771 lines
26 KiB
C#
771 lines
26 KiB
C#
using AlibabaCloud.SDK.Sts20150401;
|
|
using Aliyun.OSS;
|
|
using Amazon;
|
|
using Amazon.Runtime;
|
|
using Amazon.S3;
|
|
using Amazon.S3.Model;
|
|
using Amazon.SecurityToken;
|
|
using Amazon.SecurityToken.Model;
|
|
using IRaCIS.Core.Infrastructure;
|
|
using IRaCIS.Core.Infrastructure.NewtonsoftJson;
|
|
using MassTransit;
|
|
using Microsoft.Extensions.Options;
|
|
using Minio;
|
|
using Minio.DataModel.Args;
|
|
using System.Reactive.Linq;
|
|
using System.Runtime.InteropServices;
|
|
|
|
namespace IRaCIS.Core.SCP;
|
|
|
|
#region 绑定和返回模型
|
|
|
|
[LowerCamelCaseJson]
|
|
public class MinIOOptions : AWSOptions
|
|
{
|
|
public int Port { get; set; }
|
|
|
|
}
|
|
|
|
|
|
public class AWSOptions
|
|
{
|
|
public string EndPoint { get; set; }
|
|
public bool UseSSL { get; set; }
|
|
public string AccessKeyId { get; set; }
|
|
public string RoleArn { get; set; }
|
|
public string SecretAccessKey { get; set; }
|
|
public string BucketName { get; set; }
|
|
public string ViewEndpoint { get; set; }
|
|
public int DurationSeconds { get; set; }
|
|
public string Region { get; set; }
|
|
}
|
|
|
|
public class AliyunOSSOptions
|
|
{
|
|
public string RegionId { get; set; }
|
|
public string AccessKeyId { get; set; }
|
|
public string AccessKeySecret { get; set; }
|
|
|
|
public string InternalEndpoint { get; set; }
|
|
|
|
public string EndPoint { get; set; }
|
|
public string BucketName { get; set; }
|
|
|
|
public string RoleArn { get; set; }
|
|
|
|
public string Region { get; set; }
|
|
|
|
public string ViewEndpoint { get; set; }
|
|
|
|
public int DurationSeconds { get; set; }
|
|
|
|
|
|
|
|
}
|
|
|
|
public class ObjectStoreServiceOptions
|
|
{
|
|
public string ObjectStoreUse { get; set; }
|
|
|
|
public AliyunOSSOptions AliyunOSS { get; set; }
|
|
|
|
|
|
public MinIOOptions MinIO { get; set; }
|
|
|
|
public AWSOptions AWS { get; set; }
|
|
|
|
}
|
|
|
|
public class ObjectStoreDTO
|
|
{
|
|
public string ObjectStoreUse { get; set; }
|
|
|
|
|
|
public AliyunOSSTempToken AliyunOSS { get; set; }
|
|
|
|
public MinIOOptions MinIO { get; set; }
|
|
|
|
public AWSTempToken AWS { get; set; }
|
|
|
|
}
|
|
|
|
[LowerCamelCaseJson]
|
|
public class AliyunOSSTempToken
|
|
{
|
|
public string AccessKeyId { get; set; }
|
|
public string AccessKeySecret { get; set; }
|
|
|
|
public string EndPoint { get; set; }
|
|
public string BucketName { get; set; }
|
|
|
|
public string Region { get; set; }
|
|
|
|
public string ViewEndpoint { get; set; }
|
|
|
|
public string SecurityToken { get; set; }
|
|
public DateTime Expiration { get; set; }
|
|
|
|
|
|
}
|
|
|
|
[LowerCamelCaseJson]
|
|
public class AWSTempToken
|
|
{
|
|
public string Region { get; set; }
|
|
public string SessionToken { get; set; }
|
|
