完成阿里云本地上传token生成，实现小程序本地上传

移动系统liao

2025-02-18 8b613a5275e6fe23b91f65cc6a7fba720ae4d7ef

 cylsg/EzUpFile/EzFileUploadService.cs

@@ -1,5 +1,7 @@

using Aliyun.Acs.Core.Exceptions;
using Aliyun.OSS;

using Aliyun.OSS.Util;
using cylsg.utility;
using cylsg.utility.Extend;
@@ -10,14 +12,16 @@
using Microsoft.AspNetCore.Http;

using SqlSugar;
using System;
using System.Buffers.Text;
using System.Drawing;
using System.Globalization;
using System.Security.Policy;
using System.Security.Cryptography;
using System.Text;
using Tea;
using TencentCloud.Ocr.V20181119.Models;
using TencentCloud.Teo.V20220901.Models;

using Task = System.Threading.Tasks.Task;
using Newtonsoft.Json;
using static AlibabaCloud.SDK.Sts20150401.Models.AssumeRoleResponseBody;
namespace EzUpFile
{
    /// <summary>
@@ -29,12 +33,12 @@
        private readonly HttpRequest? _request;
        private readonly ISqlSugarClient _sqlSugarClient;
        private readonly ITencentCloudService _tcs;
        public EzFileUploadService(IHttpContextAccessor httpContext, ISqlSugarClient sqlSugarClient,ITencentCloudService tencentCloudService)
        public EzFileUploadService(IHttpContextAccessor httpContext, ISqlSugarClient sqlSugarClient, ITencentCloudService tencentCloudService)
        {

            _request = httpContext.HttpContext?.Request ?? null;
            _sqlSugarClient = sqlSugarClient;
            _tcs= tencentCloudService;
            _tcs = tencentCloudService;
        }

        /// <summary>
@@ -178,7 +182,7 @@
                throw Oops.Oh(ex.Message);
            }

            //返回给UEditor的插入编辑器的图片的src


            return App.Configuration["FileUploadOptions:AliOSSSaveBaseUrl"] + filePath;
        }
@@ -302,7 +306,7 @@

                if (FileData.Length > maxSize)
                {
                    throw Oops.Oh(" 上传文件不可超出500K");
                    throw Oops.Oh(" 上传文件不可超出5M");
                }


@@ -316,13 +320,13 @@
                }

                MemoryStream ms = new MemoryStream();
                if (oimage.Width > 600)
                if (oimage.Width > 1200)

                {
                    if (oimage.Width > oimage.Height)
                        oimage.GetThumbnailImage(600, 400, null, IntPtr.Zero).Save(ms, System.Drawing.Imaging.ImageFormat.Png);
                        oimage.GetThumbnailImage(1200, 800, null, IntPtr.Zero).Save(ms, System.Drawing.Imaging.ImageFormat.Png);
                    else
                        oimage.GetThumbnailImage(400, 600, null, IntPtr.Zero).Save(ms, System.Drawing.Imaging.ImageFormat.Png);
                        oimage.GetThumbnailImage(800, 1200, null, IntPtr.Zero).Save(ms, System.Drawing.Imaging.ImageFormat.Png);
                }
                else
                    oimage.Save(ms, System.Drawing.Imaging.ImageFormat.Png);
@@ -349,7 +353,7 @@
                catch (Exception e)
                {

                    throw Oops.Oh(e.Message);
                    throw Oops.Oh(e.Message + "腾讯云，或者阿里云操作错误");
                }
            }
            catch (Exception e)
@@ -371,7 +375,7 @@

                if (FileData.Length > maxSize)
                {
                    throw Oops.Oh(" 上传文件不可超出500K");
                    throw Oops.Oh(" 上传文件不可超出5M");
                }


@@ -385,13 +389,13 @@
                }

                MemoryStream ms = new MemoryStream();
                if (oimage.Width > 600)
                if (oimage.Width > 1200)

                {
                    if (oimage.Width > oimage.Height)
                        oimage.GetThumbnailImage(600, 400, null, IntPtr.Zero).Save(ms, System.Drawing.Imaging.ImageFormat.Png);
                        oimage.GetThumbnailImage(1200, 800, null, IntPtr.Zero).Save(ms, System.Drawing.Imaging.ImageFormat.Png);
                    else
                        oimage.GetThumbnailImage(400, 600, null, IntPtr.Zero).Save(ms, System.Drawing.Imaging.ImageFormat.Png);
                        oimage.GetThumbnailImage(800, 1200, null, IntPtr.Zero).Save(ms, System.Drawing.Imaging.ImageFormat.Png);
                }
                else
                    oimage.Save(ms, System.Drawing.Imaging.ImageFormat.Png);
@@ -426,7 +430,7 @@
        }


        public async Task<(bool,string)> IaiAddPerso(string CoredID,string Name,int PersonGender)
        public async Task<(bool, string)> IaiAddPerso(string CoredID, string Name, int PersonGender)
        {
            try
            {
@@ -466,12 +470,12 @@
                var arr = ms.ToArray();
                string img64 = Convert.ToBase64String(arr);

                bool  info = false;
                bool info = false;
                string url = "";

                try
                {
                    info =  _tcs.IaiAddPerso(img64, CoredID, Name, PersonGender);
                    info = _tcs.IaiAddPerso(img64, CoredID, Name, PersonGender);

                    url = await UploadFilesFByBase64(img64);

