阿里OSS前端直传

第一次写博客，如有错误请多多指教。

先上代码吧：

 ossUpload = function (file, fun, funParameter) {
     //第一此请求后台服务器获取认证请求
     $.ajax({
         url: "/UEditor/GetSecurityToken",
         type: "post",
         success: function (data) {
             var access = JSON.parse(data);
             console.log(access);
             let host = access.Host;
             var myDate = new Date().format("yyyyMMddhhmmss");
             var policyBase64 = Base64.encode(JSON.stringify(myDate))
             var name = Base64.encode(JSON.stringify(myDate))
             var name = Crypto.HMAC(Crypto.SHA1, policyBase64, name);
             var g_object_name = access.Object_name + "/" + name+"."+file.type.split('/')[1]
             var request = new FormData();
             request.append('id', "file_0");
             request.append("OSSAccessKeyId", access.AccessKeyId); //Bucket 拥有者的Access Key Id。
             request.append("policy", access.Policy); //policy规定了请求的表单域的合法性
             request.append("Signature", access.Signature); //根据Access Key Secret和policy计算的签名信息，OSS验证该签名信息从而验证该Post请求的合法性
             request.append('x-oss-security-token', access.SecurityToken);
             //---以上都是阿里的认证策略
             request.append("key", g_object_name); //文件名字，可设置路径
             request.append("success_action_status", '200'); // 让服务端返回200,不然，默认会返回204
             request.append('file', file); //需要上传的文件 file
             console.log(request);
             //正式上传请求
             $.ajax({
                 url: host, //上传阿里地址
                 data: request,
                 processData: false, //默认true，设置为 false，不需要进行序列化处理
                 cache: false, //设置为false将不会从浏览器缓存中加载请求信息
                 async: false, //发送同步请求
                 contentType: false, //避免服务器不能正常解析文件---------具体的可以查下这些参数的含义
                 dataType: 'xml', //不涉及跨域  写json即可
                 type: 'post',
                 success: fun(funParameter, host, g_object_name),
                 error: function (returndata) {
                     console.log(arguments)
                     alert("上传图片出错", false);
                 }
             });
         }
     })
 }
 //格式化时间
 Date.prototype.format = function (fmt) {
     var o = {
         "M+": this.getMonth() + 1,                 //月份
         "d+": this.getDate(),                    //日
         "h+": this.getHours(),                   //小时
         "m+": this.getMinutes(),                 //分
         "s+": this.getSeconds(),                 //秒
         "q+": Math.floor((this.getMonth() + 3) / 3), //季度
         "S": this.getMilliseconds()             //毫秒
     };
     if (/(y+)/.test(fmt)) {
         fmt = fmt.replace(RegExp.$1, (this.getFullYear() + "").substr(4 - RegExp.$1.length));
     }
     for (var k in o) {
         if (new RegExp("(" + k + ")").test(fmt)) {
             fmt = fmt.replace(RegExp.$1, (RegExp.$1.length == 1) ? (o[k]) : (("00" + o[k]).substr(("" + o[k]).length)));
         }
     }
     return fmt;
 }

上传用的是sts上传还需要在阿里云进行一系列的授权管理，最后得到AccessKeyId，AccessKeySecret用来请求已经授权的角色（RoleArn）当然还需要REGIONID(地区对应ID 例：cn-beijing)，ENDPOINT(请求接口 例：sts.cn-beijing.aliyuncs.com)

