Object Storage Service:Gunakan kredensial sementara dari STS untuk mengakses OSS

Java

import com.aliyun.oss.*;
import com.aliyun.oss.common.auth.CredentialsProvider;
import com.aliyun.oss.common.auth.DefaultCredentialProvider;
import com.aliyun.oss.common.comm.SignVersion;
import com.aliyun.oss.model.PutObjectRequest;
import com.aliyun.oss.model.PutObjectResult;
import java.io.File;

public class Demo {
    public static void main(String[] args) throws Exception {
        // Gunakan kredensial sementara dari langkah 1.5 — bukan kredensial Pengguna RAM
        // ID AccessKey sementara diawali dengan STS.
        String accessKeyId = "yourSTSAccessKeyID";
        String accessKeySecret = "yourSTSAccessKeySecret";
        String stsToken = "yourSecurityToken";

        CredentialsProvider credentialsProvider = new DefaultCredentialProvider(accessKeyId, accessKeySecret, stsToken);
        ClientBuilderConfiguration clientBuilderConfiguration = new ClientBuilderConfiguration();
        // Gunakan signature V4
        clientBuilderConfiguration.setSignatureVersion(SignVersion.V4);

        OSS ossClient = OSSClientBuilder.create()
                // Titik akhir wilayah tempat bucket berada, misalnya, https://oss-cn-hangzhou.aliyuncs.com
                .endpoint("endpoint")
                .credentialsProvider(credentialsProvider)
                .clientConfiguration(clientBuilderConfiguration)
                // ID wilayah, misalnya, cn-hangzhou
                .region("region")
                .build();

        try {
            // Unggah exampletest.txt ke examplebucket
            PutObjectRequest putObjectRequest = new PutObjectRequest(
                "examplebucket",
                "exampletest.txt",
                new File("D:\\localpath\\exampletest.txt")
            );
            PutObjectResult result = ossClient.putObject(putObjectRequest);
        } catch (OSSException oe) {
            System.out.println("Kesalahan OSS — permintaan mencapai OSS tetapi ditolak:");
            System.out.println("Pesan Kesalahan: " + oe.getErrorMessage());
            System.out.println("Kode Kesalahan: " + oe.getErrorCode());
            System.out.println("ID Permintaan: " + oe.getRequestId());
            System.out.println("ID Host: " + oe.getHostId());
        } catch (ClientException ce) {
            System.out.println("Kesalahan klien — tidak dapat mencapai OSS:");
            System.out.println("Pesan Kesalahan: " + ce.getMessage());
        } finally {
            if (ossClient != null) {
                ossClient.shutdown();
            }
        }
    }
}

Python

OSS SDK untuk Python tersedia dalam dua versi. Versi 2.0 merupakan penulisan ulang lengkap dari 1.0 dengan autentikasi yang disederhanakan, logika retry, dan penanganan kesalahan, serta opsi konfigurasi yang lebih fleksibel.

import alibabacloud_oss_v2 as oss

def main():
    // Gunakan kredensial sementara dari langkah 1.5 — bukan kredensial Pengguna RAM
    // ID AccessKey sementara diawali dengan STS.
    sts_access_key_id = 'yourSTSAccessKeyID'
    sts_access_key_secret = 'yourSTSAccessKeySecret'
    sts_security_token = 'yourSecurityToken'

    credentials_provider = oss.credentials.StaticCredentialsProvider(
        access_key_id=sts_access_key_id,
        access_key_secret=sts_access_key_secret,
        security_token=sts_security_token,
    )

    cfg = oss.config.load_default()
    cfg.credentials_provider = credentials_provider
    // Wilayah tempat bucket berada, misalnya, cn-hangzhou
    cfg.region = 'cn-hangzhou'

    client = oss.Client(cfg)

    // Unggah file lokal ke examplebucket
    local_file_path = 'D:\\localpath\\exampletest.txt'
    with open(local_file_path, 'rb') as file:
        data = file.read()

    result = client.put_object(oss.PutObjectRequest(
        bucket='examplebucket',
        key='exampletest.txt',
        body=data,
    ))

    print(f'status code: {result.status_code},'
          f' request id: {result.request_id},'
          f' content md5: {result.content_md5},'
          f' etag: {result.etag},'
          f' hash crc64: {result.hash_crc64},'
          f' version id: {result.version_id},'
    )

if __name__ == "__main__":
    main()

