Simple Log Service:Assinaturas de requisição

Observações de uso

O SDK do SLS gerencia a assinatura automaticamente e oferece suporte a várias linguagens. Sempre que possível, use o SDK em vez de assinar manualmente. Visão geral do SDK do Simple Log Service.

A assinatura requer um par de AccessKey. Par de AccessKey. Use um par existente ou crie um novo e certifique-se de que ele esteja ative.

As seções a seguir abordam a estrutura da requisição, o cálculo da assinatura e exemplos de código de assinatura.

Estrutura da requisição

POST /logstores/test-logstore/shards/0?action=split HTTP/1.1

Host: ali-test-project.cn-hangzhou.log.aliyuncs.com
Date: Tue, 23 Aug 2022 12:12:03 GMT
x-log-apiversion: 0.6.0
x-log-signaturemethod: hmac-sha1
Content-Length: 18
Content-Type: application/json
Content-MD5: 49DFDD54B01CBCD2D2AB5E9E5EE6B9B9
Authorization: LOG testAccessKeyId:RLETq4u7sWb3cssZIhsun****

{"hello": "world"}

Processo de cálculo da assinatura

O cabeçalho Authorization usa o formato LOG accessKeyId:Signature, onde AccessKeyId é o seu ID de chave e Signature é a string de assinatura calculada. Esta seção descreve como construir o valor de Signature.

Mensagem de assinatura

Uma string de assinatura é produzida pela criptografia e codificação de uma mensagem de assinatura. A figura a seguir ilustra o processo de construção.

Parâmetro	Descrição	Exemplo
method	Método da requisição HTTP em maiúsculas. Valores válidos: GET, POST, PUT e DELETE.	GET
Content-MD5	Hash MD5 do corpo da requisição como string hexadecimal em maiúsculas. String vazia se não houver corpo.	49DFDD54B01CBCD2D2AB5E9E5EE6B9B9
Content-Type	Tipo do corpo da requisição HTTP. String vazia se não houver corpo.	application/json
Date	Hora atual no formato RFC 822/1123 (GMT). Formato: %a, %d %b %Y %H:%M:%S GMT.	Mon, 3 Jan 2010 08:33:47 GMT
Header	Cabeçalhos com prefixo x-log- ou x-acs-, ordenados por chave em ordem crescente. Chaves e valores são unidos por dois pontos (:), e os pares são separados por quebras de linha.	x-log-apiversion:0.6.0 x-log-bodyrawsize:0 x-log-signaturemethod:hmac-sha1
Uri	Caminho da requisição, excluindo o nome de domínio e os parâmetros de consulta.	/logstores/test-logstore
Parâmetros relacionados à consulta	Parâmetros de consulta ordenados por chave em ordem crescente, unidos por = e separados por &.	offset=1&size=10

Exemplo de mensagem de assinatura. Cada linha, exceto a última, termina com uma quebra de linha.

POST
1572A15D7DE7EE9E7BB86461FFEA9499
application/json
Tue, 23 Aug 2022 12:12:03 GMT
x-log-apiversion:0.6.0
x-log-bodyrawsize:0
x-log-signaturemethod:hmac-sha1
/logstores?offset=1&size=10

String de assinatura

Exemplos

AccessKeyId = "bq2sjzesjmo86kq****"
AccessKeySecret = "4fdO2fTDDnZPU/L7CHNd****"

• Exemplo 1

  Liste todos os Logstores no ali-test-project usando uma requisição GET. Requisição HTTP a ser assinada:

  GET /logstores?logstoreName=&offset=0&size=1000 HTTP/1.1
  Date: Mon, 09 Nov 2015 06:11:16 GMT
  Host: ali-test-project.cn-hangzhou.log.aliyuncs.com
  x-log-apiversion: 0.6.0
  x-log-bodyrawsize:0
  x-log-signaturemethod: hmac-sha1

  Mensagem de assinatura gerada:

  GET
  
  Mon, 09 Nov 2015 06:11:16 GMT
  x-log-apiversion:0.6.0
  x-log-bodyrawsize:0
  x-log-signaturemethod:hmac-sha1
  /logstores?logstoreName=&offset=0&size=1000

