You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
79 lines
2.2 KiB
79 lines
2.2 KiB
package third
|
|
|
|
import (
|
|
api "OpenIM/pkg/apistruct"
|
|
"OpenIM/pkg/common/config"
|
|
"OpenIM/pkg/common/constant"
|
|
"OpenIM/pkg/common/log"
|
|
"OpenIM/pkg/common/tokenverify"
|
|
"github.com/fatih/structs"
|
|
|
|
//"github.com/fatih/structs"
|
|
"github.com/gin-gonic/gin"
|
|
sts "github.com/tencentyun/qcloud-cos-sts-sdk/go"
|
|
"net/http"
|
|
"time"
|
|
)
|
|
|
|
func TencentCloudStorageCredential(c *gin.Context) {
|
|
req := api.TencentCloudStorageCredentialReq{}
|
|
if err := c.BindJSON(&req); err != nil {
|
|
log.NewError("0", "BindJSON failed ", err.Error())
|
|
c.JSON(http.StatusBadRequest, gin.H{"errCode": 400, "errMsg": err.Error()})
|
|
return
|
|
}
|
|
|
|
var ok bool
|
|
var userID string
|
|
var errInfo string
|
|
ok, userID, errInfo = tokenverify.GetUserIDFromToken(c.Request.Header.Get("token"), req.OperationID)
|
|
if !ok {
|
|
errMsg := req.OperationID + " " + "GetUserIDFromToken failed " + errInfo + " token:" + c.Request.Header.Get("token")
|
|
log.NewError(req.OperationID, errMsg)
|
|
c.JSON(http.StatusBadRequest, gin.H{"errCode": 400, "errMsg": errMsg})
|
|
return
|
|
}
|
|
|
|
log.NewInfo(req.OperationID, "TencentCloudStorageCredential args ", userID)
|
|
|
|
cli := sts.NewClient(
|
|
config.Config.Credential.Tencent.SecretID,
|
|
config.Config.Credential.Tencent.SecretKey,
|
|
nil,
|
|
)
|
|
|
|
opt := &sts.CredentialOptions{
|
|
DurationSeconds: int64(time.Hour.Seconds()),
|
|
Region: config.Config.Credential.Tencent.Region,
|
|
Policy: &sts.CredentialPolicy{
|
|
Statement: []sts.CredentialPolicyStatement{
|
|
{
|
|
Action: []string{
|
|
"name/cos:PostObject",
|
|
"name/cos:PutObject",
|
|
},
|
|
Effect: "allow",
|
|
Resource: []string{
|
|
"qcs::cos:" + config.Config.Credential.Tencent.Region + ":uid/" + config.Config.Credential.Tencent.AppID + ":" + config.Config.Credential.Tencent.Bucket + "/*",
|
|
},
|
|
},
|
|
},
|
|
},
|
|
}
|
|
res, err := cli.GetCredential(opt)
|
|
resp := api.TencentCloudStorageCredentialResp{}
|
|
if err != nil {
|
|
resp.ErrCode = constant.ErrTencentCredential.ErrCode
|
|
resp.ErrMsg = err.Error()
|
|
} else {
|
|
resp.CosData.Bucket = config.Config.Credential.Tencent.Bucket
|
|
resp.CosData.Region = config.Config.Credential.Tencent.Region
|
|
resp.CosData.CredentialResult = res
|
|
}
|
|
|
|
resp.Data = structs.Map(&resp.CosData)
|
|
log.NewInfo(req.OperationID, "TencentCloudStorageCredential return ", resp)
|
|
|
|
c.JSON(http.StatusOK, resp)
|
|
}
|