88 lines
2.6 KiB
Go
88 lines
2.6 KiB
Go
package aliyun
|
||
|
||
import (
|
||
"errors"
|
||
"github.com/aliyun/alibabacloud-oss-go-sdk-v2/oss"
|
||
"github.com/aliyun/alibabacloud-oss-go-sdk-v2/oss/credentials"
|
||
stsToken "github.com/aliyun/aliyun-sts-go-sdk/sts"
|
||
"github.com/go-admin-team/go-admin-core/logger"
|
||
"golang.org/x/net/context"
|
||
"os"
|
||
"time"
|
||
)
|
||
|
||
const (
|
||
AliyunAccessKeyID = "LTAI5t9sZ7ZhEirYKETbEhbJ"
|
||
AliyunAccessKeySecret = "mtDxepQAAhzQ7g2aQsB5Hq2339ryAI"
|
||
AliyunRoleArn = "acs:ram::1069419146450879:role/aliyunoss"
|
||
AliyunOssBucketName = "yy-telecom"
|
||
AliyunOssUrl = "https://yy-telecom.oss-cn-shenzhen.aliyuncs.com/"
|
||
AliyunOssRegion = "cn-shenzhen"
|
||
|
||
ExpiredTime = 3600
|
||
)
|
||
|
||
type UploadInfo struct {
|
||
AccessKeyId string `json:"access_key_id"`
|
||
AccessKeySecret string `json:"access_key_secret"`
|
||
Expiration int64 `json:"expiration"`
|
||
SecurityToken string `json:"security_token"`
|
||
BucketName string `json:"bucket_name"`
|
||
}
|
||
|
||
// init函数用于初始化命令行参数
|
||
func init() {
|
||
os.Setenv("OSS_ACCESS_KEY_ID", AliyunAccessKeyID)
|
||
os.Setenv("OSS_ACCESS_KEY_SECRET", AliyunAccessKeySecret)
|
||
}
|
||
|
||
// GenStsToken uid用来区分sts授予了哪个用户，可以传将用户uid转为string传入
|
||
// 传入的字符串长度必须大于1
|
||
// stsToken的默认有效时间为一小时
|
||
func GenStsToken(uid string) (*UploadInfo, error) {
|
||
stsClient := stsToken.NewClient(AliyunAccessKeyID, AliyunAccessKeySecret, AliyunRoleArn, uid)
|
||
|
||
resp, err := stsClient.AssumeRole(ExpiredTime)
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
logger.Error("err:%v", err)
|
||
logger.Info("AssumeRole:resp:%v", resp)
|
||
uploadInfo := &UploadInfo{
|
||
AccessKeyId: resp.Credentials.AccessKeyId,
|
||
AccessKeySecret: resp.Credentials.AccessKeySecret,
|
||
Expiration: resp.Credentials.Expiration.Unix(),
|
||
SecurityToken: resp.Credentials.SecurityToken,
|
||
BucketName: AliyunOssBucketName,
|
||
}
|
||
return uploadInfo, nil
|
||
}
|
||
|
||
// GeneratePresignedURL 生成 OSS 对象的预签名 URL
|
||
func GeneratePresignedURL(objectName string) (string, error) {
|
||
if objectName == "" {
|
||
return "", errors.New("invalid parameters: object are required")
|
||
}
|
||
|
||
// 加载默认配置并设置凭证提供者和区域
|
||
cfg := oss.LoadDefaultConfig().
|
||
WithCredentialsProvider(credentials.NewEnvironmentVariableCredentialsProvider()).
|
||
WithRegion(AliyunOssRegion)
|
||
|
||
// 创建 OSS 客户端
|
||
client := oss.NewClient(cfg)
|
||
|
||
// 生成 GetObject 的预签名 URL
|
||
result, err := client.Presign(context.TODO(), &oss.GetObjectRequest{
|
||
Bucket: oss.Ptr(AliyunOssBucketName),
|
||
Key: oss.Ptr(objectName),
|
||
},
|
||
oss.PresignExpires(5*time.Minute),
|
||
)
|
||
if err != nil {
|
||
return "", err
|
||
}
|
||
|
||
return result.URL, nil
|
||
}
|