  Como requisições GET não possuem corpo, Content-MD5 e Content-Type são strings vazias. Assinatura resultante:

  jEYOTCJs2e88o+y5F4/S5I****

  Requisição HTTP assinada:

  GET /logstores?logstoreName=&offset=0&size=1000 HTTP/1.1
  Date: Mon, 09 Nov 2015 06:11:16 GMT
  Host: ali-test-project.cn-hangzhou.log.aliyuncs.com
  x-log-apiversion: 0.6.0
  x-log-bodyrawsize:0
  x-log-signaturemethod: hmac-sha1
  Authorization: LOG bq2sjzesjmo86kq35behupbq:jEYOTCJs2e88o+y5F4/S5I****

• Exemplo 2

  Grave o seguinte log no test-logstore do ali-test-project:

  topic=""
  time=1447048976
  source="10.10.10.1"
  "TestKey": "TestContent"

  Requisição HTTP a ser assinada:

  POST /logstores/test-logstore HTTP/1.1
  Date: Mon, 09 Nov 2015 06:03:03 GMT
  Host: ali-test-project.cn-hangzhou.log.aliyuncs.com
  x-log-apiversion:0.6.0
  x-log-bodyrawsize:50
  x-log-signaturemethod:hmac-sha1
  Content-MD5: 1DD45FA4A70A9300CC9FE7305AF2C494
  Content-Length: 52
  <The log is serialized into byte streams in the Protobuf format.>

  O log é serializado no formato Protocol Buffer (Protobuf) como corpo da requisição. Para mais informações sobre o formato Protobuf, consulte Codificação de dados. Content-Type é application/x-protobuf e Content-MD5 é o hash MD5 do corpo. Mensagem de assinatura gerada:

  POST
  1DD45FA4A70A9300CC9FE7305AF2C494
  application/x-protobuf
  Mon, 09 Nov 2015 06:03:03 GMT
  x-log-apiversion:0.6.0
  x-log-bodyrawsize:50
  x-log-compresstype:lz4
  x-log-signaturemethod:hmac-sha1
  /logstores/ali-test-logstore

  Assinatura resultante:

  XWLGYHGg2F2hcfxWxMLiNk****

  Requisição HTTP assinada:

  POST /logstores/ali-test-logstore HTTP/1.1
  Date: Mon, 09 Nov 2015 06:03:03 GMT
  Host: ali-test-project.cn-hangzhou.log.aliyuncs.com
  x-log-apiversion:0.6.0
  x-log-bodyrawsize:50
  x-log-compresstype:lz4
  x-log-signaturemethod:hmac-sha1
  Content-MD5: 1DD45FA4A70A9300CC9FE7305AF2C494
  Content-Length: 52
  
  Authorization: LOG bq2sjzesjmo86kq35behupbq:XWLGYHGg2F2hcfxWxMLiNk****
  <The log is serialized into byte streams in the Protobuf format.>

Código de exemplo

• Código de exemplo em Java

  Este exemplo usa a biblioteca commons-codec. Adicione a seguinte dependência ao arquivo pom.xml:

  <dependency>
    <groupId>commons-codec</groupId>
    <artifactId>commons-codec</artifactId>
    <version>1.15</version>
  </dependency>

  Exemplo de assinatura:

  package com.aliyun.openservices.log.http.signer;
  
  import org.apache.commons.codec.binary.Base64;
  
  import javax.crypto.Mac;
  import javax.crypto.spec.SecretKeySpec;
  import java.math.BigInteger;
  import java.nio.charset.StandardCharsets;
  import java.security.MessageDigest;
  import java.text.DateFormat;
  import java.text.SimpleDateFormat;
  import java.util.*;
  import java.util.stream.Collectors;
  
  public class v1 {
      public static String md5(byte[] bs) throws Exception {
          MessageDigest digest = MessageDigest.getInstance("MD5");
          digest.update(bs);
          String hex = new BigInteger(1, digest.digest()).toString(16).toUpperCase();
          return new String(new char[32 - hex.length()]).replace("\0", "0") + hex;
      }
  
