All Products
Search

This Product

    Integrating DAS Console

    Document Center

    Integrating DAS Console

    Last Updated: Aug 25, 2020

    You can create a RAM user for Alibaba Cloud and grant STS permission policies to integrate the DAS (formerly HDM) console without logging into the self-built operation and maintenance platform. This article will introduce related steps.

    Prerequisites

    You have created a RAM user and granted STS permission policies. For details, see Configuring RAM User Authorization.

    Steps

    1. Obtain the user’s temporary identity through the AssumeRole interface.
      For how to obtain the user’s temporary identity, see AssumeRole.

      For details of RAM role principles, see RAM Role Overview.

    2. Use a security token to obtain a login token.

      TicketType is mainly classified into two types: normal and mini.
      normal is used by default, corresponding to the DAS domain name: HDM Console
      mini if applied to BID owner, corresponding to the DAS domain name: HDM Service Console

    3. Construct a login-free link to access the DAS page.

      1. The URL format is as follows:

        1. https://signin.aliyun.com/federation?Action=Login
        2.                       &LoginUrl=<Address that the browser jumps to in case of login failure, generally configured as self-built WEB configuration 302 jump URL>
        3.                       &Destination=<DAS service page that is accessed actually>
        4.                       &SigninToken=<Obtained login TOKEN>

        The DAS service page corresponding to Destination is affected by the TicketType parameter in the second step.
        normal corresponds to DAS domain name: HDM Console
        mini applied to BID owner corresponding to DAS domain name: HDM Service Console

      2. If you want to integrate the DAS dashboard, Destination can be set to: Aliyun Dashboard

        #The preceding isShare=true and hideTopbar=true are required parameters.

        ParameterDescription
        isShare=trueRequired for external console integration.
        hideTopbar=trueHide the DAS Alibaba Cloud console sidebar.
        hideMenu=trueHide DAS external menu.
        hideInstanceMenu=trueHide the DAS instance details page sidebar and external sidebar.

      3. The reference code is as follows:

        1. private static String getHdmLoginUrl(String pageUrl, String signInToken) throws URISyntaxException {
        2.   URIBuilder builder = new URIBuilder(SIGN_IN_DOMAIN);
        3.   builder.setParameter("Action", "Login");
        4.   // Address that the browser jumps to in case of login failure, generally configured as self-built WEB configuration 302 jump URL
        5.   builder.setParameter("LoginUrl", "https://signin.aliyun.com/login.htm");
        6.   // DAS service page that is accessed actually, for example, global dashboard, real-time dashboard, or some instance details page
        7.   builder.setParameter("Destination", pageUrl);
        8.   builder.setParameter("SigninToken", signInToken);
        9.   HttpGet request = new HttpGet(builder.build());
        10.   return request.getURI().toString();
        11. }

    Appendix:

