org.apache.inlong.sort.filesystem.shaded.com.amazonaws.auth.presign.PresignerFacade Maven / Gradle / Ivy
/*
* Copyright 2011-2022 Amazon.com, Inc. or its affiliates. All Rights Reserved.
*
* Licensed under the Apache License, Version 2.0 (the "License").
* You may not use this file except in compliance with the License.
* A copy of the License is located at
*
* http://aws.amazon.com/apache2.0
*
* or in the "license" file accompanying this file. This file is distributed
* on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
* express or implied. See the License for the specific language governing
* permissions and limitations under the License.
*/
package com.amazonaws.auth.presign;
import com.amazonaws.AmazonWebServiceRequest;
import com.amazonaws.Request;
import com.amazonaws.annotation.Immutable;
import com.amazonaws.annotation.SdkProtectedApi;
import com.amazonaws.auth.AWSCredentialsProvider;
import com.amazonaws.auth.Presigner;
import com.amazonaws.internal.auth.SignerProvider;
import com.amazonaws.internal.auth.SignerProviderContext;
import com.amazonaws.util.CredentialUtils;
import com.amazonaws.util.RuntimeHttpUtils;
import java.net.URL;
import java.util.Date;
import java.util.List;
import java.util.Map;
/**
* Really thin facade over {@link Presigner} to deal with some common concerns like credential resolution, adding custom headers
* and query params to be included in signing, and conversion to a usable URL.
*/
@Immutable
@SdkProtectedApi
public final class PresignerFacade {
private final AWSCredentialsProvider credentialsProvider;
private final SignerProvider signerProvider;
public PresignerFacade(PresignerParams presignerParams) {
this.credentialsProvider = presignerParams.credentialsProvider();
this.signerProvider = presignerParams.signerProvider();
}
public URL presign(Request request, Date expirationDate) {
final Presigner presigner = (Presigner) signerProvider.getSigner(SignerProviderContext.builder()
.withIsRedirect(false)
.withRequest(request)
.withUri(request.getEndpoint())
.build());
if (request.getOriginalRequest() != null) {
addCustomQueryParams(request);
addCustomHeaders(request);
}
final AWSCredentialsProvider credentialsProvider = resolveCredentials(request);
presigner.presignRequest(request, credentialsProvider.getCredentials(), expirationDate);
return RuntimeHttpUtils.convertRequestToUrl(request, true, false);
}
private void addCustomQueryParams(Request request) {
final Map> queryParameters = request.getOriginalRequest().getCustomQueryParameters();
if (queryParameters == null || queryParameters.isEmpty()) {
return;
}
for (Map.Entry> param : queryParameters.entrySet()) {
request.addParameters(param.getKey(), param.getValue());
}
}
private void addCustomHeaders(Request request) {
final Map headers = request.getOriginalRequest().getCustomRequestHeaders();
if (headers == null || headers.isEmpty()) {
return;
}
for (Map.Entry header : headers.entrySet()) {
request.addHeader(header.getKey(), header.getValue());
}
}
private AWSCredentialsProvider resolveCredentials(Request request) {
return CredentialUtils.getCredentialsProvider(request.getOriginalRequest(), this.credentialsProvider);
}
/**
* Empty request object useful for setting request level credentials without having the user facing presiging request extend
* from {@link AmazonWebServiceRequest}.
*/
public static class PresigningRequest extends AmazonWebServiceRequest {
public PresigningRequest withRequestCredentialsProvider(AWSCredentialsProvider credentialsProvider) {
setRequestCredentialsProvider(credentialsProvider);
return this;
}
}
}