Amazon CloudFront 预签名从版本 1 到版本 2 的更改 - AWS SDK for Java 2.x
高级别更改API 更改

Amazon CloudFront 预签名从版本 1 到版本 2 的更改

本主题详细介绍了 Amazon CloudFront 从版本 1（v1）到版本 2（v2）的更改。

高级别更改

更改 v1 v2

Maven 依赖项

 
<dependencyManagement>
    <dependencies>
        <dependency>
            <groupId>com.amazonaws</groupId>
            <artifactId>aws-java-sdk-bom</artifactId>
            <version>1.12.5871</version>
            <type>pom</type>
            <scope>import</scope>
        </dependency>
    </dependencies>
</dependencyManagement>
<dependencies>
    <dependency>  
        <groupId>com.amazonaws</groupId>
        <artifactId>cloudfront</artifactId>
    </dependency>
</dependencies>
 
<dependencyManagement>
    <dependencies>
        <dependency>
            <groupId>software.amazon.awssdk</groupId>
            <artifactId>bom</artifactId>
            <version>2.27.212</version>
            <type>pom</type>
            <scope>import</scope>
        </dependency>
    </dependencies>
</dependencyManagement>
<dependencies>
    <dependency>
        <groupId>software.amazon.awssdk</groupId>
        <artifactId>cloudfront</artifactId>
    </dependency>
</dependencies>
软件包名称 com.amazonaws.services.cloudfront software.amazon.awssdk.services.cloudfront
类名

CloudFrontUrlSigner

CloudFrontCookieSigner

CloudFrontUtilities

SignedUrl

CannedSignerRequest

CustomSignerRequest

1 最新版本。2 最新版本。

API 更改

行为 v1 v2
构建标准请求 参数直接传递给 API。 
CannedSignerRequest cannedRequest =
      CannedSignerRequest.builder()
                         .resourceUrl(resourceUrl)
                         .privateKey(privateKey)
                         .keyPairId(keyPairId)
                         .expirationDate(expirationDate)
                         .build();
构建自定义请求 参数直接传递给 API。 
CustomSignerRequest customRequest =
      CustomSignerRequest.builder()
                         .resourceUrl(resourceUrl)
                         .resourceUrlPattern(resourceUrlPattern)
                         .privateKey(keyFile)
                         .keyPairId(keyPairId)
                         .expirationDate(expirationDate)
                         .activeDate(activeDate)
                         .ipRange(ipRange)
                         .build();
生成签名 URL（标准） 
String signedUrl =
  CloudFrontUrlSigner.getSignedURLWithCannedPolicy(
    resourceUrl, keyPairId, privateKey, expirationDate);
 
CloudFrontUtilities cloudFrontUtilities =
    CloudFrontUtilities.create();

SignedUrl signedUrl =        
    cloudFrontUtilities.getSignedUrlWithCannedPolicy(cannedRequest);

String url = signedUrl.url();
生成签名 Cookie（自定义） 
CookiesForCustomPolicy cookies =
    CloudFrontCookieSigner.getCookiesForCustomPolicy(
        resourceUrl, privateKey, keyPairId, expirationDate, 
        activeDate, ipRange);

CloudFrontUtilities cloudFrontUtilities =
    CloudFrontUtilities.create();

CookiesForCustomPolicy cookies =
     cloudFrontUtilities.getCookiesForCustomPolicy(customRequest);

v2 中重构的 Cookie 标头

在 Java v1 中，Java SDK 以 Map.Entry<String, String> 形式提供 Cookie 标头。

Map.Entry<String, String> signatureMap = cookies.getSignature();
String signatureKey = signatureMap.getKey(); // "CloudFront-Signature"
String signatureValue = signatureMap.getValue(); // "[SIGNATURE_VALUE]"

Java v2 SDK 以单个 String 形式提供整个标头。

String signatureHeaderValue = cookies.signatureHeaderValue(); // "CloudFront-Signature=[SIGNATURE_VALUE]"