func (s *ObjectService) GetPresignedURL(ctx context.Context, httpMethod, key, ak, sk string, expired time.Duration, opt interface{}, signHost ...bool) (*url.URL, error)
type PresignedURLOptions struct {Query *url.ValuesHeader *http.Header}
Parameter | Type | Description |
httpMethod | string | HTTP request method |
key | string | Object key, a unique ID of an object in a bucket. For more information, see Object Overview > Object Key. (Note: The key does not need to be encoded.) |
ak | string | SecretId |
sk | string | SecretKey |
expired | time.Duration | Validity period of the signature |
opt | interface{} | Extension. We recommend you enter parameters of the *PresignedURLOptions type or nil . |
PresignedURLOptions | struct | Request parameters and headers to include in the signature |
Query | struct | Request parameters to include in the signature |
Header | struct | Request headers to include in the signature |
signHost | bool | Whether to include the host header in the signature. The default value is true . You can also choose not to include the host header in the signature, but the request may fail or vulnerabilities may occur. This parameter is optional. |
package mainimport ("context""github.com/tencentyun/cos-go-sdk-v5""net/http""net/url""os""strings""time")func main(){// Bucket name in the format of `BucketName-APPID` (`APPID` is required), which can be viewed in the COS console at https://console.tencentcloud.com/cos5/bucket.// Replace it with your region, which can be viewed in the COS console at https://console.tencentcloud.com/. For more information about regions, visit https://www.tencentcloud.com/document/product/436/6224.u, _ := url.Parse("https://examplebucket-1250000000.cos.ap-guangzhou.myqcloud.com")b := &cos.BaseURL{BucketURL: u}client := cos.NewClient(b, &http.Client{Transport: &cos.AuthorizationTransport{// Get the key from environment variables// Environment variable `SECRETID` refers to the user's `SecretId`, which can be viewed in the CAM console at https://console.tencentcloud.com/cam/capi.SecretID: os.Getenv("SECRETID"), // User `SecretId`. We recommend you use a sub-account key and follow the principle of least privilege to reduce risks. For information about how to obtain a sub-account key, visit https://www.tencentcloud.com/document/product/598/37140?from_cn_redirect=1.// Environment variable `SECRETKEY` refers to the user's `SecretKey`, which can be viewed in the CAM console at https://console.tencentcloud.com/cam/capi.SecretKey: os.Getenv("SECRETKEY"), // User `SecretKey`. We recommend you use a sub-account key and follow the principle of least privilege to reduce risks. For information about how to obtain a sub-account key, visit https://www.tencentcloud.com/document/product/598/37140?from_cn_redirect=1.},})ak := "SECRETID"sk := "SECRETKEY"name := "exampleobject"ctx := context.Background()f := strings.NewReader("test")// 1. Upload the object using the standard method._, err := client.Object.Put(ctx, name, f, nil)if err != nil{panic(err)}// Getting Pre-Signed URLspresignedURL, err := client.Object.GetPresignedURL(ctx, http.MethodPut, name, ak, sk, time.Hour, nil)if err != nil{panic(err)}// 2. Upload the object using a pre-signed URL.data := "test upload with presignedURL"f = strings.NewReader(data)req, err := http.NewRequest(http.MethodPut, presignedURL.String(), f)if err != nil{panic(err)}// You can configure request headers by yourself.req.Header.Set("Content-Type", "text/html")_, err = http.DefaultClient.Do(req)if err != nil{panic(err)}}
package mainimport ("bytes""context""errors""github.com/tencentyun/cos-go-sdk-v5""io/ioutil""net/http""net/url""os""time")func main(){// Bucket name in the format of `BucketName-APPID` (`APPID` is required), which can be viewed in the COS console at https://console.tencentcloud.com/cos5/bucket.// Replace it with your region, which can be viewed in the COS console at https://console.tencentcloud.com/. For more information about regions, visit https://www.tencentcloud.com/document/product/436/6224.u, _ := url.Parse("https://examplebucket-1250000000.cos.ap-guangzhou.myqcloud.com")b := &cos.BaseURL{BucketURL: u}client := cos.NewClient(b, &http.Client{Transport: &cos.AuthorizationTransport{// Get the key from environment variables// Environment variable `SECRETID` refers to the user's `SecretId`, which can be viewed in the CAM console at https://console.tencentcloud.com/cam/capi.SecretID: os.Getenv("SECRETID"), // User `SecretId`. We recommend you use a sub-account key and follow the principle of least privilege to reduce risks. For information about how to obtain a sub-account key, visit https://www.tencentcloud.com/document/product/598/37140?from_cn_redirect=1.