      public static String getDateString() {
          DateFormat df = new SimpleDateFormat("EEE, dd MMM yyyy HH:mm:ss z", Locale.US);
          df.setTimeZone(new SimpleTimeZone(0, "GMT"));
          return df.format(new Date());
      }
  
      public static void sign(String method, String uri, String accessKeyId, String accessKeySecret,
                              Map<String, String> params,
                              Map<String, String> headers,
                              byte[] body) throws Exception {
  
          int contentLength = 0;
          String contentMD5 = "", message = "";
          headers.put("x-log-apiversion", "0.6.0");
          headers.put("x-log-signaturemethod", "hmac-sha1");
          if (body != null && body.length > 0) {
              contentLength = body.length;
              contentMD5 = md5(body);
              headers.put("Content-MD5", contentMD5);
          }
          String date = getDateString();
          headers.put("Date", date);
          headers.put("Content-Length", String.valueOf(contentLength));
  
          message += method + "\n"
              + contentMD5 + "\n"
              + headers.getOrDefault("Content-Type", "") + "\n"
              + date + "\n";
          // header
          String headerStr = headers.entrySet().stream()
              .filter(e -> e.getKey().startsWith("x-log-") || e.getKey().startsWith("x-acs-"))
              .sorted(Map.Entry.comparingByKey())
              .map(e -> String.format("%s:%s\n", e.getKey(), e.getValue()))
              .collect(Collectors.joining(""));
          message += headerStr;
          // uri & params
          message += uri;
          if (params.size() > 0) {
              message += "?";
          }
          message += params.entrySet().stream()
              .sorted(Map.Entry.comparingByKey())
              .map(e -> String.format("%s=%s", e.getKey(), e.getValue()))
              .collect(Collectors.joining("&"));
          // signature & authorization
          Mac mac = Mac.getInstance("HmacSHA1");
          mac.init(new SecretKeySpec(accessKeySecret.getBytes(StandardCharsets.UTF_8), "HmacSHA1"));
          String signature = new String(Base64.encodeBase64(mac.doFinal(message.getBytes(StandardCharsets.UTF_8))));
          String auth = "LOG " + accessKeyId + ":" + signature;
          headers.put("Authorization", auth);
      }
  }
                              

• Código de exemplo em Python

  Exemplo de assinatura:

  import base64
  import hashlib
  import hmac
  import locale
  from datetime import datetime
  from typing import Dict, Tuple
  
  def get_date():
      try:
          locale.setlocale(locale.LC_TIME, "C")
      except Exception as ex:
          pass
      return datetime.utcnow().strftime('%a, %d %b %Y %H:%M:%S GMT')
  
  def sign(method: str, uri: str, access_key_id: str,
           access_key_secret: str, params: Dict[str, str],
           headers: Dict[str, str], body: bytes):
      content_length = 0
      content_md5, message = '', ''
      headers["x-log-apiversion"] = "0.6.0"
      headers["x-log-signaturemethod"] = "hmac-sha1"
      if body is not None and len(body) > 0:
          content_length = str(len(body))
          content_md5 = hashlib.md5(body).hexdigest().upper()
          headers['Content-MD5'] = content_md5
      date = get_date()
      headers['Date'] = date
      headers['Content-Length'] = content_length
      content_type = headers.get('Content-Type', '')
  
      message += method + "\n" + content_md5 + \
          "\n" + content_type + "\n" + date + "\n"
  
      # header
      filter_by_prefix = lambda t: t[0].startswith('x-log-') or t[0].startswith('x-acs-')
      slsHeaders = list(filter(filter_by_prefix, headers.items()))
      sort_by_key = lambda k: k[0]
      for [k, v] in sorted(slsHeaders, key=sort_by_key):
          message += k + ':' + v + "\n"
      # uri and params
      message += uri
      message += '?' if len(params) > 0 else ''
      sep = ''
      for [k, v] in sorted(params.items(), key=sort_by_key):
          message += sep + k + '=' + v
          sep = '&'
      # signature and authorization
      hashed = hmac.new(access_key_secret.encode('utf8'),
                        message.encode('utf8'), hashlib.sha1).digest()
      signature = base64.encodebytes(hashed).decode('utf8').rstrip()
      auth = f'LOG {access_key_id}:{signature}'
      headers['Authorization'] = auth
                              

