初始化项目:添加后端代码、ThinkPHP框架、前端资源
This commit is contained in:
@@ -0,0 +1,108 @@
|
||||
<?php
|
||||
/*
|
||||
* Licensed to the Apache Software Foundation (ASF) under one
|
||||
* or more contributor license agreements. See the NOTICE file
|
||||
* distributed with this work for additional information
|
||||
* regarding copyright ownership. The ASF licenses this file
|
||||
* to you under the Apache License, Version 2.0 (the
|
||||
* "License"); you may not use this file except in compliance
|
||||
* with the License. You may obtain a copy of the License at
|
||||
*
|
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
*
|
||||
* Unless required by applicable law or agreed to in writing,
|
||||
* software distributed under the License is distributed on an
|
||||
* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
||||
* KIND, either express or implied. See the License for the
|
||||
* specific language governing permissions and limitations
|
||||
* under the License.
|
||||
*/
|
||||
|
||||
/**
|
||||
*
|
||||
*/
|
||||
define('ECS_ROLE_EXPIRE_TIME', 3600);
|
||||
|
||||
class EcsRamRoleService
|
||||
{
|
||||
|
||||
/**
|
||||
* @var IClientProfile
|
||||
*/
|
||||
private $clientProfile;
|
||||
/**
|
||||
* @var string|null
|
||||
*/
|
||||
private $lastClearTime = null;
|
||||
/**
|
||||
* @var string|null
|
||||
*/
|
||||
private $sessionCredential = null;
|
||||
|
||||
/**
|
||||
* EcsRamRoleService constructor.
|
||||
*
|
||||
* @param $clientProfile
|
||||
*/
|
||||
public function __construct($clientProfile)
|
||||
{
|
||||
$this->clientProfile = $clientProfile;
|
||||
}
|
||||
|
||||
/**
|
||||
* @return Credential|string|null
|
||||
* @throws ClientException
|
||||
*/
|
||||
public function getSessionCredential()
|
||||
{
|
||||
if ($this->lastClearTime != null && $this->sessionCredential != null) {
|
||||
$now = time();
|
||||
$elapsedTime = $now - $this->lastClearTime;
|
||||
if ($elapsedTime <= ECS_ROLE_EXPIRE_TIME * 0.8) {
|
||||
return $this->sessionCredential;
|
||||
}
|
||||
}
|
||||
|
||||
$credential = $this->assumeRole();
|
||||
|
||||
if ($credential == null) {
|
||||
return null;
|
||||
}
|
||||
|
||||
$this->sessionCredential = $credential;
|
||||
$this->lastClearTime = time();
|
||||
|
||||
return $credential;
|
||||
}
|
||||
|
||||
/**
|
||||
* @return Credential|null
|
||||
* @throws ClientException
|
||||
*/
|
||||
private function assumeRole()
|
||||
{
|
||||
$ecsRamRoleCredential = $this->clientProfile->getCredential();
|
||||
|
||||
$requestUrl =
|
||||
'http://100.100.100.200/latest/meta-data/ram/security-credentials/' . $ecsRamRoleCredential->getRoleName();
|
||||
|
||||
$httpResponse = HttpHelper::curl($requestUrl, 'GET', null, null);
|
||||
if (!$httpResponse->isSuccess()) {
|
||||
return null;
|
||||
}
|
||||
|
||||
$respObj = json_decode($httpResponse->getBody());
|
||||
|
||||
$code = $respObj->Code;
|
||||
if ($code != 'Success') {
|
||||
return null;
|
||||
}
|
||||
|
||||
$sessionAccessKeyId = $respObj->AccessKeyId;
|
||||
$sessionAccessKeySecret = $respObj->AccessKeySecret;
|
||||
$securityToken = $respObj->SecurityToken;
|
||||
|
||||
return new Credential($sessionAccessKeyId, $sessionAccessKeySecret, $securityToken);
|
||||
}
|
||||
|
||||
}
|
||||
Reference in New Issue
Block a user