477 lines
11 KiB
Go
477 lines
11 KiB
Go
package s3
|
||
|
||
import (
|
||
"context"
|
||
"crypto/hmac"
|
||
"crypto/sha256"
|
||
"encoding/base64"
|
||
"encoding/hex"
|
||
"encoding/json"
|
||
"errors"
|
||
"io"
|
||
"net/http"
|
||
"net/url"
|
||
"path"
|
||
"path/filepath"
|
||
"strings"
|
||
"sync"
|
||
"time"
|
||
|
||
model "github.com/HFO4/cloudreve/models"
|
||
"github.com/HFO4/cloudreve/pkg/filesystem/fsctx"
|
||
"github.com/HFO4/cloudreve/pkg/filesystem/response"
|
||
"github.com/HFO4/cloudreve/pkg/request"
|
||
"github.com/HFO4/cloudreve/pkg/serializer"
|
||
"github.com/aws/aws-sdk-go/aws"
|
||
"github.com/aws/aws-sdk-go/aws/credentials"
|
||
"github.com/aws/aws-sdk-go/aws/session"
|
||
"github.com/aws/aws-sdk-go/service/s3"
|
||
"github.com/aws/aws-sdk-go/service/s3/s3manager"
|
||
)
|
||
|
||
// Driver 适配器模板
|
||
type Driver struct {
|
||
Policy *model.Policy
|
||
sess *session.Session
|
||
svc *s3.S3
|
||
}
|
||
|
||
// UploadPolicy S3上传策略
|
||
type UploadPolicy struct {
|
||
Expiration string `json:"expiration"`
|
||
Conditions []interface{} `json:"conditions"`
|
||
}
|
||
|
||
//MetaData 文件信息
|
||
type MetaData struct {
|
||
Size uint64
|
||
Etag string
|
||
}
|
||
|
||
// InitS3Client 初始化S3会话
|
||
func (handler *Driver) InitS3Client() error {
|
||
if handler.Policy == nil {
|
||
return errors.New("存储策略为空")
|
||
}
|
||
|
||
if handler.svc == nil {
|
||
// 初始化会话
|
||
sess, err := session.NewSession(&aws.Config{
|
||
Credentials: credentials.NewStaticCredentials(handler.Policy.AccessKey, handler.Policy.SecretKey, ""),
|
||
Endpoint: &handler.Policy.Server,
|
||
Region: &handler.Policy.OptionsSerialized.Region,
|
||
S3ForcePathStyle: aws.Bool(false),
|
||
})
|
||
|
||
if err != nil {
|
||
return err
|
||
}
|
||
handler.sess = sess
|
||
handler.svc = s3.New(sess)
|
||
}
|
||
return nil
|
||
}
|
||
|
||
// List 列出给定路径下的文件
|
||
func (handler Driver) List(ctx context.Context, base string, recursive bool) ([]response.Object, error) {
|
||
|
||
// 初始化客户端
|
||
if err := handler.InitS3Client(); err != nil {
|
||
return nil, err
|
||
}
|
||
|
||
// 初始化列目录参数
|
||
base = strings.TrimPrefix(base, "/")
|
||
if base != "" {
|
||
base += "/"
|
||
}
|
||
|
||
opt := &s3.ListObjectsInput{
|
||
Bucket: &handler.Policy.BucketName,
|
||
Prefix: &base,
|
||
MaxKeys: aws.Int64(1000),
|
||
}
|
||
|
||
// 是否为递归列出
|
||
if !recursive {
|
||
opt.Delimiter = aws.String("/")
|
||
}
|
||
|
||
var (
|
||
objects []*s3.Object
|
||
commons []*s3.CommonPrefix
|
||
)
|
||
|
||
for {
|
||
res, err := handler.svc.ListObjectsWithContext(ctx, opt)
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
objects = append(objects, res.Contents...)
|
||
commons = append(commons, res.CommonPrefixes...)