• Código de exemplo em PHP

  Exemplo de assinatura:

  <?php
  // returns new headers array
  function sign($method, $uri, $accessKeyId, $accessKeySecret, $params, $headers, $body)
  {
    $contentLength = 0;
    $headers["x-log-apiversion"] = "0.6.0";
    $headers["x-log-signaturemethod"] = "hmac-sha1";
    if (!is_null($body) && strlen($body) > 0) {
      $contentLength = strlen($body);
      $contentMd5 = strtoupper(md5($body));
      $headers["Content-MD5"] = $contentMd5;
    }
    // date
    setLocale(LC_TIME, 'en_US');
    $date = gmdate('D, d M Y H:i:s \G\M\T', time());
    $headers["Date"] = $date;
    $headers["Content-Length"] = (string)$contentLength;
    $contentType = isset($headers['Content-Type']) ? $headers['Content-Type'] : '';
    $message = $method . "\n" . $contentMd5 . "\n" . $contentType . "\n" . $date . "\n";
    // header
    $filterHeaders = [];
    foreach ($headers as $key => $val) {
      if (str_starts_with($key, 'x-log-') || str_starts_with($key, 'x-acs-')) {
        $filterHeaders[$key] = $val;
      }
    }
    ksort($filterHeaders);
    foreach ($filterHeaders as $key => $val) {
      $message .= $key . ':' . $val . "\n";
    }
    // uri and params
    $message .= $uri;
    if (sizeof($params) > 0) {
      $message .= '?';
    }
    ksort($params);
    $sep = '';
    foreach ($params as $key => $val) {
      $message .= $sep . $key . '=' . $val;
      $sep = '&';
    }
    // signature & authorization
    $signature = base64_encode(hash_hmac('sha1', $message, $accessKeySecret, TRUE));
    $auth = 'LOG ' . $accessKeyId . ':' . $signature;
    $headers['Authorization'] = $auth;
    return $headers;
  };
  
  // example call
  $headers = sign(
    'POST',
    '/logstores/test-logstore',
    'testAccessId',
    'testAccessKey',
    array(
      "test" => "test",
      "hello" => "world"
    ),
    array(
      "x-log-signaturemethod" => "hmac-sha1",
      "x-log-bodyrawsize" => "0",
      "x-log-apiversion" => "0.6.0"
    ),
    'hello, world'
  );
  echo ($headers['Authorization']);
  foreach ($headers as $key => $val) {
    echo ($key . '=' . $val . "\n");
  }
  ?>

• Código de exemplo em Go

  Exemplo de assinatura:

  package sls
  
  import (
      "crypto/hmac"
      "crypto/md5"
      "crypto/sha1"
      "encoding/base64"
      "fmt"
      "sort"
      "strconv"
      "strings"
      "time"
  )
  
  /*
  * @param uri The uri of http request, exclude host and query param, eg: /logstores/test-logstore
  * @param headers This function modifies headers, headers must not be a nil map
  * @param method Http method in uppercase , eg: GET, POST, PUT, DELETE
  */
  func Sign(method, uri, accessKeyID, accessKeySecret string, headers, queryParams map[string]string, body []byte) error {
      var message, signature string
      var contentMD5, contentType, date string
      headers["x-log-apiversion"] = "0.6.0";
      headers["x-log-signaturemethod"] = "hmac-sha1";
      if len(body) > 0 {
          contentMD5 = fmt.Sprintf("%X", md5.Sum(body))
          headers["Content-MD5"] = contentMD5
      }
  
      date = time.Now().In(time.FixedZone("GMT", 0)).Format(time.RFC1123)
      headers["Date"] = date
      headers["Content-Length"] = strconv.Itoa(len(body))
      if val, ok := headers["Content-Type"]; ok {
          contentType = val
      }
      message += method + "\n" + contentMD5 + "\n" + contentType + "\n" + date + "\n"
  