public string EndPoint { get; set; }
|
|
public string AccessKeyId { get; set; }
|
|
public string SecretAccessKey { get; set; }
|
|
public string BucketName { get; set; }
|
|
public string ViewEndpoint { get; set; }
|
|
public DateTime Expiration { get; set; }
|
|
}
|
|
|
|
public enum ObjectStoreUse
|
|
{
|
|
AliyunOSS = 0,
|
|
MinIO = 1,
|
|
AWS = 2,
|
|
}
|
|
|
|
#endregion
|
|
|
|
// aws 参考链接 https://github.com/awsdocs/aws-doc-sdk-examples/tree/main/dotnetv3/S3/S3_Basics
|
|
|
|
public interface IOSSService
|
|
{
|
|
public Task<string> UploadToOSSAsync(Stream fileStream, string oosFolderPath, string fileRealName, bool isFileNameAddGuid = true);
|
|
public Task<string> UploadToOSSAsync(string localFilePath, string oosFolderPath, bool isFileNameAddGuid = true);
|
|
|
|
public Task DownLoadFromOSSAsync(string ossRelativePath, string localFilePath);
|
|
|
|
public ObjectStoreServiceOptions ObjectStoreServiceOptions { get; set; }
|
|
|
|
public Task<string> GetSignedUrl(string ossRelativePath);
|
|
|
|
public Task DeleteFromPrefix(string prefix);
|
|
|
|
public ObjectStoreDTO GetObjectStoreTempToken();
|
|
}
|
|
|
|
|
|
public class OSSService : IOSSService
|
|
{
|
|
public ObjectStoreServiceOptions ObjectStoreServiceOptions { get; set; }
|
|
|
|
private AliyunOSSTempToken AliyunOSSTempToken { get; set; }
|
|
|
|
private AWSTempToken AWSTempToken { get; set; }
|
|
|
|
|
|
public OSSService(IOptionsMonitor<ObjectStoreServiceOptions> options)
|
|
{
|
|
ObjectStoreServiceOptions = options.CurrentValue;
|
|
|
|
}
|
|
|
|
|
|
|
|
/// <summary>
|
|
/// oosFolderPath 不要 "/ "开头 应该： TempFolder/ChildFolder
|
|
/// </summary>
|
|
/// <param name="fileStream"></param>
|
|
/// <param name="oosFolderPath"></param>
|
|
/// <param name="fileRealName"></param>
|
|
/// <param name="isFileNameAddGuid"></param>
|
|
/// <returns></returns>
|
|
public async Task<string> UploadToOSSAsync(Stream fileStream, string oosFolderPath, string fileRealName, bool isFileNameAddGuid = true)
|
|
{
|
|
GetObjectStoreTempToken();
|
|
|
|
var ossRelativePath = isFileNameAddGuid ? $"{oosFolderPath}/{Guid.NewGuid()}_{fileRealName}" : $"{oosFolderPath}/{fileRealName}";
|
|
|
|
try
|
|
{
|
|
using (var memoryStream = new MemoryStream())
|
|
{
|
|
fileStream.Seek(0, SeekOrigin.Begin);
|
|
|
|
fileStream.CopyTo(memoryStream);
|
|
|
|
memoryStream.Seek(0, SeekOrigin.Begin);
|
|
|
|
|
|
if (ObjectStoreServiceOptions.ObjectStoreUse == "AliyunOSS")
|
|
{
|
|
var aliConfig = ObjectStoreServiceOptions.AliyunOSS;
|
|
|
|
var _ossClient = new OssClient(RuntimeInformation.IsOSPlatform(OSPlatform.Windows) ? aliConfig.EndPoint : aliConfig.InternalEndpoint, AliyunOSSTempToken.AccessKeyId, AliyunOSSTempToken.AccessKeySecret, AliyunOSSTempToken.SecurityToken);
|
|
|
|
|
|
|
|
// 上传文件
|
|
