Amazon S3签名不匹配-AWS SDK Java

Question

我有一个播放应用程序需要上传文件到S3。我们正在使用scala和Java AWS SDK进行开发。

我有麻烦尝试上传文件，我不断得到403签名DoesnotMatch当使用预签名的URL。url是通过以下代码使用AWS Java SDK生成的：

def generatePresignedPutRequest(filename: String) = {
    val expiration = new java.util.Date();
    var msec = expiration.getTime() + 1000 * 60 * 60; // Add 1 hour.
    expiration.setTime(msec);

    s3 match {
      case Some(s3) => s3.generatePresignedUrl(bucketname, filename, expiration, HttpMethod.PUT).toString
      case None => {
        Logger.warn("S3 is not availiable. Cannot generate PUT request.")
        "URL not availiable"
      }
    }
  }

 function uploadToS3(file, url)
     {
       var xhr = createCORSRequest('PUT', url);
       if (!xhr) 
       {
         setProgress(0, 'CORS not supported');
       }
       else
       {
         xhr.onload = function() 
         {
           if(xhr.status == 200)
           {
             setProgress(100, 'Upload completed.');
           }
           else
           {
             setProgress(0, 'Upload error: ' + xhr.status);
           }
         };

         xhr.onerror = function() 
         {
           setProgress(0, 'XHR error.');
         };

         xhr.upload.onprogress = function(e) 
         {
           if (e.lengthComputable) 
           {
             var percentLoaded = Math.round((e.loaded / e.total) * 100);
             setProgress(percentLoaded, percentLoaded == 100 ? 'Finalizing.' : 'Uploading.');
           }
         };

         xhr.setRequestHeader('Content-Type', 'image/png');
         xhr.setRequestHeader('x-amz-acl', 'authenticated-read');

         xhr.send(file);
       }
     }

<?xml version="1.0" encoding="UTF-8"?>
<Error><Code>SignatureDoesNotMatch</Code>
<Message>The request signature we calculated does not match the signature you provided. Check your key and signing method.</Message>
<StringToSignBytes>50 55 bla bla bla...</StringToSignBytes>
<RequestId>F7A8F1659DE5909C</RequestId>
<HostId>q+r+2T5K6mWHLKTZw0R9/jm22LyIfZFBTY8GEDznfmJwRxvaVJwPiu/hzUfuJWbW</HostId>
<StringToSign>PUT

    image/png
    1387565829
    x-amz-acl:authenticated-read
    /mybucketname/icons/f5430c16-32da-4315-837f-39a6cf9f47a1</StringToSign>
<AWSAccessKeyId>myaccesskey</AWSAccessKeyId></Error>

Answer 1

我怀疑OP对此仍有问题，但对于遇到此问题的其他人，这里是答案：

当向S3发出签名请求时，AWS会进行检查，以确保签名与浏览器发送的HTTP头信息完全匹配。不幸的是，这是必需的阅读:http://s3.amazonaws.com/doc/s3-developer-guide/restauthentication.html

但是在上面的代码中实际上并非如此，Javascript发送：

xhr.setRequestHeader('Content-Type', 'image/png');
xhr.setRequestHeader('x-amz-acl', 'authenticated-read');

1. 使用桶和文件名创建GeneratePresignedUrlRequest对象。
2. 调用setExpiration、setContentType等，在其上设置所有头信息。
3. 将其作为唯一参数传递到S3.GeneratePreSignedUrl。

下面是要使用的GeneratePresignedUrlRequest的正确函数定义：

http://docs.aws.amazon.com/awsjavasdk/latest/javadoc/com/amazonaws/services/s3/amazons3client.html#GeneratePresignedURL(com.amazonaws.services.s3.model.GeneratePresignedURLRequest)

AWS GitHub repo上的函数代码对我了解如何编写解决方案也很有帮助。希望这有帮助。