@@ -490,7 +494,7 @@
                throw Oops.Oh(e.Message);
            }
        }
/// <inheritdoc/>
        /// <inheritdoc/>

        public async Task<(bool, string)> IaiAddPerso(string imgBase64, string CoredID, string Name, int PersonGender)
        {
@@ -527,5 +531,224 @@


        #endregion

        #region 本地上传云服务器凭证计算


        public Dictionary<string, string> GetToken1()
        {

            var dir = DateTime.Now.ToString("yyyyMMdd") + "/";
            // 构造OssClient实例。 endpoint 格式:https://oss-cn-beijing.aliyuncs.com
            //  var ossClient = new OssClient( App.Configuration["FileUploadOptions:AliOSSSaveBaseUrl"], App.Configuration["FileUploadOptions:AliOSSAccessKeyID"], App.Configuration["FileUploadOptions:AliOSSAccessKeySecret"]);
            var rt = GetSTSToken();




            String securityToken = rt.AccessKeySecret;   //获取Token
            var config = new PolicyConditions();

            config.AddConditionItem(PolicyConditions.CondContentLengthRange, 1, 1024L * 1024 * 1024 * 5);// 文件大小范围：单位byte
            config.AddConditionItem(MatchMode.StartWith, PolicyConditions.CondKey, dir);
            //捅名
            config.AddConditionItem("bucket", App.Configuration["FileUploadOptions:AliOSSBucketName"]);
            config.AddConditionItem("x-oss-signature-version", "OSS4-HMAC-SHA256");
            config.AddConditionItem("x-oss-security-token", securityToken);
            //     //请求时间
            config.AddConditionItem("x-oss-date", DateTime.Now.ToString("yyyyMMdd'T'HHmmss'Z'"));
            config.AddConditionItem("x-oss-credential", App.Configuration["FileUploadOptions:AliOSSAccessKeyID"] + "/" + DateTime.Now.ToString("yyyyMMdd") + "/cn-chengdu/oss/aliyun_v4_request");
            var expire = DateTimeOffset.Now.AddMinutes(30);// 过期时间

            // 生成 Policy，并进行 Base64 编码
            //  var policy = ossClient.GeneratePostPolicy(expire.LocalDateTime, config);
            //   var policyBase64 = Convert.ToBase64String(Encoding.UTF8.GetBytes(policy));

            // 计算签名
            var hmac = new HMACSHA1(Encoding.UTF8.GetBytes(App.Configuration["FileUploadOptions:AliOSSAccessKeySecret"]));
            //    var bytes = hmac.ComputeHash(Encoding.UTF8.GetBytes(policyBase64));
            //  var sign = Convert.ToBase64String(bytes);

            return new Dictionary<string, string>();
        }






        public static AlibabaCloud.SDK.Sts20150401.Client CreateClient()
        {
            // 工程代码泄露可能会导致 AccessKey 泄露，并威胁账号下所有资源的安全性。以下代码示例仅供参考。
            // 建议使用更安全的 STS 方式，更多鉴权访问方式请参见：https://help.aliyun.com/document_detail/378671.html。
            AlibabaCloud.OpenApiClient.Models.Config config = new AlibabaCloud.OpenApiClient.Models.Config
            {
                // 必填，请确保代码运行环境设置了环境变量 ALIBABA_CLOUD_ACCESS_KEY_ID。
                AccessKeyId = "LTAI5tKegnEbaSRPFRwDxeFd",
                // 必填，请确保代码运行环境设置了环境变量 ALIBABA_CLOUD_ACCESS_KEY_SECRET。
                AccessKeySecret = "9Hv6VYgWhpDHCMkwMLHiqF6ihusjdl",
            };
            // Endpoint 请参考 https://api.aliyun.com/product/Sts
            config.Endpoint = "sts.cn-chengdu.aliyuncs.com";
            return new AlibabaCloud.SDK.Sts20150401.Client(config);
        }

        /// <summary>
        /// 获取临时凭证
        /// </summary>
        public static AssumeRoleResponseBodyCredentials GetSTSToken()
        {
            AlibabaCloud.SDK.Sts20150401.Client client = CreateClient();
            AlibabaCloud.SDK.Sts20150401.Models.AssumeRoleRequest assumeRoleRequest = new AlibabaCloud.SDK.Sts20150401.Models.AssumeRoleRequest
            {
                Policy = "{\"Statement\": [{\"Action\": [\"*\"],\"Effect\": \"Allow\",\"Resource\": [\"*\"]}],\"Version\":\"1\"}",
                DurationSeconds = 3600,
                RoleArn = "acs:ram::1299465997752835:role/weixinupdatarl",
                RoleSessionName = "weixinupdataRl",
            };
            AlibabaCloud.TeaUtil.Models.RuntimeOptions runtime = new AlibabaCloud.TeaUtil.Models.RuntimeOptions();
            try
            {
                // 复制代码运行请自行打印 API 的返回值
                var data = client.AssumeRoleWithOptions(assumeRoleRequest, runtime);
                if (data.StatusCode == 200)
                {

                    return data.Body?.Credentials;
                }
                throw Oops.Oh("阿里云获取临时凭证错误");
            }
            catch (TeaException error)
            {

