Feat: COS credential / upload callback

pkg/filesystem/driver/cos/handller.go

@@ -0,0 +1,171 @@
+package cos
+
+import (
+	"context"
+	"crypto/hmac"
+	"crypto/sha1"
+	"encoding/base64"
+	"encoding/json"
+	"errors"
+	"fmt"
+	model "github.com/HFO4/cloudreve/models"
+	"github.com/HFO4/cloudreve/pkg/filesystem/fsctx"
+	"github.com/HFO4/cloudreve/pkg/filesystem/response"
+	"github.com/HFO4/cloudreve/pkg/serializer"
+	cossdk "github.com/tencentyun/cos-go-sdk-v5"
+	"io"
+	"net/url"
+	"time"
+)
+
+// UploadPolicy 腾讯云COS上传策略
+type UploadPolicy struct {
+	Expiration string        `json:"expiration"`
+	Conditions []interface{} `json:"conditions"`
+}
+
+// MetaData 文件元信息
+type MetaData struct {
+	Size        uint64
+	CallbackKey string
+	CallbackURL string
+}
+
+// Driver 腾讯云COS适配器模板
+type Driver struct {
+	Policy *model.Policy
+	Client *cossdk.Client
+}
+
+// Get 获取文件
+func (handler Driver) Get(ctx context.Context, path string) (response.RSCloser, error) {
+	return nil, errors.New("未实现")
+}
+
+// Put 将文件流保存到指定目录
+func (handler Driver) Put(ctx context.Context, file io.ReadCloser, dst string, size uint64) error {
+	return errors.New("未实现")
+}
+
+// Delete 删除一个或多个文件，
+// 返回未删除的文件，及遇到的最后一个错误
+func (handler Driver) Delete(ctx context.Context, files []string) ([]string, error) {
+	return []string{}, errors.New("未实现")
+}
+
+// Thumb 获取文件缩略图
+func (handler Driver) Thumb(ctx context.Context, path string) (*response.ContentResponse, error) {
+	return nil, errors.New("未实现")
+}
+
+// Source 获取外链URL
+func (handler Driver) Source(
+	ctx context.Context,
+	path string,
+	baseURL url.URL,
+	ttl int64,
+	isDownload bool,
+	speed int,
+) (string, error) {
+	return "", errors.New("未实现")
+}
+
+// Token 获取上传策略和认证Token
+func (handler Driver) Token(ctx context.Context, TTL int64, key string) (serializer.UploadCredential, error) {
+	// 读取上下文中生成的存储路径
+	savePath, ok := ctx.Value(fsctx.SavePathCtx).(string)
+	if !ok {
+		return serializer.UploadCredential{}, errors.New("无法获取存储路径")
+	}
+
+	// 生成回调地址
+	siteURL := model.GetSiteURL()
+	apiBaseURI, _ := url.Parse("/api/v3/callback/cos/" + key)
+	apiURL := siteURL.ResolveReference(apiBaseURI).String()
+
+	// 上传策略
+	startTime := time.Now()
+	endTime := startTime.Add(time.Duration(TTL) * time.Second)
+	keyTime := fmt.Sprintf("%d;%d", startTime.Unix(), endTime.Unix())
+	postPolicy := UploadPolicy{
+		Expiration: endTime.UTC().Format(time.RFC3339),
+		Conditions: []interface{}{
+			map[string]string{"bucket": handler.Policy.BucketName},
+			map[string]string{"$key": savePath},
+			map[string]string{"x-cos-meta-callback": apiURL},
+			map[string]string{"x-cos-meta-key": key},
+			[]interface{}{"content-length-range", 0, handler.Policy.MaxSize},
+			map[string]string{"q-sign-algorithm": "sha1"},
+			map[string]string{"q-ak": handler.Policy.AccessKey},
+			map[string]string{"q-sign-time": keyTime},
+		},
+	}
+
+	res, err := handler.getUploadCredential(ctx, postPolicy, keyTime)
+	if err == nil {
+		res.Callback = apiURL
+		res.Key = key
+	}
+
+	return res, err
+
+}
+
+// Meta 获取文件信息
+func (handler Driver) Meta(ctx context.Context, path string) (*MetaData, error) {
+	res, err := handler.Client.Object.Head(ctx, path, &cossdk.ObjectHeadOptions{})
+	if err != nil {
+		return nil, err
+	}
+	return &MetaData{
+		Size:        uint64(res.ContentLength),
+		CallbackKey: res.Header.Get("x-cos-meta-key"),
+		CallbackURL: res.Header.Get("x-cos-meta-callback"),
+	}, nil
+}
+
+func (handler Driver) getUploadCredential(ctx context.Context, policy UploadPolicy, keyTime string) (serializer.UploadCredential, error) {
+	// 读取上下文中生成的存储路径
+	savePath, ok := ctx.Value(fsctx.SavePathCtx).(string)
+	if !ok {
+		return serializer.UploadCredential{}, errors.New("无法获取存储路径")
+	}
+
+	// 编码上传策略
+	policyJSON, err := json.Marshal(policy)
+	if err != nil {
+		return serializer.UploadCredential{}, err
+	}
+	policyEncoded := base64.StdEncoding.EncodeToString(policyJSON)
+
+	// 签名上传策略
+	hmacSign := hmac.New(sha1.New, []byte(handler.Policy.SecretKey))
+	_, err = io.WriteString(hmacSign, keyTime)
+	if err != nil {
+		return serializer.UploadCredential{}, err
+	}
+	signKey := fmt.Sprintf("%x", hmacSign.Sum(nil))
+
+	sha1Sign := sha1.New()
+	_, err = sha1Sign.Write(policyJSON)
+	if err != nil {
+		return serializer.UploadCredential{}, err
+	}
+	stringToSign := fmt.Sprintf("%x", sha1Sign.Sum(nil))
+
+	// 最终签名
+	hmacFinalSign := hmac.New(sha1.New, []byte(signKey))
+	_, err = hmacFinalSign.Write([]byte(stringToSign))
+	if err != nil {
+		return serializer.UploadCredential{}, err
+	}
+	signature := hmacFinalSign.Sum(nil)
+
+	return serializer.UploadCredential{
+		Policy:    policyEncoded,
+		Path:      savePath,
+		AccessKey: handler.Policy.AccessKey,
+		Token:     fmt.Sprintf("%x", signature),
+		KeyTime:   keyTime,
+	}, nil
+}

