阿里OSS前端直傳

第一次寫博客，如有錯誤請多多指教。

先上代碼吧：

ossUpload = function (file, fun, funParameter) {
    //第一此請求后台服務器獲取認證請求
    $.ajax({
        url: "/UEditor/GetSecurityToken",
        type: "post",
        success: function (data) {
            var access = JSON.parse(data);
            console.log(access);
            let host = access.Host;
            var myDate = new Date().format("yyyyMMddhhmmss");
            var policyBase64 = Base64.encode(JSON.stringify(myDate))
            var name = Base64.encode(JSON.stringify(myDate))
            var name = Crypto.HMAC(Crypto.SHA1, policyBase64, name);
            var g_object_name = access.Object_name + "/" + name+"."+file.type.split('/')[1]
            var request = new FormData();
            request.append('id', "file_0");
            request.append("OSSAccessKeyId", access.AccessKeyId); //Bucket 擁有者的Access Key Id。
            request.append("policy", access.Policy); //policy規定了請求的表單域的合法性
            request.append("Signature", access.Signature); //根據Access Key Secret和policy計算的簽名信息，OSS驗證該簽名信息從而驗證該Post請求的合法性
            request.append('x-oss-security-token', access.SecurityToken);
            //---以上都是阿里的認證策略 
            request.append("key", g_object_name); //文件名字，可設置路徑
            request.append("success_action_status", '200'); // 讓服務端返回200,不然，默認會返回204
            request.append('file', file); //需要上傳的文件 file  
            console.log(request);
            //正式上傳請求
            $.ajax({
                url: host, //上傳阿里地址
                data: request,
                processData: false, //默認true，設置為 false，不需要進行序列化處理
                cache: false, //設置為false將不會從瀏覽器緩存中加載請求信息
                async: false, //發送同步請求
                contentType: false, //避免服務器不能正常解析文件---------具體的可以查下這些參數的含義
                dataType: 'xml', //不涉及跨域  寫json即可
                type: 'post',
                success: fun(funParameter, host, g_object_name),
                error: function (returndata) {
                    console.log(arguments)
                    alert("上傳圖片出錯", false);
                }
            });
        }
    })
}
//格式化時間
Date.prototype.format = function (fmt) {
    var o = {
        "M+": this.getMonth() + 1,                 //月份 
        "d+": this.getDate(),                    //日 
        "h+": this.getHours(),                   //小時 
        "m+": this.getMinutes(),                 //分 
        "s+": this.getSeconds(),                 //秒 
        "q+": Math.floor((this.getMonth() + 3) / 3), //季度 
        "S": this.getMilliseconds()             //毫秒 
    };
    if (/(y+)/.test(fmt)) {
        fmt = fmt.replace(RegExp.$1, (this.getFullYear() + "").substr(4 - RegExp.$1.length));
    }
    for (var k in o) {
        if (new RegExp("(" + k + ")").test(fmt)) {
            fmt = fmt.replace(RegExp.$1, (RegExp.$1.length == 1) ? (o[k]) : (("00" + o[k]).substr(("" + o[k]).length)));
        }
    }
    return fmt;
}

上傳用的是sts上傳還需要在阿里雲進行一系列的授權管理，最后得到AccessKeyId，AccessKeySecret用來請求已經授權的角色（RoleArn）當然還需要REGIONID(地區對應ID 例：cn-beijing)，ENDPOINT(請求接口 例：sts.cn-beijing.aliyuncs.com)