// Environment variable `SECRETKEY` refers to the user's `SecretKey`, which can be viewed in the CAM console at https://console.tencentcloud.com/cam/capi.SecretKey: os.Getenv("SECRETKEY"), // User `SecretKey`. We recommend you use a sub-account key and follow the principle of least privilege to reduce risks. For information about how to obtain a sub-account key, visit https://www.tencentcloud.com/document/product/598/37140?from_cn_redirect=1.},})ak := "SECRETID"sk := "SECRETKEY"name := "exampleobject"ctx := context.Background()// 1. Download the object using the standard method.resp, err := client.Object.Get(ctx, name, nil)if err != nil{panic(err)}bs, _ := ioutil.ReadAll(resp.Body)resp.Body.Close()// Getting Pre-Signed URLspresignedURL, err := client.Object.GetPresignedURL(ctx, http.MethodGet, name, ak, sk, time.Hour, nil)if err != nil{panic(err)}// 2. Download the object using a pre-signed URL.resp2, err := http.Get(presignedURL.String())if err != nil{panic(err)}bs2, _ := ioutil.ReadAll(resp2.Body)resp2.Body.Close()if bytes.Compare(bs2, bs) != 0 {panic(errors.New("content is not consistent"))}}
package mainimport ("context""fmt""github.com/tencentyun/cos-go-sdk-v5""net/http""net/url""os""time""strings")// You can use tags to put the request parameters or request headers in the signature.type URLToken struct {SessionToken string `url:"x-cos-security-token,omitempty" header:"-"`}func main(){// Replace it with your temporary key.tak := os.Getenv("SECRETID")// User `SecretId`. We recommend you use a sub-account key and follow the principle of least privilege to reduce risks. For information about how to obtain a sub-account key, visit https://www.tencentcloud.com/document/product/598/37140?from_cn_redirect=1.tsk := os.Getenv("SECRETKEY")// User `SecretKey`. We recommend you use a sub-account key and follow the principle of least privilege to reduce risks. For information about how to obtain a sub-account key, visit https://www.tencentcloud.com/document/product/598/37140?from_cn_redirect=1.token := &URLToken{SessionToken: "<token>",}u, _ := url.Parse("https://examplebucket-1250000000.cos.ap-guangzhou.myqcloud.com")b := &cos.BaseURL{BucketURL: u}c := cos.NewClient(b, &http.Client{})name := "exampleobject"ctx := context.Background()// Method 1. Use “PresignedURLOptions” to configure “x-cos-security-token”.// You can add request parameters and request headers through “PresignedURLOptions”.opt := &cos.PresignedURLOptions{Query: &url.Values{},Header: &http.Header{},}opt.Query.Add("x-cos-security-token", "<token>")// Get the pre-signed URL.presignedURL, err := c.Object.GetPresignedURL(ctx, http.MethodPut, name, tak, tsk, time.Hour, opt)if err != nil{fmt.Printf("Error: %v\\n", err)return}// Upload the object using a pre-signed URL.data := "test upload with presignedURL"f := strings.NewReader(data)req, err := http.NewRequest(http.MethodPut, presignedURL.String(), f)if err != nil{fmt.Printf("Error: %v\\n", err)}_, err = http.DefaultClient.Do(req)if err != nil{fmt.Printf("Error: %v\\n", err)}// Method 2. Use tags to configure “x-cos-security-token”.// Get the pre-signed URL.presignedURL, err = c.Object.GetPresignedURL(ctx, http.MethodPut, name, tak, tsk, time.Hour, token)if err != nil{fmt.Printf("Error: %v\\n", err)return}f = strings.NewReader(data)req, err = http.NewRequest(http.MethodPut, presignedURL.String(), f)if err != nil{fmt.Printf("Error: %v\\n", err)}_, err = http.DefaultClient.Do(req)if err != nil{fmt.Printf("Error: %v\\n", err)}}
package mainimport ("context""fmt""github.com/tencentyun/cos-go-sdk-v5""net/http""net/url""os""time")// You can use tags to put the request parameters or request headers in the signature.type URLToken struct {SessionToken string `url:"x-cos-security-token,omitempty" header:"-"`}func main(){// Replace it with your temporary key.tak := os.Getenv("SECRETID") // User `SecretId`. We recommend you use a sub-account key and follow the principle of least privilege to reduce risks. For information about how to obtain a sub-account key, visit https://www.tencentcloud.com/document/product/598/37140?from_cn_redirect=1.tsk := os.Getenv("SECRETKEY") // User `SecretKey`. We recommend you use a sub-account key and follow the principle of least privilege to reduce risks. For information about how to obtain a sub-account key, visit https://www.tencentcloud.com/document/product/598/37140?from_cn_redirect=1.token := &URLToken{SessionToken: "<token>",}u, _ := url.Parse("https://examplebucket-1250000000.cos.ap-guangzhou.myqcloud.com")b := &cos.BaseURL{BucketURL: u}c := cos.NewClient(b, &http.Client{})name := "exampleobject"ctx := context.Background()// Method 1. Use “PresignedURLOptions” to configure “x-cos-security-token”.