      // header
      slsHeaders := make(map[string]string)
      for k, v := range headers {
          if strings.HasPrefix(k, "x-log-") || strings.HasPrefix(k, "x-acs-") {
              slsHeaders[k] = v
          }
      }
      forEachInOrder(slsHeaders, func(k, v string) {
          message += k + ":" + v + "\n"
      })
  
      message += uri
      if len(queryParams) > 0 {
          message += "?"
      }
      sep := ""
      forEachInOrder(queryParams, func(k, v string) {
          message += sep + k + "=" + v
          sep = "&"
      })
  
      // Signature = base64(hmac-sha1(UTF8-Encoding-Of(SignString),AccessKeySecret))
      mac := hmac.New(sha1.New, []byte(accessKeySecret))
      _, err := mac.Write([]byte(message))
      if err != nil {
          return err
      }
      signature = base64.StdEncoding.EncodeToString(mac.Sum(nil))
      auth := fmt.Sprintf("LOG %v:%v", accessKeyID, signature)
      headers["Authorization"] = auth
      return nil
  }
  
  func forEachInOrder(m map[string]string, f func(k, v string)) {
      var ss sort.StringSlice
      for k := range m {
          ss = append(ss, k)
      }
      ss.Sort()
      for _, k := range ss {
          f(k, m[k])
      }
  }

• Código de exemplo em C#

  Exemplo de assinatura:

  using System.Security.Cryptography;
  using System.Text;
  
  using StringMap = System.Collections.Generic.Dictionary<string, string>;
  
  void sign(string method, string uri,
  string accessKeyId, string accessKeySecret,
  StringMap queryParams,
  StringMap headers,
  byte[] body
  )
  {
    int contentLength = 0;
    string contentMd5 = "", message = "";
    headers["x-log-apiversion"] = "0.6.0";
    headers["x-log-signaturemethod"] = "hmac-sha1";
    if (body != null && body.Length > 0)
    {
      contentLength = body.Length;
      contentMd5 = BitConverter.ToString(MD5.Create().ComputeHash(body)).Replace("-", "");
      Console.WriteLine(contentMd5);
      headers["Content-MD5"] = contentMd5;
    }
    string date = DateTime.Now.ToUniversalTime().ToString("R");
    headers["Date"] = date;
    headers["Content-Length"] = contentLength.ToString();
  
    message += method + "\n"
    + contentMd5 + "\n"
    + headers.GetValueOrDefault("Content-Type", "") + "\n"
    + date + "\n";
  
    var sortedHeader = from entry in headers orderby entry.Key ascending select entry;
    // header
    foreach (var entry in sortedHeader)
    {
      if (entry.Key.StartsWith("x-log-") || entry.Key.StartsWith("x-acs-"))
      {
        message += entry.Key + ":" + entry.Value + "\n";
      }
    }
    // url & params
    message += uri;
    if (queryParams.Count() > 0)
    {
      message += "?";
    }
    var sortedParam = from entry in queryParams orderby entry.Key ascending select entry;
    string sep = "";
    foreach (var entry in sortedParam)
    {
      message += sep + entry.Key + "=" + entry.Value;
      sep = "&";
    }
    var hmac = new HMACSHA1(Encoding.ASCII.GetBytes(accessKeySecret));
    var signature = Convert.ToBase64String(hmac.ComputeHash(Encoding.UTF8.GetBytes(message)));
    var auth = "LOG " + accessKeyId + ":" + signature;
    headers["Authorization"] = auth;
  }

• Código de exemplo em C++

  Exemplo de assinatura. Implemente as funções auxiliares conforme suas necessidades. O arquivo de cabeçalho adapter.h pertence ao SDK do Simple Log Service para C++. Recomendamos assinar com o SDK. Para mais informações, consulte Introdução ao SDK do Simple Log Service para C++.

  • CodecTool::CalcMD5(string): calcula um valor de hash MD5 e converte o valor em uma string hexadecimal com letras maiúsculas.

  • CodecTool::StartWith(string, string): verifica se uma string começa com outra string.