var result = _ossClient.PutObject(aliConfig.BucketName, ossRelativePath, memoryStream);
|
|
|
|
}
|
|
else if (ObjectStoreServiceOptions.ObjectStoreUse == "MinIO")
|
|
{
|
|
var minIOConfig = ObjectStoreServiceOptions.MinIO;
|
|
|
|
|
|
var minioClient = new MinioClient().WithEndpoint($"{minIOConfig.EndPoint}:{minIOConfig.Port}")
|
|
.WithCredentials(minIOConfig.AccessKeyId, minIOConfig.SecretAccessKey).WithSSL(minIOConfig.UseSSL)
|
|
.Build();
|
|
|
|
var putObjectArgs = new PutObjectArgs()
|
|
.WithBucket(minIOConfig.BucketName)
|
|
.WithObject(ossRelativePath)
|
|
.WithStreamData(memoryStream)
|
|
.WithObjectSize(memoryStream.Length);
|
|
|
|
await minioClient.PutObjectAsync(putObjectArgs);
|
|
}
|
|
else if (ObjectStoreServiceOptions.ObjectStoreUse == "AWS")
|
|
{
|
|
var awsConfig = ObjectStoreServiceOptions.AWS;
|
|
|
|
var credentials = new SessionAWSCredentials(AWSTempToken.AccessKeyId, AWSTempToken.SecretAccessKey, AWSTempToken.SessionToken);
|
|
|
|
|
|
|
|
//提供awsEndPoint（域名）进行访问配置
|
|
var clientConfig = new AmazonS3Config
|
|
{
|
|
RegionEndpoint = RegionEndpoint.USEast1,
|
|
UseHttp = true,
|
|
};
|
|
|
|
var amazonS3Client = new AmazonS3Client(credentials, clientConfig);
|
|
|
|
var putObjectRequest = new Amazon.S3.Model.PutObjectRequest()
|
|
{
|
|
BucketName = awsConfig.BucketName,
|
|
InputStream = memoryStream,
|
|
Key = ossRelativePath,
|
|
};
|
|
|
|
await amazonS3Client.PutObjectAsync(putObjectRequest);
|
|
}
|
|
else
|
|
{
|
|
throw new BusinessValidationFailedException("未定义的存储介质类型");
|
|
}
|
|
}
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
|
|
throw new BusinessValidationFailedException($"上传发生异常：{ex.Message}");
|
|
}
|
|
|
|
|
|
|
|
|
|
return "/" + ossRelativePath;
|
|
|
|
}
|
|
|
|
|
|
|
|
/// <summary>
|
|
/// oosFolderPath 不要 "/ "开头 应该： TempFolder/ChildFolder
|
|
/// </summary>
|
|
/// <param name="localFilePath"></param>
|
|
/// <param name="oosFolderPath"></param>
|
|
/// <param name="isFileNameAddGuid"></param>
|
|
/// <returns></returns>
|
|
/// <exception cref="BusinessValidationFailedException"></exception>
|
|
public async Task<string> UploadToOSSAsync(string localFilePath, string oosFolderPath, bool isFileNameAddGuid = true)
|
|
{
|
|
GetObjectStoreTempToken();
|
|
|
|
var localFileName = Path.GetFileName(localFilePath);
|
|
|
|
var ossRelativePath = isFileNameAddGuid ? $"{oosFolderPath}/{Guid.NewGuid()}_{localFileName}" : $"{oosFolderPath}/{localFileName}";
|
|
|
|
|
|
if (ObjectStoreServiceOptions.ObjectStoreUse == "AliyunOSS")
|
|
{
|
|
var aliConfig = ObjectStoreServiceOptions.AliyunOSS;
|
|
|
|
var _ossClient = new OssClient(RuntimeInformation.IsOSPlatform(OSPlatform.Windows) ? aliConfig.EndPoint : aliConfig.InternalEndpoint, AliyunOSSTempToken.AccessKeyId, AliyunOSSTempToken.AccessKeySecret, AliyunOSSTempToken.SecurityToken);
|
|
|
|