|
||
|
||
// 如果本次未列取完，则继续使用marker获取结果
|
||
if *res.IsTruncated {
|
||
opt.Marker = res.NextMarker
|
||
} else {
|
||
break
|
||
}
|
||
}
|
||
|
||
// 处理列取结果
|
||
res := make([]response.Object, 0, len(objects)+len(commons))
|
||
|
||
// 处理目录
|
||
for _, object := range commons {
|
||
rel, err := filepath.Rel(*opt.Prefix, *object.Prefix)
|
||
if err != nil {
|
||
continue
|
||
}
|
||
res = append(res, response.Object{
|
||
Name: path.Base(*object.Prefix),
|
||
RelativePath: filepath.ToSlash(rel),
|
||
Size: 0,
|
||
IsDir: true,
|
||
LastModify: time.Now(),
|
||
})
|
||
}
|
||
// 处理文件
|
||
for _, object := range objects {
|
||
rel, err := filepath.Rel(*opt.Prefix, *object.Key)
|
||
if err != nil {
|
||
continue
|
||
}
|
||
res = append(res, response.Object{
|
||
Name: path.Base(*object.Key),
|
||
Source: *object.Key,
|
||
RelativePath: filepath.ToSlash(rel),
|
||
Size: uint64(*object.Size),
|
||
IsDir: false,
|
||
LastModify: time.Now(),
|
||
})
|
||
}
|
||
|
||
return res, nil
|
||
|
||
}
|
||
|
||
// Get 获取文件
|
||
func (handler Driver) Get(ctx context.Context, path string) (response.RSCloser, error) {
|
||
|
||
// 获取文件源地址
|
||
downloadURL, err := handler.Source(
|
||
ctx,
|
||
path,
|
||
url.URL{},
|
||
int64(model.GetIntSetting("preview_timeout", 60)),
|
||
false,
|
||
0,
|
||
)
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
|
||
// 获取文件数据流
|
||
client := request.HTTPClient{}
|
||
resp, err := client.Request(
|
||
"GET",
|
||
downloadURL,
|
||
nil,
|
||
request.WithContext(ctx),
|
||
request.WithHeader(
|
||
http.Header{"Cache-Control": {"no-cache", "no-store", "must-revalidate"}},
|
||
),
|
||
request.WithTimeout(time.Duration(0)),
|
||
).CheckHTTPResponse(200).GetRSCloser()
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
|
||
resp.SetFirstFakeChunk()
|
||
|
||
// 尝试自主获取文件大小
|
||
if file, ok := ctx.Value(fsctx.FileModelCtx).(model.File); ok {
|
||
resp.SetContentLength(int64(file.Size))
|
||
}
|
||
|
||
return resp, nil
|
||
}
|
||
|
||
// Put 将文件流保存到指定目录
|
||
func (handler Driver) Put(ctx context.Context, file io.ReadCloser, dst string, size uint64) error {
|
||
|
||
// 初始化客户端
|
||
if err := handler.InitS3Client(); err != nil {
|
||
return err
|
||
}
|
||
|
||
uploader := s3manager.NewUploader(handler.sess)
|
||
|
||
_, err := uploader.Upload(&s3manager.UploadInput{
|
||
Bucket: &handler.Policy.BucketName,
|
||
Key: &dst,
|
||
Body: file,
|
||
})
|
||
|
||
if err != nil {
|
||
return err
|
||
}
|
||
|
||
return nil
|
||
}
|
||
|
||
// Delete 删除一个或多个文件，
|
||
// 返回未删除的文件，及遇到的最后一个错误
|
||
func (handler Driver) Delete(ctx context.Context, files []string) ([]string, error) {
|
||
|
||
// 初始化客户端
|
||
if err := handler.InitS3Client(); err != nil {
|
||
return files, err
|
||
}
|
||
|
||
var (
|
||
failed = make([]string, 0, len(files))
|
||
lastErr error
|
||
currentIndex = 0
|
||
indexLock sync.Mutex
|
||
failedLock sync.Mutex
|
||
wg sync.WaitGroup
|
||
routineNum = 4
|
||
)
|
||
wg.Add(routineNum)
|
||
|
||
// S3不支持批量操作，这里开四个协程并行操作
|
||
for i := 0; i < routineNum; i++ {
|
||
go func() {
|
||
for {
|
||
// 取得待删除文件
|
||
indexLock.Lock()
|
||
if currentIndex >= len(files) {
|