# -*- coding: utf-8 -*-
import oss2

# Titik akhir wilayah tempat bucket berada, misalnya https://oss-cn-hangzhou.aliyuncs.com
endpoint = 'https://oss-cn-hangzhou.aliyuncs.com'
# Gunakan kredensial sementara dari langkah 1.5 — bukan kredensial pengguna RAM
sts_access_key_id = 'yourAccessKeyId'
sts_access_key_secret = 'yourAccessKeySecret'
bucket_name = 'examplebucket'
object_name = 'examplebt.txt'
security_token = 'yourSecurityToken'

auth = oss2.StsAuth(sts_access_key_id, sts_access_key_secret, security_token)
bucket = oss2.Bucket(auth, endpoint, bucket_name)
result = bucket.put_object(object_name, "hello world")
print(result.status)

Go

OSS SDK untuk Go tersedia dalam dua versi. Versi 2.0 merupakan penulisan ulang lengkap dari 1.0 dengan autentikasi yang disederhanakan, logika retry, dan penanganan kesalahan, serta opsi konfigurasi yang lebih fleksibel.

package main

import (
	"context"
	"log"

	"github.com/aliyun/alibabacloud-oss-go-sdk-v2/oss"
	"github.com/aliyun/alibabacloud-oss-go-sdk-v2/oss/credentials"
)

func main() {
	// Wilayah tempat bucket berada, misalnya, cn-hangzhou
	region := "cn-hangzhou"

	// Gunakan kredensial sementara dari langkah 1.5 — bukan kredensial Pengguna RAM
	// ID AccessKey sementara diawali dengan STS.
	accessKeyID := "yourSTSAccessKeyID"
	accessKeySecret := "yourSTSAccessKeySecret"
	stsToken := "yourSecurityToken"

	provider := credentials.NewStaticCredentialsProvider(accessKeyID, accessKeySecret, stsToken)

	cfg := oss.LoadDefaultConfig().
		WithCredentialsProvider(provider).
		WithRegion(region)

	client := oss.NewClient(cfg)

	localFile := "D:\\localpath\\exampletest.txt"

	putRequest := &oss.PutObjectRequest{
		Bucket:       oss.Ptr("examplebucket"),
		Key:          oss.Ptr("exampletest.txt"),
		StorageClass: oss.StorageClassStandard,
		Acl:          oss.ObjectACLPrivate,
		Metadata: map[string]string{
			"yourMetadataKey1": "yourMetadataValue1",
		},
	}

	result, err := client.PutObjectFromFile(context.TODO(), putRequest, localFile)
	if err != nil {
		log.Fatalf("failed to put object from file %v", err)
	}
	log.Printf("put object from file result:%#v\n", result)
}

package main

import (
    "fmt"
    "github.com/aliyun/aliyun-oss-go-sdk/oss"
    "os"
)

func main() {
    // Baca kredensial sementara dari variabel lingkungan
    // Atur OSS_ACCESS_KEY_ID, OSS_ACCESS_KEY_SECRET, dan OSS_SESSION_TOKEN sebelum menjalankan
    provider, err := oss.NewEnvironmentVariableCredentialsProvider()
    if err != nil {
        fmt.Println("Error:", err)
        os.Exit(-1)
    }
    // Titik akhir wilayah tempat bucket berada, misalnya, https://oss-cn-hangzhou.aliyuncs.com
    client, err := oss.New("yourEndpoint", "", "", oss.SetCredentialsProvider(&provider))
    if err != nil {
        fmt.Println("Error:", err)
        os.Exit(-1)
    }
    bucketName := "examplebucket"
    objectName := "exampledir/exampleobject.txt"
    filepath := "D:\\localpath\\examplefile.txt"

    bucket, err := client.Bucket(bucketName)
    if err != nil {
        fmt.Println("Error:", err)
        os.Exit(-1)
    }
    err = bucket.PutObjectFromFile(objectName, filepath)
    if err != nil {
        fmt.Println("Error:", err)
        os.Exit(-1)
    }
    fmt.Println("upload success")
}