// 上传文件
|
|
var result = _ossClient.PutObject(aliConfig.BucketName, ossRelativePath, localFilePath);
|
|
|
|
}
|
|
else if (ObjectStoreServiceOptions.ObjectStoreUse == "MinIO")
|
|
{
|
|
var minIOConfig = ObjectStoreServiceOptions.MinIO;
|
|
|
|
|
|
var minioClient = new MinioClient().WithEndpoint($"{minIOConfig.EndPoint}:{minIOConfig.Port}")
|
|
.WithCredentials(minIOConfig.AccessKeyId, minIOConfig.SecretAccessKey).WithSSL(minIOConfig.UseSSL)
|
|
.Build();
|
|
|
|
var putObjectArgs = new PutObjectArgs()
|
|
.WithBucket(minIOConfig.BucketName)
|
|
.WithObject(ossRelativePath)
|
|
.WithFileName(localFilePath);
|
|
|
|
await minioClient.PutObjectAsync(putObjectArgs);
|
|
}
|
|
else if (ObjectStoreServiceOptions.ObjectStoreUse == "AWS")
|
|
{
|
|
var awsConfig = ObjectStoreServiceOptions.AWS;
|
|
|
|
// 提供awsAccessKeyId和awsSecretAccessKey构造凭证
|
|
var credentials = new SessionAWSCredentials(AWSTempToken.AccessKeyId, AWSTempToken.SecretAccessKey, AWSTempToken.SessionToken);
|
|
|
|
//提供awsEndPoint（域名）进行访问配置
|
|
var clientConfig = new AmazonS3Config
|
|
{
|
|
RegionEndpoint = RegionEndpoint.USEast1,
|
|
UseHttp = true,
|
|
};
|
|
|
|
var amazonS3Client = new AmazonS3Client(credentials, clientConfig);
|
|
|
|
var putObjectRequest = new Amazon.S3.Model.PutObjectRequest()
|
|
{
|
|
BucketName = awsConfig.BucketName,
|
|
FilePath = localFilePath,
|
|
Key = ossRelativePath,
|
|
};
|
|
|
|
await amazonS3Client.PutObjectAsync(putObjectRequest);
|
|
|
|
}
|
|
else
|
|
{
|
|
throw new BusinessValidationFailedException("未定义的存储介质类型");
|
|
}
|
|
return "/" + ossRelativePath;
|
|
|
|
}
|
|
|
|
|
|
public async Task DownLoadFromOSSAsync(string ossRelativePath, string localFilePath)
|
|
{
|
|
GetObjectStoreTempToken();
|
|
|
|
ossRelativePath = ossRelativePath.TrimStart('/');
|
|
try
|
|
{
|
|
|
|
|
|
if (ObjectStoreServiceOptions.ObjectStoreUse == "AliyunOSS")
|
|
{
|
|
var aliConfig = ObjectStoreServiceOptions.AliyunOSS;
|
|
|
|
var _ossClient = new OssClient(RuntimeInformation.IsOSPlatform(OSPlatform.Windows) ? aliConfig.EndPoint : aliConfig.InternalEndpoint, AliyunOSSTempToken.AccessKeyId, AliyunOSSTempToken.AccessKeySecret, AliyunOSSTempToken.SecurityToken);
|
|
|
|
// 上传文件
|
|
var result = _ossClient.GetObject(aliConfig.BucketName, ossRelativePath);
|
|
|
|
// 将下载的文件流保存到本地文件
|
|
using (var fs = File.OpenWrite(localFilePath))
|
|
{
|
|
result.Content.CopyTo(fs);
|
|
fs.Close();
|
|
}
|
|
|
|
}
|
|
else if (ObjectStoreServiceOptions.ObjectStoreUse == "MinIO")
|
|
{
|
|
var minIOConfig = ObjectStoreServiceOptions.MinIO;
|
|
|
|
var minioClient = new MinioClient().WithEndpoint($"{minIOConfig.EndPoint}:{minIOConfig.Port}")
|
|
.WithCredentials(minIOConfig.AccessKeyId, minIOConfig.SecretAccessKey).WithSSL(minIOConfig.UseSSL)
|
|
.Build();
|
|
|
|
var getObjectArgs = new GetObjectArgs()
