基于浏览器上传的表单中携带签名-九游平台

importjava.text.simpledateformat;↵
importjava.util.arraylist;↵
importjava.util.base64;↵
importjava.util.collections;↵
importjava.util.date;↵
importjava.util.list;↵
importjava.util.timezone;↵
↵
importjavax.crypto.mac;↵
importjavax.crypto.spec.secretkeyspec;↵
↵
publicclass signdemo{↵
↵
privatestaticfinalstringdefault_encoding="utf-8";↵
privatestaticfinalstringexpiration_date_formatter="yyyy-mm-dd't'hh:mm:ss.sss'z'";↵
privatestaticfinaltimezonegmt_timezone=timezone.gettimezone("gmt");↵
privatestaticfinallongdefault_expire_seconds=300;↵
↵
privatestringak;↵
privatestringsk;↵
↵
privatestringjoin(listitems){↵
stringbuildersb=newstringbuilder();↵
for(inti=0;i<items.size();i){
stringitem=items.get(i).tostring();sb.append(item);
if(i<items.size()-1){
sb.append(",");
}
}
returnsb.tostring();
}
// 构造stringtosign
privatestringstringtosign(string[]tmpconditions,stringexpiration){
list↵conditions=newarraylist<>();
collections.addall(conditions,tmpconditions);
return"{\"expiration\":""\""expiration"\",""\"conditions\":["join(conditions)"]}";
}
privatestringgetformatexpiration(daterequestdate,longexpires){
requestdate=requestdate!=null?requestdate:newdate();
simpledateformatexpirationdateformat=newsimpledateformat(expiration_date_formatter);
expirationdateformat.settimezone(gmt_timezone);
dateexpirydate=newdate(requestdate.gettime()(expires<=0?default_expire_seconds:expires)*1000);
returnexpirationdateformat.format(expirydate);
}
// 计算签名
publicstringpostsignature(stringpolicy)throwsexception{
byte[]policybase64=base64.getencoder().encode(policy.getbytes(default_encoding));
secretkeyspecsigningkey=newsecretkeyspec(this.sk.getbytes(default_encoding),"hmacsha1");
macmac=mac.getinstance("hmacsha1");mac.init(signingkey);
returnbase64.getencoder().encodetostring(mac.dofinal(policybase64));
}
publicstaticvoidmain(string[]args)throwsexception{
signdemodemo=newsigndemo();
/* 认证用的ak和sk硬编码到代码中或者明文存储都有很大的安全风险，建议在配置文件或者环境变量中密文存放，使用时解密，确保安全；
        本示例以ak和sk保存在环境变量中为例，运行本示例前请先在本地环境中设置环境变量huaweicloud_sdk_ak和huaweicloud_sdk_sk。*/
demo.ak=system.getenv("huaweicloud_sdk_ak");
demo.sk=system.getenv("huaweicloud_sdk_sk");
stringauthexpiration=demo.getformatexpiration(null,0);
string[]tmpconditions={"{\"bucket\": \"bucketname\" }","[\"starts-with\", \"$key\", \"obj\"]"};
stringpolicy=demo.stringtosign(tmpconditions,authexpiration);
stringpolicybase64=base64.getencoder().encodetostring(policy.getbytes(default_encoding));
stringsignature=demo.postsignature(policy);
// 表单中携带accesskeyid、policy、signature的签名 
system.out.println("authexpiration="authexpiration);
system.out.println("policy="policy);
system.out.println("policybase64="policybase64);
system.out.println("signature="signature);
// 表单中携带token的签名 
system.out.println("token="demo.ak":"signature":"policybase64);
}
}↵

# coding=utf-8
import binascii
import hashlib
import hmac
import os
import time
from datetime import datetime
import pytz
class signaturedemo:
    expiration_date_formatter = "%y-%m-%dt%h:%m:%s.%f"
    default_encoding = "utf-8"
    # 默认过期时间五分钟
    default_expire_seconds = 300
    gmt_timezone = "gmt"
    def __init__(self, ak=none, sk=none):
        self.ak = ak
        self.sk = sk
    # request_date和expires是时间戳形式，例如：1675651495.979
    def get_format_expiration(self, request_date, expires):
        request_date = request_date if request_date else time.time()
        expiry_date = request_date  (expires if expires > 0 else self.default_expire_seconds)
        expiration = datetime.fromtimestamp(expiry_date, pytz.timezone(self.gmt_timezone)).strftime(
            self.expiration_date_formatter)[:-3]  "z"
        return expiration
    def post_signature(self, policy):
        # 如果使用binascii或encode("base64")， 需要去除换行符
        policy_base64 = binascii.b2a_base64(policy.encode(self.default_encoding)).rstrip()
        hashed = hmac.new(self.sk.encode(self.default_encoding), policy_base64, hashlib.sha1)
        return binascii.b2a_base64(hashed.digest()).rstrip()
    @staticmethod
    def string_to_sign(conditions, expiration):
        return "{\"expiration\":"  "\""  expiration  "\","  "\"conditions\":["  ",".join(conditions)  "]}"
if __name__ == "__main__":
    demo = signaturedemo()
    # 认证用的ak和sk硬编码到代码中或者明文存储都有很大的安全风险，建议在配置文件或者环境变量中密文存放，使用时解密，确保安全；
    # 本示例以ak和sk保存在环境变量中为例，运行本示例前请先在本地环境中设置环境变量huaweicloud_sdk_ak和huaweicloud_sdk_sk。
    demo.ak = os.getenv('huaweicloud_sdk_ak')
    demo.sk = os.getenv('huaweicloud_sdk_sk')
    auth_expiration = demo.get_format_expiration(none, 0)
    conditions_example = [
        "{\"bucket\": \"bucketname\" }",
        "[\"starts-with\", \"$key\", \"obj\"]"
    ]
    post_policy = demo.string_to_sign(conditions_example, auth_expiration)
    policy_base64 = binascii.b2a_base64(post_policy.encode(demo.default_encoding)).rstrip()
    signature = demo.post_signature(post_policy)
    # 表单中携带accesskeyid、policy、signature的签名
    print("authexpiration="  auth_expiration)
    print("policy="  post_policy)
    print("policybase64="  policy_base64)
    print("signature="  signature)
    # 表单中携带token的签名
    print("token="  demo.ak  ":"  signature  ":"  policy_base64)