pkg/filesystem/filesystem.go

@@ -6,6 +6,7 @@ import (
 	"github.com/HFO4/cloudreve/models"
 	"github.com/HFO4/cloudreve/pkg/auth"
 	"github.com/HFO4/cloudreve/pkg/conf"
+	"github.com/HFO4/cloudreve/pkg/filesystem/driver/cos"
 	"github.com/HFO4/cloudreve/pkg/filesystem/driver/local"
 	"github.com/HFO4/cloudreve/pkg/filesystem/driver/onedrive"
 	"github.com/HFO4/cloudreve/pkg/filesystem/driver/oss"
@@ -16,7 +17,9 @@ import (
 	"github.com/HFO4/cloudreve/pkg/request"
 	"github.com/HFO4/cloudreve/pkg/serializer"
 	"github.com/gin-gonic/gin"
+	cossdk "github.com/tencentyun/cos-go-sdk-v5"
 	"io"
+	"net/http"
 	"net/url"
 	"sync"
 )
@@ -191,6 +194,19 @@ func (fs *FileSystem) DispatchHandler() error {
 			HTTPClient: request.HTTPClient{},
 		}
 		return err
+	case "cos":
+		u, _ := url.Parse(currentPolicy.Server)
+		b := &cossdk.BaseURL{BucketURL: u}
+		fs.Handler = cos.Driver{
+			Policy: currentPolicy,
+			Client: cossdk.NewClient(b, &http.Client{
+				Transport: &cossdk.AuthorizationTransport{
+					SecretID:  currentPolicy.AccessKey,
+					SecretKey: currentPolicy.SecretKey,
+				},
+			}),
+		}
+		return nil
 	default:
 		return ErrUnknownPolicyType
 	}

pkg/filesystem/upload.go

@@ -165,6 +165,7 @@ func (fs *FileSystem) GetUploadToken(ctx context.Context, path string, size uint
 	err = cache.Set(
 		"callback_"+callbackKey,
 		serializer.UploadSession{
+			Key:         callbackKey,
 			UID:         fs.User.ID,
 			PolicyID:    fs.User.GetPolicyID(),
 			VirtualPath: path,

pkg/serializer/upload.go

@@ -20,12 +20,16 @@ type UploadPolicy struct {
 type UploadCredential struct {
 	Token     string `json:"token"`
 	Policy    string `json:"policy"`
-	Path      string `json:"path"`
+	Path      string `json:"path"` // 存储路径
 	AccessKey string `json:"ak"`
+	KeyTime   string `json:"key_time,omitempty"` // COS用有效期
+	Callback  string `json:"callback,omitempty"` // 回调地址
+	Key       string `json:"key,omitempty"`      // 文件标识符，通常为回调key
 }
 
 // UploadSession 上传会话
 type UploadSession struct {
+	Key         string
 	UID         uint
 	PolicyID    uint
 	VirtualPath string