AWS API签名用户通常在HTTP请求的Header中进行验证。GET请求不具有body,因此签名仅基于URL和Header信息。相比之下,对于POST请求,签名需要基于Header和请求体(body)信息。因此,当使用AWS API签名进行身份验证时,使用GET方法和POST方法需要采用不同的签名方法。
以下是示例代码:
// GET请求的签名示例代码 const AWS = require('aws-sdk'); const crypto = require('crypto'); const querystring = require('querystring');
const accessKey = ''; const secretKey = ''; const region = ''; const service = ''; const endpoint = '';
const credentials = new AWS.Credentials(accessKey, secretKey);
const queryParams = { 'Action': 'ListQueues', 'Version': '2012-11-05', }; const queryString = querystring.stringify(queryParams); const uri = endpoint + '?' + queryString;
const contentSha256 = crypto.createHash('sha256').update('').digest('hex');
const date = new Date(); const headers = { 'host': host, 'x-amz-date': date.toISOString().replace(/[:-]|.\d{3}/g, ''), }; const canonicalHeaders = Object.keys(headers).map(function(key) { return key.toLowerCase() + ':' + headers[key]; }).sort().join('\n') + '\n';
const signedHeaders = Object.keys(headers).map(function(key) { return key.toLowerCase(); }).sort().join(';');
const canonicalRequest = [ 'GET', uri, queryString, canonicalHeaders, signedHeaders, contentSha256, ].join('\n');
const algorithm = 'AWS4-HMAC-SHA256'; const scope = [ date.toISOString().replace(/[:-]|.\d{3}/g, '').substr(0, 8), region, service, 'aws4_request', ].join('/'); const stringToSign = [ algorithm, date.toISOString().replace(/[:-]|.\d{3}/g, ''), scope, crypto.createHash('sha256').update(canonicalRequest).digest('hex'), ].join('\n');
const kDate = crypto.create