    • Full version
    1. import java.io.IOException;
    2. import java.net.URISyntaxException;
    4. import com.alibaba.fastjson.JSON;
    5. import com.alibaba.fastjson.JSONObject;
    7. import com.aliyuncs.DefaultAcsClient;
    8. import com.aliyuncs.exceptions.ClientException;
    9. import com.aliyuncs.profile.DefaultProfile;
    10. import com.aliyuncs.profile.IClientProfile;
    11. import com.aliyuncs.sts.model.v20150401.AssumeRoleRequest;
    12. import com.aliyuncs.sts.model.v20150401.AssumeRoleResponse;
    13. import org.apache.http.HttpStatus;
    14. import org.apache.http.client.methods.CloseableHttpResponse;
    15. import org.apache.http.client.methods.HttpGet;
    16. import org.apache.http.client.utils.URIBuilder;
    17. import org.apache.http.impl.client.CloseableHttpClient;
    18. import org.apache.http.impl.client.HttpClients;
    19. import org.apache.http.util.EntityUtils;
    21. /**
    22.  * Created by tinker on 2019-07-09.
    23.  *
    24.  * @author tinker
    25.  * @date 2019-07-09
    26.  */
    27. public class StsService {
    29.     private static String getRoleArn(String accountId, String roleName) {
    30.         return String.format("acs:ram::%s:role/%s", accountId, roleName);
    31.     }
    33.     private static final String SIGN_IN_DOMAIN = "https://signin.aliyun.com/federation";
    35.     /**
    36.      * Use a security token to obtain a login token
    37.      *
    38.      * @param accesskeyId
    39.      * @param accessKeySecret
    40.      * @param securityToken
    41.      * @return
    42.      * @throws IOException
    43.      * @throws URISyntaxException
    44.      */
    45.     private static String getSignInToken(String accesskeyId, String accessKeySecret, String securityToken)
    46.         throws IOException, URISyntaxException {
    47.         URIBuilder builder = new URIBuilder(SIGN_IN_DOMAIN);
    49.         builder.setParameter("Action", "GetSigninToken")
    50.             .setParameter("AccessKeyId", accesskeyId)
    51.             .setParameter("AccessKeySecret", accessKeySecret)
    52.             .setParameter("SecurityToken", securityToken)
    53.             .setParameter("TicketType", "normal");
    55.         HttpGet request = new HttpGet(builder.build());
    56.         CloseableHttpClient httpclient = HttpClients.createDefault();
    58.         try (CloseableHttpResponse response = httpclient.execute(request)) {
    59.             if (response.getStatusLine().getStatusCode() == HttpStatus.SC_OK) {
    60.                 String context = EntityUtils.toString(response.getEntity());
    61.                 JSONObject jsonObject = JSON.parseObject(context);
    62.                 return jsonObject.getString("SigninToken");
    63.             } else {
    64.                 System.out.println(response.getStatusLine());
    65.             }
    66.         }
    67.         return null;
    68.     }
    70.     private static String getHdmLoginUrl(String pageUrl, String signInToken) throws URISyntaxException {
    71.         URIBuilder builder = new URIBuilder(SIGN_IN_DOMAIN);
    72.         builder.setParameter("Action", "Login");
    73.         // Address that the browser jumps to in case of login failure, generally configured as self-built WEB configuration 302 jump URL
    74.         builder.setParameter("LoginUrl", "https://signin.aliyun.com/login.htm");
    75.         // DAS service page that is accessed actually, for example, global dashboard, real-time dashboard, or some instance details page.
    76.         builder.setParameter("Destination", pageUrl);
    77.         builder.setParameter("SigninToken", signInToken);
    78.         HttpGet request = new HttpGet(builder.build());
    79.         return request.getURI().toString();
    80.     }
    82.     /**
    83.      * Obtain the user's temporary identity through the AssumeRole interface
    84.      *
    85.      * @param accountId
    86.      * @param accessKeyId
    87.      * @param accessKeySecret
    88.      * @param ramRole
    89.      * @return
    90.      * @throws ClientException
    91.      */
    92.     private static AssumeRoleResponse.Credentials assumeRole(String accountId, String accessKeyId,
    93.                                                              String accessKeySecret, String ramRole)
    94.         throws ClientException {
    95.         String defaultRegion = "cn-hangzhou";
    96.         IClientProfile profile = DefaultProfile.getProfile(defaultRegion, accessKeyId, accessKeySecret);
    97.         DefaultAcsClient client = new DefaultAcsClient(profile);
    98.         AssumeRoleRequest request = new AssumeRoleRequest();
    99.         // Set RAMArn, accountId to be the UID of the resource owner, which is the main account