  • CodecTool::Base64Encode(string): codifica uma string em Base64.

  • CodecTool::CalcHMACSHA1(string, string): usa o algoritmo HMAC-SHA1 para calcular um valor de hash.

  • CodecTool::GetDateString(): obtém a string formatada da hora atual. Formato: %a, %d %b %Y %H:%M:%S GMT. Exemplo: Mon,3 Jan 2010 08:33:47 GMT.

  #include <map>
  #include <string>
  #include <unordered_map>
  #include <unordered_set>
  #include <vector>
  
  #include "adapter.h"
  
  using namespace std;
  using aliyun_log_sdk_v6::CodecTool;
  
  void Sign(const string& httpMethod, const string& uri,
            map<string, string>& httpHeaders,
            const map<string, string>& urlParams, const string& body,
            const string& accessKeyId, const string& accessKeySecret)
  {
      string message;
      string contentMd5, signature, contentType;
      httpHeaders["x-log-apiversion"] = "0.6.0";
      httpHeaders["x-log-signaturemethod"] = "hmac-sha1";
      // 1. Content-Md5
      if (!body.empty())
      {
          contentMd5 = CodecTool::CalcMD5(body);
          httpHeaders["Content-Md5"] = contentMd5;
      }
      // 2. Date
      string dateTime = CodecTool::GetDateString();
      httpHeaders["Date"] = dateTime;
      // 3. Content-Length
      string contentLength = std::to_string(body.size());
      httpHeaders["Content-Length"] = contentLength;
      // 4. Content-Type
      if (httpHeaders.find("Content-Type") != httpHeaders.end())
      {
          contentType = httpHeaders["Content-Type"];
      }
      message.append(httpMethod).append("\n");
      message.append(contentMd5).append("\n");
      message.append(contentType).append("\n");
      message.append(dateTime).append("\n");
  
      // 5. header
      map<string, string> filteredHeaders;
      for (auto it : httpHeaders)
      {
          string key = it.first, value = it.second;
          if (CodecTool::StartWith(key, "x-log-") ||
                   CodecTool::StartWith(key, "x-acs-"))
          {
              filteredHeaders[key] = value;
          }
      }
      for (auto it : filteredHeaders)
      {
          message.append(it.first).append(":").append(it.second);
          message.append("\n");
      }
  
      // 6. uri and url params
      message.append(uri);
      if (urlParams.size() > 0) message.append("?");
      for (auto it = urlParams.begin(); it != urlParams.end(); ++it)
      {
          if (it != urlParams.begin())
          {
              message.append("&");
          }
          message.append(it->first).append("=").append(it->second);
      }
  
      // 7.Signature
      signature = CodecTool::Base64Enconde(
          CodecTool::CalcHMACSHA1(message, accessKeySecret));
  
      // 8. authorization
      httpHeaders["authorization"] =
          "LOG " + accessKeyId + ':' + signature;
  }

• Código de exemplo em TypeScript

  Este exemplo usa crypto-js. Instale a dependência:

  npm install crypto-js --save

  Exemplo de assinatura:

  import CryptoJS from 'crypto-js'
  
  export function sign(
    method: string,
    uri: string,
    access_key_id: string,
    access_key_secret: string,
    params: Map<string, string>,
    headers: Map<string, string>,
    body: string | undefined
  ) {
    let content_length = 0
    let content_md5 = '',
      message = ''
     headers.set("x-log-apiversion", "0.6.0")
     headers.set("x-log-signaturemethod", "hmac-sha1")
    if (body !== undefined && body.length > 0) {
      content_length = body.length
      content_md5 = CryptoJS.MD5(body).toString(CryptoJS.enc.Hex).toUpperCase()
      headers.set('Content-MD5', content_md5)
    }
    const date = new Date().toUTCString()
    headers.set('Date', date)
    headers.set('Content-Length', content_length.toString())
    message +=
      method +
      '\n' +
      content_md5 +
      '\n' +
      (headers.get('Content-Type') ?? '') +
      '\n' +
      date +
      '\n'
    // headers
    const sort_by_key = (a: [string, string], b: [string, string]) =>
      a[0].localeCompare(b[0])
    const filter_by_prefix = (e: [string, string]) =>
      e[0].startsWith('x-log-') || e[0].startsWith('x-acs-')
    const header_str = [...headers.entries()]
      .filter(filter_by_prefix)
      .sort(sort_by_key)
      .map((e) => e[0] + ':' + e[1] + '\n')
      .join('')
    message += header_str
    // uri & query params
    message += uri
    if (params.size > 0) {
      message += '?'
    }
    message += [...params.entries()]
      .sort(sort_by_key)
      .map((e) => e[0] + '=' + e[1])
      .join('&')
    // signature & authorization
    const signature = CryptoJS.HmacSHA1(message, access_key_secret).toString(
      CryptoJS.enc.Base64
    )
    const auth = 'LOG ' + access_key_id + ':' + signature
    headers.set('Authorization', auth)
  }
  