                AlibabaCloud.TeaUtil.Common.AssertAsString(error.Message);
                throw;
            }
            catch (Exception _error)
            {
                TeaException error = new TeaException(new Dictionary<string, object>
                {
                    { "message", _error.Message }
                });

                AlibabaCloud.TeaUtil.Common.AssertAsString(error.Message);
                throw error;
            }
        }
        /// <summary>
        /// 
        /// </summary>
        /// <returns></returns>
        public Dictionary<string, string> GetToken()
        {
            // 获取环境变量

            string regionId = "cn-chengdu";
            string roleSessionName = "weixinupdataRl";







            // 定义STS临时访问凭证变量
            string stsAccessKeyId = null;
            string stsSecretAccessKey = null;
            string securityToken = null;

            try
            {
                var rt = GetSTSToken();

                stsAccessKeyId = rt.AccessKeyId;
                stsSecretAccessKey = rt.AccessKeySecret;
                securityToken = rt.SecurityToken;
            }
            catch (ServerException e)
            {
                throw;
            }
            catch (ClientException e)
            {
                throw;
            }

            // 格式化请求日期
            DateTimeOffset now = DateTimeOffset.UtcNow;
            string dtObj1 = now.ToString("yyyyMMdd'T'HHmmss'Z'", CultureInfo.InvariantCulture);
            string dtObj2 = now.ToString("yyyyMMdd", CultureInfo.InvariantCulture);
            string expirationTime = now.AddHours(3).ToString("yyyy-MM-dd'T'HH:mm:ss.fff'Z'", CultureInfo.InvariantCulture);

            // 创建policy
            Dictionary<string, object> policy = new Dictionary<string, object>
        {
            { "expiration", expirationTime },
            { "conditions", new List<object>
                {
                    new Dictionary<string, string> { { "bucket", App.Configuration["FileUploadOptions:AliOSSBucketName"] } }, // 请将<bucketname>替换为您的实际Bucket名称
                    new Dictionary<string, string> { { "x-oss-signature-version", "OSS4-HMAC-SHA256" } },
                    new Dictionary<string, string> { { "x-oss-credential", $"{stsAccessKeyId}/{dtObj2}/{regionId}/oss/aliyun_v4_request" } }, // 请将<cn-hangzhou>替换为您的实际Bucket所处地域，例如北京地域为：cn-beijing
                    new Dictionary<string, string> { { "x-oss-security-token", securityToken } },
                    new Dictionary<string, string> { { "x-oss-date", dtObj1 } }
                }
            }
        };

            string jsonPolicy = JsonConvert.SerializeObject(policy);

            // 构造待签名字符串（StringToSign）
            string stringToSign = Convert.ToBase64String(Encoding.UTF8.GetBytes(jsonPolicy));

            // 计算SigningKey
            byte[] dateKey = HmacSha256("aliyun_v4" + stsSecretAccessKey, dtObj2);
            byte[] dateRegionKey = HmacSha256(dateKey, regionId); // 请将<cn-hangzhou>替换为您的实际Bucket所处地域，例如北京地域为：cn-beijing
            byte[] dateRegionServiceKey = HmacSha256(dateRegionKey, "oss");
            byte[] signingKey = HmacSha256(dateRegionServiceKey, "aliyun_v4_request");

            // 计算Signature
            byte[] result = HmacSha256(signingKey, stringToSign);
            string signature = BitConverter.ToString(result).Replace("-", "").ToLower();

            Dictionary<string, string> messageMap = new Dictionary<string, string>
        {
            { "security_token", securityToken },
            { "signature", signature },
            { "x_oss_date", dtObj1 },
            { "x_oss_credential", $"{stsAccessKeyId}/{dtObj2}/{regionId}/oss/aliyun_v4_request" }, // 请将<cn-hangzhou>替换为您的实际Bucket所处地域，例如北京地域为：cn-beijing
            { "x_oss_signature_version", "OSS4-HMAC-SHA256" },
            { "policy", stringToSign }
        };

            // 打印返回至客户端的签名信息
            return messageMap;
        }



        private static byte[] HmacSha256(byte[] key, string message)
        {
            using (HMACSHA256 hmac = new HMACSHA256(key))
            {
                return hmac.ComputeHash(Encoding.UTF8.GetBytes(message));
            }
        }

        private static byte[] HmacSha256(string key, string message)
        {
            using (HMACSHA256 hmac = new HMACSHA256(Encoding.UTF8.GetBytes(key)))
            {
                return hmac.ComputeHash(Encoding.UTF8.GetBytes(message));
            }
        }



        #endregion
    }




}