||
// 所有文件处理完成
|
||
wg.Done()
|
||
indexLock.Unlock()
|
||
return
|
||
}
|
||
path := files[currentIndex]
|
||
currentIndex++
|
||
indexLock.Unlock()
|
||
|
||
// 发送异步删除请求
|
||
_, err := handler.svc.DeleteObject(
|
||
&s3.DeleteObjectInput{
|
||
Bucket: &handler.Policy.BucketName,
|
||
Key: &path,
|
||
})
|
||
|
||
// 处理错误
|
||
if err != nil {
|
||
failedLock.Lock()
|
||
lastErr = err
|
||
failed = append(failed, path)
|
||
failedLock.Unlock()
|
||
}
|
||
}
|
||
}()
|
||
}
|
||
|
||
wg.Wait()
|
||
return failed, lastErr
|
||
|
||
}
|
||
|
||
// Thumb 获取文件缩略图
|
||
func (handler Driver) Thumb(ctx context.Context, path string) (*response.ContentResponse, error) {
|
||
return nil, errors.New("未实现")
|
||
}
|
||
|
||
// Source 获取外链URL
|
||
func (handler Driver) Source(
|
||
ctx context.Context,
|
||
path string,
|
||
baseURL url.URL,
|
||
ttl int64,
|
||
isDownload bool,
|
||
speed int,
|
||
) (string, error) {
|
||
|
||
// 尝试从上下文获取文件名
|
||
fileName := ""
|
||
if file, ok := ctx.Value(fsctx.FileModelCtx).(model.File); ok {
|
||
fileName = file.Name
|
||
}
|
||
|
||
// 初始化客户端
|
||
if err := handler.InitS3Client(); err != nil {
|
||
return "", err
|
||
}
|
||
|
||
req, _ := handler.svc.GetObjectRequest(
|
||
&s3.GetObjectInput{
|
||
Bucket: &handler.Policy.BucketName,
|
||
Key: &path,
|
||
ResponseContentDisposition: aws.String("attachment; filename=\"" + url.PathEscape(fileName) + "\""),
|
||
})
|
||
|
||
if ttl == 0 {
|
||
ttl = 3600
|
||
}
|
||
|
||
signedURL, _ := req.Presign(time.Duration(ttl) * time.Second)
|
||
|
||
// 将最终生成的签名URL域名换成用户自定义的加速域名（如果有）
|
||
finalURL, err := url.Parse(signedURL)
|
||
if err != nil {
|
||
return "", err
|
||
}
|
||
|
||
// 公有空间替换掉Key及不支持的头
|
||
if !handler.Policy.IsPrivate {
|
||
finalURL.RawQuery = ""
|
||
}
|
||
|
||
if handler.Policy.BaseURL != "" {
|
||
cdnURL, err := url.Parse(handler.Policy.BaseURL)
|
||
if err != nil {
|
||
return "", err
|
||
}
|
||
finalURL.Host = cdnURL.Host
|
||
finalURL.Scheme = cdnURL.Scheme
|
||
}
|
||
|
||
return finalURL.String(), nil
|
||
}
|
||
|
||
// Token 获取上传策略和认证Token
|
||
func (handler Driver) Token(ctx context.Context, TTL int64, key string) (serializer.UploadCredential, error) {
|
||
|
||
// 读取上下文中生成的存储路径和文件大小
|
||
savePath, ok := ctx.Value(fsctx.SavePathCtx).(string)
|
||
if !ok {
|
||
return serializer.UploadCredential{}, errors.New("无法获取存储路径")
|
||
}
|
||
|
||
// 生成回调地址
|
||
siteURL := model.GetSiteURL()
|
||
apiBaseURI, _ := url.Parse("/api/v3/callback/s3/" + key)
|
||
apiURL := siteURL.ResolveReference(apiBaseURI)
|
||
|
||
// 上传策略
|
||
putPolicy := UploadPolicy{
|
||
Expiration: time.Now().UTC().Add(time.Duration(TTL) * time.Second).Format(time.RFC3339),
|
||
Conditions: []interface{}{
|
||
map[string]string{"bucket": handler.Policy.BucketName},
|
||
[]string{"starts-with", "$key", savePath},
|
||
[]string{"starts-with", "$success_action_redirect", apiURL.String()},
|
||
[]string{"starts-with", "$name", ""},
|
||
[]string{"starts-with", "$Content-Type", ""},
|
||
map[string]string{"x-amz-algorithm": "AWS4-HMAC-SHA256"},
|
||
},
|
||
}
|
||
|
||
if handler.Policy.MaxSize > 0 {
|
||
putPolicy.Conditions = append(putPolicy.Conditions,
