阿里云oss sts鉴权

最新推荐文章于 2025-04-28 21:10:31 发布

置顶顺其自然～

最新推荐文章于 2025-04-28 21:10:31 发布

阅读量1.7k

点赞数

分类专栏：阿里云oss sts鉴权文章标签：阿里云oss sts鉴权 php阿里云oss sts鉴权 thinkphp阿里云sts tp阿里云oss sts鉴权

本文链接：https://blog.youkuaiyun.com/weixin_44452446/article/details/107340369

版权

阿里云oss sts鉴权专栏收录该内容

1 篇文章

订阅专栏

本文详细介绍了如何使用阿里云的对象存储服务(OSS)和安全令牌服务(STS)，通过PHP实现临时授权，包括配置环境变量、构建AssumeRole请求及处理响应。适合希望深入了解并实践阿里云OSS和STS的开发者。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

参考了一下这位大佬的，可以去看看控制台配置流程：https://blog.youkuaiyun.com/yangkangv/article/details/88663167?utm_medium=distribute.pc_relevant.none-task-blog-BlogCommendFromMachineLearnPai2-3.nonecase&depth_1-utm_source=distribute.pc_relevant.none-task-blog-BlogCommendFromMachineLearnPai2-3.nonecase
记得用composer导下包，composer require aliyuncs/oss-sdk-php

namespace app\controller;
use xhyadminframework\base\XhyController;
use AlibabaCloud\Sts\Sts;
use AlibabaCloud\Client\AlibabaCloud;
use AlibabaCloud\Sts\V20150401\AssumeRole;
use AlibabaCloud\Client\Exception\ServerException;
use AlibabaCloud\Client\Exception\ClientException;
use app\Request;
use think\facade\Env;
/**
 * Class StsTest
 *
 * @package   AlibabaCloud\Tests\Feature
 */
class AliyunOss extends XhyController
{
    /**
     * @expectedException \AlibabaCloud\Client\Exception\ServerException
     * @expectedExceptionMessageRegExp /EntityNotExist.Role: The specified Role not exists/
     * @throws ClientException
     * @throws ServerException
     */

    //构建AssumeRole请求
    public function AliyunSts(Request $request)
    {

          $config = [
              "AccessKeyID"=>ENV::get('AliYunOss.ACCESSKEYID'),
              "AccessKeySecret"=>ENV::get('AliYunOss.SECRET'),
              "RoleArn"=>ENV::get('AliYunOss.ROLEARN'),
              "BucketName"=>ENV::get('AliYunOss.BUCKETNAME'),
              "Endpoint"=>ENV::get('AliYunOss.ENTPOINT'),
              "TokenExpireTime"=>"900"
          ];
          //只有put的权限
//          $policy = '{
//            "Statement": [
//              {
//                "Action": [
//                   "oss:GetObject",
//                   "oss:PutObject",
//                   "oss:DeleteObject",
//                   "oss:ListParts",
//                   "oss:AbortMultipartUpload",
//                   "oss:ListObjects"
//                ],
//                "Effect": "Allow",
//                "Resource": ["acs:oss:*:*:'.$config['BucketName'].'/'.$config['PolicyFile'].'", "acs:oss:*:*:'.$config['BucketName'].'"]
//              }
//            ],
//            "Version": "1"
//          }';
//这个是所有权限
           $policy ='{
              "Statement": [
                {
                  "Action": [
                    "oss:*"
                  ],
                  "Effect": "Allow",
                  "Resource": ["acs:oss:*:*:*"]
                }
              ],
              "Version": "1"
            }';

          AlibabaCloud::accessKeyClient($config['AccessKeyID'], $config['AccessKeySecret'])->regionId('cn-hangzhou')->name('default');
          $rst = Sts::v20150401()
              ->assumeRole()
              //指定角色ARN
              ->withRoleArn($config['RoleArn'])
              //RoleSessionName即临时身份的会话名称，用于区分不同的临时身份
              ->withRoleSessionName('AliyunSTSAssume1')
              //设置权限策略以进一步限制角色的权限
              ->withPolicy($policy)
              ->timeout(30)
              ->connectTimeout(30)
              //口令有效期是少900，最大没限制
              ->withDurationSeconds(900)
              ->request();
  //        var_dump($rst);
          $code = $rst->getStatusCode();
          // var_dump($code);
          $json = $rst->jsonSerialize();
          // var_dump($json);
          //这里获取body是得不到有用信息的要用上面的json
          $body = $rst->getBody();
          if ($code == 200) {

              // $json['Credentials']['imageName']=$config['PolicyFile'];

              return $this->success($json['Credentials'],'success');
          }else{

              return $this->fail('获取失败');

          }


    }
}