  // example call
  sign(
    'POST',
    '/logstores/test-logstore',
    'testAccessId',
    'testAccessKey',
    new Map<string, string>([
      ['test', 'test'],
      ['hello', 'world'],
    ]),
    new Map<string, string>([
      ['x-log-signaturemethod', 'hmac-sha1'],
      ['x-log-bodyrawsize', '0'],
      ['x-log-apiversion', '0.6.0'],
      ['Content-Type', 'application/json'],
    ]),
    'hello, world'
  )
                              

• Código de exemplo em Rust

  Dependências necessárias:

  [dependencies]
  chrono = "0.4.19"
  md5 = "0.7.0"
  base64 = "0.13.0"
  hmac-sha1 = "0.1.3"

  Exemplo de assinatura:

  extern crate base64;
  extern crate hmacsha1;
  extern crate md5;
  
  use chrono::Utc;
  use std::collections::*;
  
  pub fn sign(
      method: &str,
      uri: &str,
      access_key_id: &str,
      access_key_secret: &str,
      params: &HashMap<String, String>,
      headers: &mut HashMap<String, String>,
      body: Option<Vec<u8>>,
  ) -> String {
      let mut content_length = 0;
      let mut content_md5 = String::from("");
      headers.insert("x-log-apiversion".to_owned(), "0.6.0".to_owned());
      headers.insert("x-log-signaturemethod".to_owned(), "hmac-sha1".to_owned());
      if let Some(content) = body {
          if content.len() > 0 {
              content_length = content.len();
              content_md5 = format!("{:X}", md5::compute(content));
              headers.insert("Content-MD5".to_owned(), content_md5.clone());
          }
      }
      headers.insert("Content-Length".to_owned(), content_length.to_string());
      // date
      let date = Utc::now().format("%a, %d %b %Y %H:%M:%S GMT").to_string();
      headers.insert("Date".to_owned(), date.clone());
      let mut message = "".to_owned();
      let content_type = headers
          .get(&"Content-Type".to_owned())
          .cloned()
          .unwrap_or(String::from(""));
  
      message += format!("{}\n{}\n{}\n{}\n", method, content_md5, content_type, date).as_str();
      // header
      let mut sorted_header: Vec<_> = headers.iter().collect();
      sorted_header.sort_by_key(|x| x.0);
      for (k, v) in sorted_header {
          if k.starts_with("x-log-") || k.starts_with("x-acs-") {
              message += format!("{}:{}\n", k, v).as_str();
          }
      }
  
      // url & params
      message += uri;
      if params.len() > 0 {
          message += "?";
      }
      let mut sorted_params: Vec<_> = params.iter().collect();
      sorted_params.sort_by_key(|x| x.0);
      let mut sep = "";
      for (k, v) in sorted_params {
          message += format!("{}{}={}", sep, k, v).as_str();
          sep = "&";
      }
      let signature = base64::encode(hmacsha1::hmac_sha1(
          access_key_secret.as_bytes(),
          message.as_bytes(),
      ));
      let auth = format!("LOG {}:{}", access_key_id, signature);
      headers.insert("Authorization".to_owned(), auth.to_owned());
      auth
  }