这一步sts请求是在后台进行的我后台用的是.net core,还需要引用aliyun-net-sdk-sts上一份后端的代码

  public class AliyunAcsStsConfig
     {
         /// <summary>
         /// 地区
         /// </summary>
         public string REGIONID { get; set; }
         /// <summary>
         /// 访问阿里云的地址
         /// </summary>
         public string ENDPOINT { get; set; }
         /// <summary>
         /// 配置的ram
         /// </summary>
         public string RoleArn { get; set; }
         /// <summary>
         /// 会话的名称可自定义
         /// </summary>
         public string RoleSessionName { get; set; }
         /// <summary>
         /// 该权限用户的密码
         /// </summary>
         public string AccessKeySecret { get; set; }
         /// <summary>
         /// 该权限的用户ID
         /// </summary>
         public string AccessKeyId { get; set; }
         /// <summary>
         /// 上传路径
         /// https://Bucket名称.oss-cn-beijing.aliyuncs.com
         /// </summary>
         public string upload { get; set; }
         /// <summary>
         /// 文件存储路径
         /// ***/****/
         /// </summary>
         public string path { get; set; }
     }     

 private readonly UEditorService _ueditorService;
        private readonly AliyunAcsStsConfig stsConfig;
        public UEditorController(UEditorService ueditorService, IOptions<AliyunAcsStsConfig> stsConfig)
        {
            this._ueditorService = ueditorService;
            this.stsConfig = stsConfig.Value;
        }

 string REGIONID = stsConfig.REGIONID;
            string ENDPOINT = stsConfig.ENDPOINT;
            // 构建一个 Aliyun Client, 用于发起请求
            // 构建Aliyun Client时需要设置AccessKeyId和AccessKeySevcret
            DefaultProfile.AddEndpoint(REGIONID, REGIONID, "Sts", ENDPOINT);
            IClientProfile profile = DefaultProfile.GetProfile(REGIONID, stsConfig.AccessKeyId, stsConfig.AccessKeySecret);
            DefaultAcsClient client = new DefaultAcsClient(profile);
            // 构造AssumeRole请求
            AssumeRoleRequest request = new AssumeRoleRequest();
            request.AcceptFormat = FormatType.JSON;
            // 指定角色Arn
            request.RoleArn = stsConfig.RoleArn;
            request.RoleSessionName = stsConfig.RoleSessionName;
            // 可以设置Token有效期，可选参数，默认3600秒；
            // request.DurationSeconds = 3600;
            // 可以设置Token的附加Policy，可以在获取Token时，通过额外设置一个Policy进一步减小Token的权限；
            // request.Policy="<policy-content>"
            String dt = DateTime.Now.AddMinutes(5).ToString("yyyy-MM-ddTHH:mm:ss.000Z");
            object[,] ob = { { "content-length-range", 0, 1048576000 } };
            AssumeRoleResponse response = client.GetAcsResponse(request);
            ImgUploadAccess access = new ImgUploadAccess();
            access.AccessKeyId = response.Credentials.AccessKeyId;
            access.AccessKeySecret = response.Credentials.AccessKeySecret;
            access.SecurityToken = response.Credentials.SecurityToken;
            string str = JsonConvert.SerializeObject(new Policy
            {
                expiration=dt,
                conditions=ob
            });
            byte[] b = Encoding.Default.GetBytes(str);
            string base64 = Convert.ToBase64String(b);
            HMACSHA1 hmacsha1 = new HMACSHA1();
            hmacsha1.Key= Encoding.UTF8.GetBytes(access.AccessKeySecret);
            byte[] hashBytes = hmacsha1.ComputeHash(Encoding.UTF8.GetBytes(base64));
            access.Policy = base64;
            access.Signature =Convert.ToBase64String(hashBytes);
            access.Object_name = stsConfig.path+DateTime.Now.ToString("yyyyMM");
            access.Host = stsConfig.imgupload;
            return JsonConvert.SerializeObject(access);

   public class ImgUploadAccess
     {
         public string AccessKeyId { get; set; }
         public string AccessKeySecret { get; set; }
         public string SecurityToken { get; set; }
         public string Host { get; set; }
         public string Signature { get; set; }
         public string Policy { get; set; }
         public string Object_name { get; set; }
     }
     public class Policy
     {
         public string expiration { get; set; }
         public object[,] conditions { get; set; }
     }

这样上传功能基本上搞定了