|
||
[]interface{}{"content-length-range", 0, handler.Policy.MaxSize})
|
||
}
|
||
|
||
// 生成上传凭证
|
||
return handler.getUploadCredential(ctx, putPolicy, apiURL)
|
||
}
|
||
|
||
// Meta 获取文件信息
|
||
func (handler Driver) Meta(ctx context.Context, path string) (*MetaData, error) {
|
||
// 初始化客户端
|
||
if err := handler.InitS3Client(); err != nil {
|
||
return nil, err
|
||
}
|
||
|
||
res, err := handler.svc.GetObject(
|
||
&s3.GetObjectInput{
|
||
Bucket: &handler.Policy.BucketName,
|
||
Key: &path,
|
||
})
|
||
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
|
||
return &MetaData{
|
||
Size: uint64(*res.ContentLength),
|
||
Etag: *res.ETag,
|
||
}, nil
|
||
|
||
}
|
||
|
||
func (handler Driver) getUploadCredential(ctx context.Context, policy UploadPolicy, callback *url.URL) (serializer.UploadCredential, error) {
|
||
|
||
// 读取上下文中生成的存储路径和文件大小
|
||
savePath, ok := ctx.Value(fsctx.SavePathCtx).(string)
|
||
if !ok {
|
||
return serializer.UploadCredential{}, errors.New("无法获取存储路径")
|
||
}
|
||
|
||
longDate := time.Now().UTC().Format("20060102T150405Z")
|
||
shortDate := time.Now().UTC().Format("20060102")
|
||
|
||
credential := handler.Policy.AccessKey + "/" + shortDate + "/" + handler.Policy.OptionsSerialized.Region + "/s3/aws4_request"
|
||
policy.Conditions = append(policy.Conditions, map[string]string{"x-amz-credential": credential})
|
||
policy.Conditions = append(policy.Conditions, map[string]string{"x-amz-date": longDate})
|
||
|
||
// 编码上传策略
|
||
policyJSON, err := json.Marshal(policy)
|
||
if err != nil {
|
||
return serializer.UploadCredential{}, err
|
||
}
|
||
policyEncoded := base64.StdEncoding.EncodeToString(policyJSON)
|
||
|
||
//签名
|
||
signature := getHMAC([]byte("AWS4"+handler.Policy.SecretKey), []byte(shortDate))
|
||
signature = getHMAC(signature, []byte(handler.Policy.OptionsSerialized.Region))
|
||
signature = getHMAC(signature, []byte("s3"))
|
||
signature = getHMAC(signature, []byte("aws4_request"))
|
||
signature = getHMAC(signature, []byte(policyEncoded))
|
||
|
||
return serializer.UploadCredential{
|
||
Policy: policyEncoded,
|
||
Callback: callback.String(),
|
||
Token: hex.EncodeToString(signature),
|
||
AccessKey: credential,
|
||
Path: savePath,
|
||
KeyTime: longDate,
|
||
}, nil
|
||
}
|
||
|
||
func getHMAC(key []byte, data []byte) []byte {
|
||
hash := hmac.New(sha256.New, key)
|
||
hash.Write(data)
|
||
return hash.Sum(nil)
|
||
}
|
||
|
||
// CORS 创建跨域策略
|
||
func (handler Driver) CORS() error {
|
||
// 初始化客户端
|
||
if err := handler.InitS3Client(); err != nil {
|
||
return err
|
||
}
|
||
|
||
rule := s3.CORSRule{
|
||
AllowedMethods: aws.StringSlice([]string{
|
||
"GET",
|
||
"POST",
|
||
"PUT",
|
||
"DELETE",
|
||
"HEAD",
|
||
}),
|
||
AllowedOrigins: aws.StringSlice([]string{"*"}),
|
||
AllowedHeaders: aws.StringSlice([]string{"*"}),
|
||
MaxAgeSeconds: aws.Int64(3600),
|
||
}
|
||
|
||
_, err := handler.svc.PutBucketCors(&s3.PutBucketCorsInput{
|
||
Bucket: &handler.Policy.BucketName,
|
||
CORSConfiguration: &s3.CORSConfiguration{
|
||
CORSRules: []*s3.CORSRule{&rule},
|
||
},
|
||
})
|
||
|
||
return err
|
||
}
|