通過Shell方式上傳文件到阿里雲OSS

 首先使用阿里雲函數計算進行簽名，避免Aliyun AccessId/AccessKey 暴露在外面，造成安全風險。

使用者上傳文件的邏輯是：
1. 先獲取上傳oss的 policy 及簽名
2. 然后根據拿到簽名直接上傳到aliyun OSS

 

阿里雲簽名代碼：

<?php
use RingCentral\Psr7\Response;

function gmt_iso8601($time) {
    $dtStr = date("c", $time);
    $mydatetime = new DateTime($dtStr);
    $expiration = $mydatetime->format(DateTime::ISO8601);
    $pos = strpos($expiration, '+');
    $expiration = substr($expiration, 0, $pos);
    return $expiration."Z";
}

function oss_fun($auth){
   /*
    這里是鑒權，校驗失敗直接返回401，不做分享
    return json_encode(['status'=>401]);
　　*/
　　//阿里雲官方提供的秘鑰
    $id= 'aliyun accessid';
    $key= 'aliyun accesskey';
    $host = 'http://oss-host.domain.com';
    //$host = 'https://oss-host.oss-cn-hangzhou.aliyuncs.com';
    $rand_str = rand_str();

    $dir = 'public-dir-7day-delete/'.date("Ymd-His",time()).'_'.$rand_str.'/';

    $now = time();
    $expire = 180; //設置該policy超時時間是180s. 即這個policy過了這個有效時間，將不能訪問
    $end = $now + $expire;
    $expiration = gmt_iso8601($end);

    //最大文件大小.當前50MB與web頁面相同
    $condition = array(0=>'content-length-range', 1=>0, 2=>1024*1024*50);
    $conditions[] = $condition;

    //表示用戶上傳的數據,必須是以$dir開始, 不然上傳會失敗,這一步不是必須項,只是為了安全起見,防止用戶通過policy上傳到別人的目錄
    $start = array(0=>'starts-with', 1=>'$key', 2=>$dir);
    $conditions[] = $start;

    $arr = array('expiration'=>$expiration,'conditions'=>$conditions);
    $policy = json_encode($arr);
    $base64_policy = base64_encode($policy);
    $string_to_sign = $base64_policy;
    $signature = base64_encode(hash_hmac('sha1', $string_to_sign, $key, true));

    $response = array();
    $response['accessid'] = $id;
    $response['host'] = $host;
    $response['policy'] = $base64_policy;
    $response['signature'] = $signature;
    $response['expire'] = $end;
    //這個參數是設置用戶上傳指定的前綴
    $response['dir'] = $dir;
    $response['id'] = $rand_str;

    return json_encode(['status'=>200,'data'=>$response]);
}


function rand_str( $length = 32 ){
    $str='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz1234567890';
    $randStr = str_shuffle($str);//打亂字符串
    $rands= substr($randStr,0,$length);//substr(string,start,length);返回字符串的一部分
    return $rands;
}
function handler($request, $context): Response{

    $body       = $request->getBody()->getContents();
    $queries    = $request->getQueryParams();
    $method     = $request->getMethod();
    $headers    = $request->getHeaders();
    $path       = $request->getAttribute('path');
    $requestURI = $request->getAttribute('requestURI');
    $clientIP   = $request->getAttribute('clientIP');

    $auth = isset($headers['Authorization']) ? $headers['Authorization'][0]:null;
    return new Response(
        200,
        array(
            'Content-Type' => 'application/json; charset=utf-8',
        ),
        oss_fun($auth)
    );
}

 

編寫 shell ，用於快速上傳到阿里雲oss平台：

#!/bin/bash

# jq -h >/dev/null 2>&1 ; if [ $? -ne 0 ]; then echo "Need jq";exit; fi
jq -h >/dev/null 2>&1 || { echo "Need jq";exit; }

function upload_file(){

    #oss=$(curl -s http://root:[e-mail]/upload2oss)#鑒權
    oss=$(curl -s http://fc.domain.com/upload2oss) #獲取簽名的json
    #echo $oss | python -m json.tool
    startTime_s=`date +%s.%N`
    dir=`echo $oss | jq .data.dir | sed \s/\"//g`
    host=`echo $oss | jq .data.host | sed \s/\"//g`
    policy=`echo $oss | jq .data.policy | sed \s/\"//g`
    accessid=`echo $oss | jq .data.accessid | sed \s/\"//g`
    signature=`echo $oss | jq .data.signature | sed \s/\"//g`

    curl -XPOST -sk ${host} \
        -F "policy=${policy}" \
        -F "Signature=${signature}" \
        -F "success_action_status=200" \
        -F "OSSAccessKeyId=${accessid}" \
        -F "x-oss-object-acl=public-read" \
        -F "key=${dir}${1}" \
        -F "file=@${2}" 

    endTime_s=`date +%s.%N`
    runTime=`echo $endTime_s $startTime_s | awk '{print $1-$2}'`
    status=`curl -sI "${host}/${dir}${1}" | awk 'NR==1{print $2}'`

    if [ "${status}"x == "200"x ]; then
        echo -e "${2} \t ${host}/${dir}${1} \t ${runTime}s"
    else
        echo "Upload failed:  ${status}"
    fi
}

for i in $*; do   
    if [ ! -f ${i} ]; then
        echo "${i} no file"; continue;
    else
        upload_file ${i##*/} ${i}
    fi
done 

 

 效果如下：

[litry@HK ~]# ./oss.sh oss.sh docker.sh 
oss.sh      http://oss-host.domain.com/public-dir-7day-delete/20201009-150007_lQGImxc7dtrkXqCh/oss.sh      1.91704s
docker.sh      http://oss-host.domain.com/public-dir-7day-delete/20201009-150009_QBg0W5JFbelL26GN/docker.sh      0.498585s
[litry@HK ~]#