|
|
.WithBucket(minIOConfig.BucketName)
|
|
.WithObject(ossRelativePath)
|
|
.WithFile(localFilePath);
|
|
|
|
await minioClient.GetObjectAsync(getObjectArgs);
|
|
|
|
}
|
|
else if (ObjectStoreServiceOptions.ObjectStoreUse == "AWS")
|
|
{
|
|
var awsConfig = ObjectStoreServiceOptions.AWS;
|
|
|
|
// 提供awsAccessKeyId和awsSecretAccessKey构造凭证
|
|
var credentials = new SessionAWSCredentials(AWSTempToken.AccessKeyId, AWSTempToken.SecretAccessKey, AWSTempToken.SessionToken);
|
|
|
|
//提供awsEndPoint（域名）进行访问配置
|
|
var clientConfig = new AmazonS3Config
|
|
{
|
|
RegionEndpoint = RegionEndpoint.USEast1,
|
|
UseHttp = true,
|
|
};
|
|
|
|
var amazonS3Client = new AmazonS3Client(credentials, clientConfig);
|
|
|
|
var getObjectArgs = new Amazon.S3.Model.GetObjectRequest()
|
|
{
|
|
BucketName = awsConfig.BucketName,
|
|
Key = ossRelativePath,
|
|
};
|
|
|
|
|
|
await (await amazonS3Client.GetObjectAsync(getObjectArgs)).WriteResponseStreamToFileAsync(localFilePath, true, CancellationToken.None);
|
|
|
|
|
|
}
|
|
else
|
|
{
|
|
throw new BusinessValidationFailedException("未定义的存储介质类型");
|
|
}
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
|
|
throw new BusinessValidationFailedException("oss下载失败!" + ex.Message);
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
}
|
|
|
|
public async Task<string> GetSignedUrl(string ossRelativePath)
|
|
{
|
|
GetObjectStoreTempToken();
|
|
|
|
ossRelativePath = ossRelativePath.TrimStart('/');
|
|
try
|
|
{
|
|
|
|
|
|
if (ObjectStoreServiceOptions.ObjectStoreUse == "AliyunOSS")
|
|
{
|
|
var aliConfig = ObjectStoreServiceOptions.AliyunOSS;
|
|
|
|
var _ossClient = new OssClient(RuntimeInformation.IsOSPlatform(OSPlatform.Windows) ? aliConfig.EndPoint : aliConfig.InternalEndpoint, AliyunOSSTempToken.AccessKeyId, AliyunOSSTempToken.AccessKeySecret, AliyunOSSTempToken.SecurityToken);
|
|
|
|
// 生成签名URL。
|
|
var req = new GeneratePresignedUriRequest(aliConfig.BucketName, ossRelativePath, SignHttpMethod.Get)
|
|
{
|
|
// 设置签名URL过期时间，默认值为3600秒。
|
|
Expiration = DateTime.Now.AddHours(1),
|
|
};
|
|
var uri = _ossClient.GeneratePresignedUri(req);
|
|
|
|
return uri.PathAndQuery;
|
|
|
|
}
|
|
else if (ObjectStoreServiceOptions.ObjectStoreUse == "MinIO")
|
|
{
|
|
var minIOConfig = ObjectStoreServiceOptions.MinIO;
|
|
|
|
var minioClient = new MinioClient().WithEndpoint($"{minIOConfig.EndPoint}:{minIOConfig.Port}")
|
|
.WithCredentials(minIOConfig.AccessKeyId, minIOConfig.SecretAccessKey).WithSSL(minIOConfig.UseSSL)
|
|
.Build();
|
|
|
|
|
|
var args = new PresignedGetObjectArgs()
|
|
.WithBucket(minIOConfig.BucketName)
|
|
.WithObject(ossRelativePath)
|
|
.WithExpiry(3600)
|
|
/*.WithHeaders(reqParams)*/;
|
|
|
|
var presignedUrl = await minioClient.PresignedGetObjectAsync(args);
|
|
|
|
Uri uri = new Uri(presignedUrl);
