mirror of
https://github.com/openimsdk/open-im-server.git
synced 2025-11-03 18:52:15 +08:00
73 lines
2.6 KiB
Go
73 lines
2.6 KiB
Go
package apiThird
|
||
|
||
import (
|
||
"Open_IM/pkg/common/config"
|
||
"github.com/aliyun/alibaba-cloud-sdk-go/services/sts"
|
||
"github.com/gin-gonic/gin"
|
||
"net/http"
|
||
)
|
||
|
||
type paramsAliyunCloudStorageCredential struct {
|
||
Token string `form:"token"`
|
||
OperationID string `form:"operationID"`
|
||
}
|
||
|
||
func AliyunCloudStorageCredential(c *gin.Context) {
|
||
params := paramsAliyunCloudStorageCredential{}
|
||
if err := c.BindQuery(¶ms); err != nil {
|
||
c.JSON(http.StatusBadRequest, gin.H{"errCode": 400, "errMsg": "Parameter parsing error，please check the parameters and request service again"})
|
||
return
|
||
}
|
||
|
||
credential := config.Config.Credential.Aliyun
|
||
if credential.AccessKeyId == "" || credential.AccessKeySecret == "" || credential.Bucket == "" || credential.Region == "" || credential.RegionId == "" || credential.RoleArn == "" {
|
||
c.JSON(http.StatusBadRequest, gin.H{"errCode": 400, "errMsg": "Aliyun OSS config error"})
|
||
return
|
||
}
|
||
//构建一个阿里云客户端, 用于发起请求。
|
||
//构建阿里云客户端时，需要设置AccessKey ID和AccessKey Secret。
|
||
client, err := sts.NewClientWithAccessKey(credential.RegionId, credential.AccessKeyId, credential.AccessKeySecret)
|
||
|
||
//构建请求对象。
|
||
request := sts.CreateAssumeRoleRequest()
|
||
request.Scheme = "https"
|
||
|
||
type CredentialPolicyStatement struct {
|
||
Action []string `json:"action,omitempty"`
|
||
Effect string `json:"effect,omitempty"`
|
||
Resource []string `json:"resource,omitempty"`
|
||
Condition map[string]map[string]interface{} `json:"condition,omitempty"`
|
||
}
|
||
|
||
type CredentialPolicy struct {
|
||
Version string `json:"version,omitempty"`
|
||
Statement []CredentialPolicyStatement `json:"statement,omitempty"`
|
||
}
|
||
|
||
//设置参数。关于参数含义和设置方法，请参见《API参考》。
|
||
request.RoleArn = credential.RoleArn
|
||
request.RoleSessionName = params.OperationID
|
||
request.Policy = "{\n \"Version\": \"1\",\n \"Statement\": [\n {\n \"Effect\": \"Allow\",\n \"Action\": [\n \"oss:PutObject\"\n ],\n \"Resource\": \"acs:oss:*:*:*\"\n }\n ]\n}"
|
||
//request.DurationSeconds = "900"
|
||
|
||
//发起请求，并得到响应。
|
||
res, err := client.AssumeRole(request)
|
||
if err != nil {
|
||
c.JSON(http.StatusOK, gin.H{
|
||
"errCode": config.ErrTencentCredential.ErrCode,
|
||
"errMsg": err.Error(),
|
||
"bucket": "",
|
||
"region": "",
|
||
"data": res,
|
||
})
|
||
return
|
||
}
|
||
c.JSON(http.StatusOK, gin.H{
|
||
"errCode": 0,
|
||
"errMsg": "",
|
||
"region": config.Config.Credential.Aliyun.Region,
|
||
"bucket": config.Config.Credential.Aliyun.Bucket,
|
||
"data": res,
|
||
})
|
||
}
|