.ServerException;
import com.aliyuncs.profile.DefaultProfile;
import com.alanchen.oss.config.OssConfig;
import com.alanchen.oss.dto.OssSecurityTokenDTO;
import com.alanchen.oss.enums.BusinessTypeEnums;
import com.alanchen.oss.service.OssServices;
import lombok.extern.slf4j.Slf4j;
import org.springframework.beans.factory.annotation.Value;
import org.springframework.stereotype.Service;
import javax.annotation.Resource;
import java.net.MalformedURLException;
import java.net.URL;
import java.util.Date;
import java.time.LocalDateTime;
import java.time.ZoneOffset;
@Slf4j
@Service
public class OssServicesImpl implements OssServices {
@Resource
private OssConfig ossConfig;
@Value("${spring.profiles.active}")
private String active;
@Override
public AssumeRoleResponse getStsToken(String roleSessionName, String policy) {
DefaultProfile profile = DefaultProfile.getProfile(ossConfig.getRegionId(), ossConfig.getAccessKeyId(), ossConfig.getAccessKeySecret());
IAcsClient client = new DefaultAcsClient(profile);
AssumeRoleRequest request = new AssumeRoleRequest();
request.setRoleArn(ossConfig.getRoleArn());
if (null != policy) {
request.setPolicy(policy);
}
request.setRoleSessionName(roleSessionName);
request.setDurationSeconds(ossConfig.getDurationSeconds()); // 设置凭证有效时间
try {
return client.getAcsResponse(request);
} catch (ServerException e) {
e.printStackTrace();
} catch (com.aliyuncs.exceptions.ClientException e) {
e.printStackTrace();
}
return null;
}
@Override
public OssSecurityTokenDTO getSecurityToken(BusinessTypeEnums businessTypeEnums, String busiId) {
String policy = getPolicy(businessTypeEnums, busiId);
AssumeRoleResponse response = getStsToken(businessTypeEnums.getCode() + "-" + busiId, policy);
return OssSecurityTokenDTO.builder()
.accessKeyId(response.getCredentials().getAccessKeyId())
.accessKeySecret(response.getCredentials().getAccessKeySecret())
.endpoint(ossConfig.getEndpoint())
.bucketName(businessTypeEnums.getBucketName())
.expiration(ossConfig.getDurationSeconds())
.securityToken(response.getCredentials().getSecurityToken())
.build();
}
@Override
public OssSecurityTokenDTO getSecurityToken(String bucketName) {
AssumeRoleResponse response = getStsToken(bucketName, null);
return OssSecurityTokenDTO.builder()
.accessKeyId(response.getCredentials().getAccessKeyId())
.accessKeySecret(response.getCredentials().getAccessKeySecret())
.endpoint(ossConfig.getEndpoint())
.bucketName(bucketName)
.expiration(ossConfig.getDurationSeconds())
.securityToken(response.getCredentials().getSecurityToken())
.build();
}
@Override
public OssSecurityTokenDTO getMemberSecurityToken(Long memberId) {
String policy = getMemberPolicy(memberId);
AssumeRoleResponse response = getStsToken("ALL-" + memberId, policy);
return OssSecurityTokenDTO.builder()
.accessKeyId(response.getCredentials().getAccessKeyId())
.accessKeySecret(response.getCredentials().getAccessKeySecret())
.endpoint(ossConfig.getEndpoint())
.expiration(ossConfig.getDurationSeconds())
.securityToken(response.getCredentials().getSecurityToken())
.gTime(LocalDateTime.now().toEpochSecond(ZoneOffset.of("+8")))
.build();
}
@Override
public OssSecurityTokenDTO getPublicSecurityToken() {
String policy = getPublicPolicy();
AssumeRoleResponse response = getStsToken("PUBLIC", policy);
return OssSecurityTokenDTO.builder()
.accessKeyId(response.getCredentials().getAccessKeyId())
.accessKeySecret(response.getCredentials().getAccessKeySecret())
.endpoint(ossConfig.getEndpoint())
.expiration(ossConfig.getDurationSeconds())
.securityToken(response.getCredentials().getSecurityToken())
.build();
}
@Override
public String getUrl(String url) {
try {
URL address = new URL(url);
String buckName = address.getHost().replace(ossConfig.getEndpoint(), "").replace(".", "");
String objectName = address.getPath().replaceFirst("/", "");
OssSecurityTokenDTO token = getSecurityToken(buckName);
OSS ossClient = new OSSClientBuilder().build(token.getEndpoint(), token.getAccessKeyId(), token.getAccessKeySecret(), token.getSecurityToken());
// 设置签名URL过期时间为3600秒（1小时）。
Date expiration = new Date(new Date().getTime() + 3600 * 1000);
// 生成以GET方法访问的签名URL，访客可以直接通过浏览器访问相关内容。
URL newUrl = ossClient.generatePresignedUrl(buckName, objectName, expiration);
return newUrl.toString();
}catch (MalformedURLException malformedURLException) {
log.warn(malformedURLException.getMessage());
}
return null;
}
private String getMemberPolicy(Long memberId) {
String policy = "{\n" +
" \"Version\": \"1\", \n" +
" \"Statement\": [\n" +
" {\n" +
" \"Action\": [\n" +
" \"oss:*\"\n" +
" ], \n" +
" \"Resource\": [\n" +
" \"acs:oss:*:*:alanchen-" + active + "-op/*\", \n" +
" \"acs:oss:*:*:alanchen-" + active + "-public/*\", \n" +
" \"acs:oss:*:*:alanchen-" + active + "-private/content/" + memberId + "/*\" \n" +
" ], \n" +
" \"Effect\": \"Allow\"\n" +
" }\n" +
" ]\n" +
"}";
return policy;
}
private String getPublicPolicy() {
String policy = "{\n" +
" \"Version\": \"1\", \n" +
" \"Statement\": [\n" +
" {\n" +
" \"Action\": [\n" +
" \"oss:*\"\n" +
" ], \n" +
" \"Resource\": [\n" +
" \"acs:oss:*:*:alanchen-prod-op/*\" \n" +
" \"acs:oss:*:*:alanchen-prod-pubic/*\" \n" +
" ], \n" +
" \"Effect\": \"Allow\"\n" +
" }\n" +
" ]\n" +
"}";
return policy;
}
private String getPolicy(BusinessTypeEnums businessTypeEnums, String busiId) {
String policy = "{\n" +
" \"Version\": \"1\", \n" +
" \"Statement\": [\n" +
" {\n" +
" \"Action\": [\n" +
" \"oss:*\"\n" +
" ], \n" +
" \"Resource\": [\n" +
" \"acs:oss:*:*:" + businessTypeEnums.getBucketName() + "/" + businessTypeEnums.getCode() + "/" + busiId + "/*\" \n" +
" ], \n" +
" \"Effect\": \"Allow\"\n" +
" }\n" +
" ]\n" +
"}";
return policy;
}
}