|
|
|
|
string relativePath = uri.PathAndQuery;
|
|
|
|
|
|
return relativePath;
|
|
|
|
}
|
|
else if (ObjectStoreServiceOptions.ObjectStoreUse == "AWS")
|
|
{
|
|
var awsConfig = ObjectStoreServiceOptions.AWS;
|
|
|
|
|
|
// 提供awsAccessKeyId和awsSecretAccessKey构造凭证
|
|
var credentials = new SessionAWSCredentials(AWSTempToken.AccessKeyId, AWSTempToken.SecretAccessKey, AWSTempToken.SessionToken);
|
|
|
|
//提供awsEndPoint（域名）进行访问配置
|
|
var clientConfig = new AmazonS3Config
|
|
{
|
|
RegionEndpoint = RegionEndpoint.USEast1,
|
|
UseHttp = true,
|
|
};
|
|
|
|
var amazonS3Client = new AmazonS3Client(credentials, clientConfig);
|
|
|
|
var presignedUrl = await amazonS3Client.GetPreSignedURLAsync(new GetPreSignedUrlRequest()
|
|
{
|
|
BucketName = awsConfig.BucketName,
|
|
Key = ossRelativePath,
|
|
Expires = DateTime.UtcNow.AddMinutes(120)
|
|
});
|
|
|
|
Uri uri = new Uri(presignedUrl);
|
|
|
|
string relativePath = uri.PathAndQuery;
|
|
|
|
|
|
return relativePath;
|
|
}
|
|
else
|
|
{
|
|
throw new BusinessValidationFailedException("未定义的存储介质类型");
|
|
}
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
|
|
throw new BusinessValidationFailedException("oss授权url失败!" + ex.Message);
|
|
}
|
|
|
|
}
|
|
|
|
/// <summary>
|
|
/// 删除某个目录的文件
|
|
/// </summary>
|
|
/// <param name="prefix"></param>
|
|
/// <returns></returns>
|
|
public async Task DeleteFromPrefix(string prefix)
|
|
{
|
|
GetObjectStoreTempToken();
|
|
|
|
if (ObjectStoreServiceOptions.ObjectStoreUse == "AliyunOSS")
|
|
{
|
|
var aliConfig = ObjectStoreServiceOptions.AliyunOSS;
|
|
|
|
var _ossClient = new OssClient(RuntimeInformation.IsOSPlatform(OSPlatform.Windows) ? aliConfig.EndPoint : aliConfig.InternalEndpoint, AliyunOSSTempToken.AccessKeyId, AliyunOSSTempToken.AccessKeySecret, AliyunOSSTempToken.SecurityToken);
|
|
|
|
|
|
try
|
|
{
|
|
ObjectListing objectListing = null;
|
|
string nextMarker = null;
|
|
do
|
|
{
|
|
// 使用 prefix 模拟目录结构，设置 MaxKeys 和 NextMarker
|
|
objectListing = _ossClient.ListObjects(new Aliyun.OSS.ListObjectsRequest(aliConfig.BucketName)
|
|
{
|
|
Prefix = prefix,
|
|
MaxKeys = 1000,
|
|
Marker = nextMarker
|
|
});
|
|
|
|
List<string> keys = objectListing.ObjectSummaries.Select(t => t.Key).ToList();
|
|
|
|
// 删除获取到的文件
|
|
if (keys.Count > 0)
|
|
{
|
|
_ossClient.DeleteObjects(new Aliyun.OSS.DeleteObjectsRequest(aliConfig.BucketName, keys, false));
|
|
}
|
|
|
|
// 设置 NextMarker 以获取下一页的数据
|
|
nextMarker = objectListing.NextMarker;
|
|
|
|
} while (objectListing.IsTruncated);
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
Console.WriteLine($"Error: {ex.Message}");
|
|
}
|
|
|
|
|
|
}
|
|
else if (ObjectStoreServiceOptions.ObjectStoreUse == "MinIO")
|
|
{
|
|
var minIOConfig = ObjectStoreServiceOptions.MinIO;
|
|
|
|
|
|