// You can add request parameters and request headers through “PresignedURLOptions”.opt := &cos.PresignedURLOptions{Query: &url.Values{},Header: &http.Header{},}opt.Query.Add("x-cos-security-token", "<token>")// Get the pre-signed URL.presignedURL, err := c.Object.GetPresignedURL(ctx, http.MethodGet, name, tak, tsk, time.Hour, opt)if err != nil{fmt.Printf("Error: %v\\n", err)return}// Access the object with the pre-signed URL.resp, err := http.Get(presignedURL.String())if err != nil{fmt.Printf("Error: %v\\n", err)}defer resp.Body.Close()fmt.Println(presignedURL.String())fmt.Printf("resp:%v\\n", resp)// Method 2. Use tags to configure “x-cos-security-token”.// Get the pre-signed URL.presignedURL, err = c.Object.GetPresignedURL(ctx, http.MethodGet, name, tak, tsk, time.Hour, token)if err != nil{fmt.Printf("Error: %v\\n", err)return}// Access the object with the pre-signed URL.resp, err = http.Get(presignedURL.String())if err != nil{fmt.Printf("Error: %v\\n", err)}defer resp.Body.Close()fmt.Println(presignedURL.String())fmt.Printf("resp:%v\\n", resp)}
package mainimport ("context""fmt""github.com/tencentyun/cos-go-sdk-v5""net/http""net/url""os""time")func main(){// Replace it with your keytak := os.Getenv("SECRETID") // User `SecretId`. We recommend you use a sub-account key and follow the principle of least privilege to reduce risks. For information about how to obtain a sub-account key, visit https://www.tencentcloud.com/document/product/598/37140?from_cn_redirect=1.tsk := os.Getenv("SECRETKEY") // User `SecretKey`. We recommend you use a sub-account key and follow the principle of least privilege to reduce risks. For information about how to obtain a sub-account key, visit https://www.tencentcloud.com/document/product/598/37140?from_cn_redirect=1.// Change it to the custom domain.u, _ := url.Parse("https://<custom domain>")b := &cos.BaseURL{BucketURL: u}c := cos.NewClient(b, &http.Client{})name := "exampleobject"ctx := context.Background()// Get the pre-signed URL.presignedURL, err := c.Object.GetPresignedURL(ctx, http.MethodGet, name, tak, tsk, time.Hour, nil)if err != nil{fmt.Printf("Error: %v\\n", err)return}// Access the object with the pre-signed URL.resp, err := http.Get(presignedURL.String())if err != nil{fmt.Printf("Error: %v\\n", err)}defer resp.Body.Close()fmt.Println(presignedURL.String())fmt.Printf("resp:%v\\n", resp)}
package mainimport ("context""fmt""github.com/tencentyun/cos-go-sdk-v5""net/http""net/url""os""time")func main(){// Replace it with your temporary key.tak := os.Getenv("SECRETID") // User `SecretId`. We recommend you use a sub-account key and follow the principle of least privilege to reduce risks. For information about how to obtain a sub-account key, visit https://www.tencentcloud.com/document/product/598/37140?from_cn_redirect=1.tsk := os.Getenv("SECRETKEY") // User `SecretKey`. We recommend you use a sub-account key and follow the principle of least privilege to reduce risks. For information about how to obtain a sub-account key, visit https://www.tencentcloud.com/document/product/598/37140?from_cn_redirect=1.u, _ := url.Parse("https://examplebucket-1250000000.cos.ap-guangzhou.myqcloud.com")b := &cos.BaseURL{BucketURL: u}c := cos.NewClient(b, &http.Client{})name := "exampleobject"ctx := context.Background()// You can add request parameters and request headers through “PresignedURLOptions”.opt := &cos.PresignedURLOptions{// HTTP request parameters, which should be the same as those passed to the actual request. This can prevent users from tampering with the HTTP request parameters.Query: &url.Values{},// HTTP request headers, which should be included in the actual request. This can prevent users from tampering with the HTTP request headers that are signed here.Header: &http.Header{},}// Add request parameters. The returned pre-signed URL will include the parameters added.opt.Query.Add("x-cos-security-token", "<token>")// Add request headers. The returned pre-signed URL only sets the request headers to the signature. Therefore, you still need to set the headers when issuing requests.opt.Header.Add("Content-Type", "text/html")// The SDK includes the `host` header in the signature by default. If the `signHost` parameter is not passed in or `SignHost` is `true`, the `host` header is included in the signature.// If `signHost` is `false`, the `host` header is not included in the signature, which may lead to request failure or security vulnerabilities.var signHost bool = true// Get the pre-signed URL with the signature containing `host`presignedURL, err := c.Object.GetPresignedURL(ctx, http.MethodPut, name, tak, tsk, time.Hour, opt, signHost)if err != nil{fmt.Printf("Error: %v\\n", err)return}// Access the object with the pre-signed URL.req, _ := http.NewRequest(http.MethodPut, presignedURL.String(), strings.NewReader("test"))// Set headers when issuing requests.req.Header.Set("Content-Type", "text/html")resp, err := http.DefaultClient.Do(req)if err != nil{fmt.Printf("Error: %v\\n", err)}defer resp.Body.Close()fmt.Println(presignedURL.String())fmt.Printf("resp:%v\\n", resp)}
Apakah halaman ini membantu?