Class: RightScale::CloudApi::AWS::S3::Link::RequestSigner

Inherits:
RequestSigner
  • Object
show all
Defined in:
lib/cloud/aws/s3/link/routines/request_signer.rb

Overview

S3 Request signer

Constant Summary

Constants inherited from RequestSigner

RequestSigner::ONE_YEAR_OF_SECONDS, RequestSigner::OVERRIDE_RESPONSE_HEADERS, RequestSigner::SUB_RESOURCES

Instance Method Summary collapse

Methods inherited from RequestSigner

#compute_body, #compute_bucket_name_and_object_path, #compute_canonicalized_bucket, #compute_canonicalized_path, #compute_headers!, #compute_host, #compute_path, #get_subresources

Instance Method Details

#compute_params!(params, access_key) ⇒ Hash

Sets response params

Parameters:

  • params (Hash)

Returns:

  • (Hash)


79
80
81
82
83
84
85
86
87
# File 'lib/cloud/aws/s3/link/routines/request_signer.rb', line 79

def compute_params!(params, access_key)
  # Expires
  expires   = params['Expires']
  expires ||= Time.now.utc.to_i + ONE_YEAR_OF_SECONDS
  expires   = expires.to_i unless expires.is_a?(Fixnum)
  params['Expires']        = expires
  params['AWSAccessKeyId'] = access_key
  params
end

#compute_signature(secret_key, verb, bucket, object, params) ⇒ String

Computes signature

Parameters:

  • secret_key (String)
  • verb (String)
  • bucket (String)
  • params (Hash)

Returns:

  • (String)


99
100
101
102
# File 'lib/cloud/aws/s3/link/routines/request_signer.rb', line 99

def compute_signature(secret_key, verb, bucket, object, params)
  can_path = compute_canonicalized_path(bucket, object, params)
  Utils::AWS::sign_s3_signature(secret_key, verb, can_path, { 'expires' => params['Expires'] })
end

#processvoid

This method returns an undefined value.

Authenticates an S3 request

Examples:

# no example


41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
# File 'lib/cloud/aws/s3/link/routines/request_signer.rb', line 41

def process
  fail Error::new("Only GET method is supported") unless @data[:request][:verb] == :get
  fail Error::new("Body must be blank")           unless @data[:request][:body]._blank?
  fail Error::new("Headers must be blank")        unless @data[:request][:headers]._blank?

  uri        = @data[:connection][:uri]
  access_key = @data[:credentials][:aws_access_key_id]
  secret_key = @data[:credentials][:aws_secret_access_key]
  bucket     = @data[:request][:bucket]
  object     = @data[:request][:relative_path]
  params     = @data[:request][:params]
  verb       = @data[:request][:verb]

  bucket, object = compute_bucket_name_and_object_path(bucket, object)
  uri            = compute_host(bucket, uri)

  compute_params!(params, access_key)

  # Set Auth param
  signature = compute_signature(secret_key, verb, bucket, object, params)
  params['Signature'] = signature

  # Compute href
  path                = compute_path(bucket, object, params)
  uri.path, uri.query = path.split('?')
  @data[:result]      = uri.to_s

  # Set completion flag
  @data[:vars][:system][:done] = true
end