var minioClient = new MinioClient().WithEndpoint($"{minIOConfig.EndPoint}:{minIOConfig.Port}")
|
|
.WithCredentials(minIOConfig.AccessKeyId, minIOConfig.SecretAccessKey).WithSSL(minIOConfig.UseSSL)
|
|
.Build();
|
|
|
|
|
|
var listArgs = new ListObjectsArgs().WithBucket(minIOConfig.BucketName).WithPrefix(prefix).WithRecursive(true);
|
|
|
|
|
|
|
|
// 创建一个空列表用于存储对象键
|
|
var objects = new List<string>();
|
|
|
|
// 使用 await foreach 来异步迭代对象列表
|
|
await foreach (var item in minioClient.ListObjectsEnumAsync(listArgs))
|
|
{
|
|
objects.Add(item.Key);
|
|
}
|
|
|
|
|
|
if (objects.Count > 0)
|
|
{
|
|
var objArgs = new RemoveObjectsArgs()
|
|
.WithBucket(minIOConfig.BucketName)
|
|
.WithObjects(objects);
|
|
|
|
// 删除对象
|
|
await minioClient.RemoveObjectsAsync(objArgs);
|
|
}
|
|
|
|
|
|
|
|
}
|
|
else if (ObjectStoreServiceOptions.ObjectStoreUse == "AWS")
|
|
{
|
|
|
|
var awsConfig = ObjectStoreServiceOptions.AWS;
|
|
|
|
|
|
// 提供awsAccessKeyId和awsSecretAccessKey构造凭证
|
|
var credentials = new SessionAWSCredentials(AWSTempToken.AccessKeyId, AWSTempToken.SecretAccessKey, AWSTempToken.SessionToken);
|
|
|
|
//提供awsEndPoint（域名）进行访问配置
|
|
var clientConfig = new AmazonS3Config
|
|
{
|
|
RegionEndpoint = RegionEndpoint.USEast1,
|
|
UseHttp = true,
|
|
};
|
|
|
|
var amazonS3Client = new AmazonS3Client(credentials, clientConfig);
|
|
|
|
// 列出指定前缀下的所有对象
|
|
var listObjectsRequest = new ListObjectsV2Request
|
|
{
|
|
BucketName = awsConfig.BucketName,
|
|
Prefix = prefix
|
|
};
|
|
|
|
var listObjectsResponse = await amazonS3Client.ListObjectsV2Async(listObjectsRequest);
|
|
|
|
if (listObjectsResponse.S3Objects.Count > 0)
|
|
{
|
|
// 准备删除请求
|
|
var deleteObjectsRequest = new Amazon.S3.Model.DeleteObjectsRequest
|
|
{
|
|
BucketName = awsConfig.BucketName,
|
|
Objects = new List<KeyVersion>()
|
|
};
|
|
|
|
foreach (var s3Object in listObjectsResponse.S3Objects)
|
|
{
|
|
deleteObjectsRequest.Objects.Add(new KeyVersion
|
|
{
|
|
Key = s3Object.Key
|
|
});
|
|
}
|
|
|
|
// 批量删除对象
|
|
var deleteObjectsResponse = await amazonS3Client.DeleteObjectsAsync(deleteObjectsRequest);
|
|
}
|
|
|
|
|
|
|
|
}
|
|
else
|
|
{
|
|
throw new BusinessValidationFailedException("未定义的存储介质类型");
|
|
}
|
|
}
|
|
|
|
|
|
public ObjectStoreDTO GetObjectStoreTempToken()
|
|
{
|
|
|
|
var ossOptions = ObjectStoreServiceOptions.AliyunOSS;
|
|
|
|
if (ObjectStoreServiceOptions.ObjectStoreUse == "AliyunOSS")
|
|
{
|
|
var client = new Client(new AlibabaCloud.OpenApiClient.Models.Config()
|
|
{
|
|
AccessKeyId = ossOptions.AccessKeyId,
|
|
AccessKeySecret = ossOptions.AccessKeySecret,
|
|
//AccessKeyId = "LTAI5tJV76pYX5yPg1N9QVE8",
|
|
//AccessKeySecret = "roRNLa9YG1of4pYruJGCNKBXEWTAWa",
|
|
|
|
Endpoint = "sts.cn-hangzhou.aliyuncs.com"
|
|
});
|
|
|
|
var assumeRoleRequest = new AlibabaCloud.SDK.Sts20150401.Models.AssumeRoleRequest();
