使用CannedAccessController.Private生成设计请求时，S3预签名URL文件上载不起作用

Question

我的例子：

AWSCredentials credentials = new BasicAWSCredentials(accessKey, secretKey);
    ClientConfiguration clientConfig = new ClientConfiguration();
    clientConfig.setProtocol(Protocol.HTTP);
    BasicAWSCredentials creds = new BasicAWSCredentials(accessKey, secretKey); 
    AmazonS3 s3client = new AmazonS3Client(credentials, clientConfig);
    Region region = Region.getRegion(Regions.EU_WEST_1);
    s3client.setRegion(region);
    s3client.setEndpoint(serverCeph);
    Bucket bucket = s3client.createBucket(bucketName);
    File file = new File(fileNameTest);
    AccessControlList acl = new AccessControlList();
    acl.grantPermission(GroupGrantee.AllUsers, Permission.FullControl);
       s3client.putObject(new PutObjectRequest(bucketName, keyObject,   file).withAccessControlList(acl));
    s3client.setObjectAcl(bucket.getName(), keyObject,CannedAccessControlList.Private);


           // Generate URL
    System.out.println("Generating pre-signed URL.");
    java.util.Date expiration = new java.util.Date();
    long milliSeconds = expiration.getTime();
    milliSeconds += 1000 * 60 * 60; // Add 1 hour.
    expiration.setTime(milliSeconds);
    GeneratePresignedUrlRequest generatePresignedUrlRequest = new GeneratePresignedUrlRequest(bucketName, keyObject);
    generatePresignedUrlRequest.setMethod(HttpMethod.GET);
    generatePresignedUrlRequest.setExpiration(expiration);
    generatePresignedUrlRequest.setContentType("image/png");
    URL url = s3client.generatePresignedUrl(generatePresignedUrlRequest);
    System.out.println("Pre-Signed URL = " + url.toString());

如果我使用s3client.setObjectAcl（bucket.getName（），keyObject，CannedAccessControlList。PublicRead）；然后我可以得到URL和这个工作正常但如果我使用s3client.setObjectAcl（bucket.getName（）， keyObject， CannedAccessControlList.然后我可以得到URL和URL不工作

我总是收到下面的错误，当我传递到浏览器的URL。

<Error>
<Code>SignatureDoesNotMatch</Code>
<RequestId>tx000000000000000068415-0058d62341-5229e3-default</RequestId>
<HostId>5229e3-default-default</HostId>
</Error>

这是我生成的URL：

http://server:port/bucketname/keyobject?X-Amz算法=AWS4-HMAC-SHA256

有人可以有任何想法或我用来正确运行URL的方式？




Answer 1

以防有人在寻找解决方案。

如果看到SignatureDesNotMatch，首先要检查上传文件时发送的“内容类型”标题。它的值必须与生成URL时使用的值相同。