1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
|
package Net::Amazon::S3::Signature::V4;
# ABSTRACT: V4 signatures
$Net::Amazon::S3::Signature::V4::VERSION = '0.991';
use Moose;
use Net::Amazon::S3::Signature::V4Implementation;
use Digest::SHA;
use Ref::Util;
use Net::Amazon::S3::Constants;
use Net::Amazon::S3::Signature::V2;
use namespace::clean;
extends 'Net::Amazon::S3::Signature';
sub enforce_use_virtual_host {
1;
}
sub redirect_handler {
my ($self, $http_request, $response, $ua, $h) = @_;
my $region = $response->header(Net::Amazon::S3::Constants->HEADER_BUCKET_REGION) or return;
# change the bucket region in request
my $request = $response->request;
$request->uri( $response->header( 'location' ) );
# sign the request again
$request->headers->remove_header('Authorization');
$request->headers->remove_header(Net::Amazon::S3::Constants->HEADER_DATE);
$http_request->_sign_request( $request, $region );
return $request;
}
sub _sign {
my ($self, $region) = @_;
return Net::Amazon::S3::Signature::V4Implementation->new(
$self->http_request->s3->aws_access_key_id,
$self->http_request->s3->aws_secret_access_key,
$region || $self->http_request->region,
's3',
);
}
sub _host_to_region_host {
my ($self, $sign, $request) = @_;
my $host = $request->uri->host;
return if $sign->{endpoint} eq 'us-east-1';
return unless $host =~ s/(?<=\bs3)(?=\.amazonaws\.com$)/"-" . $sign->{endpoint}/e;
$request->uri->host( $host );
}
sub sign_request {
my ($self, $request, $region) = @_;
my $sha = Digest::SHA->new( '256' );
if (Ref::Util::is_coderef( my $coderef = $request->content )) {
while (length (my $snippet = $coderef->())) {
$sha->add ($snippet);
}
$request->header( $Net::Amazon::S3::Signature::V4Implementation::X_AMZ_CONTENT_SHA256 => $sha->hexdigest );
}
$self->_append_authorization_headers ($request);
my $sign = $self->_sign( $region );
$self->_host_to_region_host( $sign, $request );
$sign->sign( $request );
return $request;
}
sub sign_uri {
my ($self, $request, $expires_at) = @_;
$self->_append_authorization_query_params ($request);
my $sign = $self->_sign;
$self->_host_to_region_host( $sign, $request );
return $sign->sign_uri( $request->uri, $expires_at - time, $request->method );
}
1;
__END__
=pod
=encoding UTF-8
=head1 NAME
Net::Amazon::S3::Signature::V4 - V4 signatures
=head1 VERSION
version 0.991
=head1 AUTHOR
Branislav Zahradník <barney@cpan.org>
=head1 COPYRIGHT AND LICENSE
This software is copyright (c) 2022 by Amazon Digital Services, Leon Brocard, Brad Fitzpatrick, Pedro Figueiredo, Rusty Conover, Branislav Zahradník.
This is free software; you can redistribute it and/or modify it under
the same terms as the Perl 5 programming language system itself.
=cut
|