|
|
// 将<YOUR_ROLE_SESSION_NAME>设置为自定义的会话名称，例如oss-role-session。
|
|
assumeRoleRequest.RoleSessionName = $"session-name-{NewId.NextGuid()}";
|
|
// 将<YOUR_ROLE_ARN>替换为拥有上传文件到指定OSS Bucket权限的RAM角色的ARN。
|
|
assumeRoleRequest.RoleArn = ossOptions.RoleArn;
|
|
//assumeRoleRequest.RoleArn = "acs:ram::1899121822495495:role/webdirect";
|
|
assumeRoleRequest.DurationSeconds = ossOptions.DurationSeconds;
|
|
var runtime = new AlibabaCloud.TeaUtil.Models.RuntimeOptions();
|
|
var response = client.AssumeRoleWithOptions(assumeRoleRequest, runtime);
|
|
var credentials = response.Body.Credentials;
|
|
|
|
var tempToken = new AliyunOSSTempToken()
|
|
{
|
|
AccessKeyId = credentials.AccessKeyId,
|
|
AccessKeySecret = credentials.AccessKeySecret,
|
|
|
|
//转为服务器时区，最后统一转为客户端时区
|
|
Expiration = TimeZoneInfo.ConvertTimeFromUtc(DateTime.Parse(credentials.Expiration), TimeZoneInfo.Local),
|
|
SecurityToken = credentials.SecurityToken,
|
|
|
|
|
|
Region = ossOptions.Region,
|
|
BucketName = ossOptions.BucketName,
|
|
EndPoint = ossOptions.EndPoint,
|
|
ViewEndpoint = ossOptions.ViewEndpoint,
|
|
|
|
};
|
|
|
|
AliyunOSSTempToken = tempToken;
|
|
|
|
return new ObjectStoreDTO() { ObjectStoreUse = ObjectStoreServiceOptions.ObjectStoreUse, AliyunOSS = tempToken };
|
|
}
|
|
else if (ObjectStoreServiceOptions.ObjectStoreUse == "MinIO")
|
|
{
|
|
return new ObjectStoreDTO() { ObjectStoreUse = ObjectStoreServiceOptions.ObjectStoreUse, MinIO = ObjectStoreServiceOptions.MinIO };
|
|
}
|
|
else if (ObjectStoreServiceOptions.ObjectStoreUse == "AWS")
|
|
{
|
|
var awsOptions = ObjectStoreServiceOptions.AWS;
|
|
|
|
//aws 临时凭证
|
|
// 创建 STS 客户端
|
|
var stsClient = new AmazonSecurityTokenServiceClient(awsOptions.AccessKeyId, awsOptions.SecretAccessKey);
|
|
|
|
// 使用 AssumeRole 请求临时凭证
|
|
var assumeRoleRequest = new AssumeRoleRequest
|
|
{
|
|
|
|
RoleArn = awsOptions.RoleArn, // 角色 ARN
|
|
RoleSessionName = $"session-name-{NewId.NextGuid()}",
|
|
DurationSeconds = awsOptions.DurationSeconds // 临时凭证有效期
|
|
};
|
|
|
|
var assumeRoleResponse = stsClient.AssumeRoleAsync(assumeRoleRequest).Result;
|
|
|
|
var credentials = assumeRoleResponse.Credentials;
|
|
|
|
var tempToken = new AWSTempToken()
|
|
{
|
|
AccessKeyId = credentials.AccessKeyId,
|
|
SecretAccessKey = credentials.SecretAccessKey,
|
|
SessionToken = credentials.SessionToken,
|
|
Expiration = credentials.Expiration,
|
|
Region = awsOptions.Region,
|
|
BucketName = awsOptions.BucketName,
|
|
EndPoint = awsOptions.EndPoint,
|
|
ViewEndpoint = awsOptions.ViewEndpoint,
|
|
|
|
};
|
|
|
|
AWSTempToken = tempToken;
|
|
return new ObjectStoreDTO() { ObjectStoreUse = ObjectStoreServiceOptions.ObjectStoreUse, AWS = tempToken };
|
|
}
|
|
else
|
|
{
|
|
throw new BusinessValidationFailedException("未定义的存储介质类型");
|
|
}
|
|
}
|
|
|
|
}
|