Node.js

Contoh ini memerlukan Axios.

const axios = require("axios");
const OSS = require("ali-oss");

const getToken = async () => {
  // Ambil kredensial sementara dari server aplikasi (menjalankan langkah 1.5)
  await axios.get("http://localhost:8000/sts").then((token) => {
    const client = new OSS({
      // Wilayah tempat bucket berada, misalnya, oss-cn-hangzhou
      region: 'oss-cn-hangzhou',
      // Gunakan kredensial sementara dari langkah 1.5
      accessKeyId: token.data.AccessKeyId,
      accessKeySecret: token.data.AccessKeySecret,
      stsToken: token.data.SecurityToken,
      authorizationV4: true,
      bucket: "examplebucket",
      // Secara otomatis refresh kredensial sebelum kedaluwarsa
      refreshSTSToken: async () => {
        const refreshToken = await axios.get("http://localhost:8000/sts");
        return {
          accessKeyId: refreshToken.data.AccessKeyId,
          accessKeySecret: refreshToken.data.AccessKeySecret,
          stsToken: refreshToken.data.SecurityToken,
        };
      },
    });
    // Unggah objek menggunakan kredensial sementara
    client.put('exampleobject.jpg', 'D:\\example.jpg')
      .then((res) => { console.log(res) })
      .catch(e => console.log(e))
  });
};
getToken()

php

<?php
if (is_file(__DIR__ . 'autoload.php')) {
    require_once __DIR__ . 'autoload.php';
}
if (is_file(__DIR__ . '/vendor/autoload.php')) {
    require_once __DIR__ . '/vendor/autoload.php';
}

use OSS\Credentials\StaticCredentialsProvider;
use OSS\OssClient;
use OSS\Core\OssException;

try {
    // Gunakan kredensial sementara dari langkah 1.5 — bukan kredensial Pengguna RAM
    // ID AccessKey sementara diawali dengan STS.
    $accessKeyId = 'yourSTSAccessKeyID';
    $accessKeySecret = 'yourSTSAccessKeySecret';
    $securityToken = 'yourSecurityToken';

    $provider = new StaticCredentialsProvider($accessKeyId, $accessKeySecret, $securityToken);

    // Titik akhir wilayah tempat bucket berada, misalnya, https://oss-cn-hangzhou.aliyuncs.com
    $endpoint = "https://oss-cn-hangzhou.aliyuncs.com";
    $bucket = "examplebucket";
    $object = "exampletest.txt";
    $localFilePath = "D:\\localpath\\exampletest.txt";

    $options = array(
        OssClient::OSS_HEADERS => array(
            'x-oss-object-acl' => 'private',
            'x-oss-meta-info' => 'yourinfo'
        ),
    );

    $config = array(
        "provider" => $provider,
        "endpoint" => $endpoint,
        "signatureVersion" => OssClient::OSS_SIGNATURE_VERSION_V4,
        // Wilayah tempat bucket berada, misalnya, cn-hangzhou
        "region" => "cn-hangzhou"
    );

    $ossClient = new OssClient($config);
    $ossClient->putObject($bucket, $object, $localFilePath, $options);
} catch (OssException $e) {
    printf($e->getMessage() . "\n");
    return;
}

Ruby

require 'aliyun/sts'
require 'aliyun/oss'

client = Aliyun::OSS::Client.new(
  // Titik akhir wilayah tempat bucket berada, misalnya, https://oss-cn-hangzhou.aliyuncs.com
  endpoint: 'https://oss-cn-hangzhou.aliyuncs.com',
  // Gunakan kredensial sementara dari langkah 1.5 — bukan kredensial Pengguna RAM
  access_key_id: 'token.access_key_id',
  access_key_secret: 'token.access_key_secret',
  sts_token: 'token.security_token'
)
bucket = client.get_bucket('examplebucket')
bucket.put_object('exampleobject.txt', :file => 'D:\test.txt')