    100.         request.setRoleArn(getRoleArn(accountId, ramRole));
    101.         // User-defined parameter. This parameter is used to distinguish between different tokens and can be used for user-level access audit. Format: ^[a-zA-Z0-9\.@\-_]+$
    102.         request.setRoleSessionName("session-name");
    103.         // The specified expiration time, in seconds. Expiration time range: 900 ~ 3600, with the default value 3600
    104.         request.setDurationSeconds(3600L);
    105.         AssumeRoleResponse response = client.getAcsResponse(request);
    106.         return response.getCredentials();
    108.     }
    110.     public static void main(String[] args) throws IOException, URISyntaxException {
    111.         try {
    112.             /*
    113.             Step 0 Prepare sub-account and permission authorization
    114.              */
    115.             String accountId = "";
    116.             // Role used to access DAS. If needed, you can add permissions AliyunHDMReadOnlyAccess (read-only), AliyunHDMFullAccess 
    117.             String ramRole = "";
    118.             //  Sub-account AK, SK, which has permission AliyunSTSAssumeRoleAccess 
    119.             String accessKeyId = "";
    120.             String accessKeySecret = "";
    121.             /*
    122.              Step 1 Obtain temporary AK, SK, SecurityToken through the AssumeRole interface
    123.              */
    124.             AssumeRoleResponse.Credentials credentials = assumeRole(accountId, accessKeyId, accessKeySecret, ramRole);
    126.             System.out.println("Expiration: " + credentials.getExpiration());
    127.             System.out.println("Access Key Id: " + credentials.getAccessKeyId());
    128.             System.out.println("Access Key Secret: " + credentials.getAccessKeySecret());
    129.             System.out.println("Security Token: " + credentials.getSecurityToken());
    131.             /*
    132.             Step 2 Obtain SigninToken
    133.              */
    134.             String signInToken = getSignInToken(credentials.getAccessKeyId(),
    135.                 credentials.getAccessKeySecret(),
    136.                 credentials.getSecurityToken());
    138.             System.out.println("Your SigninToken is: " + signInToken);
    140.             /*
    141.             Step 3 Construct a login-free link, for example, to access the DAS dashboard
    142.              */
    143.             String pageUrl = getHdmLoginUrl("https://hdm.console.aliyun.com/?hideTopbar=true#/customDashboard?", signInToken);
    144.             System.out.println("Your PageUrl is : " + pageUrl);
    145.         } catch (ClientException e) {
    146.             System.out.println("Failed:");
    147.             System.out.println("Error code: " + e.getErrCode());
    148.             System.out.println("Error message: " + e.getErrMsg());
    149.             System.out.println("RequestId: " + e.getRequestId());
    150.         }
    151.     }
    153. }
    • POM file
    1. <?xml version="1.0" encoding="UTF-8"?>
    2. <project xmlns="http://maven.apache.org/POM/4.0.0"
    3.          xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    4.          xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
    5.     <modelVersion>4.0.0</modelVersion>
    7.     <groupId>com.aliyun</groupId>
    8.     <artifactId>hdm-login-demo</artifactId>
    9.     <version>1.0-SNAPSHOT</version>
    11. <dependencies>
    12.     <dependency>
    13.         <groupId>com.aliyun</groupId>
    14.         <artifactId>aliyun-java-sdk-core</artifactId>
    15.         <version>3.5.0</version>
    16.     </dependency>
    18.     <dependency>
    19.         <groupId>com.aliyun</groupId>
    20.         <artifactId>aliyun-java-sdk-sts</artifactId>
    21.         <version>3.0.0</version>
    22.     </dependency>
    24.     <dependency>
    25.         <groupId>org.apache.httpcomponents</groupId>
    26.         <artifactId>httpclient</artifactId>
    27.         <version>4.5.9</version>
    28.     </dependency>
    30.     <dependency>
    31.         <groupId>com.alibaba</groupId>
    32.         <artifactId>fastjson</artifactId>
    33.         <version>1.2.58</version>
    34.     </dependency>
    37. </dependencies>
    38.     <build>
    39.     <plugins>
    40.         <plugin>
    41.             <groupId>org.apache.maven.plugins</groupId>
    42.             <artifactId>maven-compiler-plugin</artifactId>
    43.             <configuration>
    44.                 <source>1.8</source>
    45.                 <target>1.8</target>
    46.                 <encoding>UTF-8</encoding>
    47.             </configuration>
    48.         </plugin>
    49.     </plugins>
    50.     </build>
    51. </project>
    Free Trial Free Trial