這一步sts請求是在后台進行的我后台用的是.net core,還需要引用aliyun-net-sdk-sts上一份后端的代碼

 public class AliyunAcsStsConfig
    {
        /// <summary>
        /// 地區
        /// </summary>
        public string REGIONID { get; set; }
        /// <summary>
        /// 訪問阿里雲的地址
        /// </summary>
        public string ENDPOINT { get; set; }
        /// <summary>
        /// 配置的ram
        /// </summary>
        public string RoleArn { get; set; }
        /// <summary>
        /// 會話的名稱可自定義
        /// </summary>
        public string RoleSessionName { get; set; }
        /// <summary>
        /// 該權限用戶的密碼
        /// </summary>
        public string AccessKeySecret { get; set; }
        /// <summary>
        /// 該權限的用戶ID
        /// </summary>
        public string AccessKeyId { get; set; }
        /// <summary>
        /// 上傳路徑
        /// https://Bucket名稱.oss-cn-beijing.aliyuncs.com
        /// </summary>
        public string upload { get; set; }
        /// <summary>
        /// 文件存儲路徑
        /// ***/****/
        /// </summary>
        public string path { get; set; }
    }     

  

 private readonly UEditorService _ueditorService; private readonly AliyunAcsStsConfig stsConfig; public UEditorController(UEditorService ueditorService, IOptions<AliyunAcsStsConfig> stsConfig) { this._ueditorService = ueditorService; this.stsConfig = stsConfig.Value; }

 

 string REGIONID = stsConfig.REGIONID;
            string ENDPOINT = stsConfig.ENDPOINT;
            // 構建一個 Aliyun Client, 用於發起請求
            // 構建Aliyun Client時需要設置AccessKeyId和AccessKeySevcret
            DefaultProfile.AddEndpoint(REGIONID, REGIONID, "Sts", ENDPOINT);
            IClientProfile profile = DefaultProfile.GetProfile(REGIONID, stsConfig.AccessKeyId, stsConfig.AccessKeySecret);
            DefaultAcsClient client = new DefaultAcsClient(profile);
            // 構造AssumeRole請求
            AssumeRoleRequest request = new AssumeRoleRequest();
            request.AcceptFormat = FormatType.JSON;
            // 指定角色Arn
            request.RoleArn = stsConfig.RoleArn;
            request.RoleSessionName = stsConfig.RoleSessionName;
            // 可以設置Token有效期，可選參數，默認3600秒；
            // request.DurationSeconds = 3600;
            // 可以設置Token的附加Policy，可以在獲取Token時，通過額外設置一個Policy進一步減小Token的權限；
            // request.Policy="<policy-content>"
            String dt = DateTime.Now.AddMinutes(5).ToString("yyyy-MM-ddTHH:mm:ss.000Z");
            object[,] ob = { { "content-length-range", 0, 1048576000 } };
            AssumeRoleResponse response = client.GetAcsResponse(request);
            ImgUploadAccess access = new ImgUploadAccess();
            access.AccessKeyId = response.Credentials.AccessKeyId;
            access.AccessKeySecret = response.Credentials.AccessKeySecret;
            access.SecurityToken = response.Credentials.SecurityToken;
            string str = JsonConvert.SerializeObject(new Policy
            {
                expiration=dt,
                conditions=ob
            });
            byte[] b = Encoding.Default.GetBytes(str);
            string base64 = Convert.ToBase64String(b);
            HMACSHA1 hmacsha1 = new HMACSHA1();
            hmacsha1.Key= Encoding.UTF8.GetBytes(access.AccessKeySecret);
            byte[] hashBytes = hmacsha1.ComputeHash(Encoding.UTF8.GetBytes(base64));
            access.Policy = base64;
            access.Signature =Convert.ToBase64String(hashBytes);
            access.Object_name = stsConfig.path+DateTime.Now.ToString("yyyyMM");
            access.Host = stsConfig.imgupload;
            return JsonConvert.SerializeObject(access);

 

  public class ImgUploadAccess
    {
        public string AccessKeyId { get; set; }
        public string AccessKeySecret { get; set; }
        public string SecurityToken { get; set; }
        public string Host { get; set; }
        public string Signature { get; set; }
        public string Policy { get; set; }
        public string Object_name { get; set; }
    }
    public class Policy
    {
        public string expiration { get; set; }
        public object[,] conditions { get; set; }
    }

 這樣上傳功能基本上搞定了