138 lines
4.9 KiB
PHP
138 lines
4.9 KiB
PHP
<?php
|
|
|
|
/**
|
|
* LICENSE: Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*
|
|
* PHP version 5
|
|
*
|
|
* @category Microsoft
|
|
* @package WindowsAzure\Common\Internal\Authentication
|
|
* @author Azure PHP SDK <azurephpsdk@microsoft.com>
|
|
* @copyright 2012 Microsoft Corporation
|
|
* @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
|
|
* @link https://github.com/windowsazure/azure-sdk-for-php
|
|
*/
|
|
|
|
namespace WindowsAzure\Common\Internal\Authentication;
|
|
use WindowsAzure\Common\Internal\Authentication\StorageAuthScheme;
|
|
use WindowsAzure\Common\Internal\Resources;
|
|
use WindowsAzure\Common\Internal\Utilities;
|
|
|
|
/**
|
|
* Provides shared key authentication scheme for blob and queue. For more info
|
|
* check: http://msdn.microsoft.com/en-us/library/windowsazure/dd179428.aspx
|
|
*
|
|
* @category Microsoft
|
|
* @package WindowsAzure\Common\Internal\Authentication
|
|
* @author Azure PHP SDK <azurephpsdk@microsoft.com>
|
|
* @copyright 2012 Microsoft Corporation
|
|
* @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
|
|
* @version Release: 0.4.1_2015-03
|
|
* @link https://github.com/windowsazure/azure-sdk-for-php
|
|
*/
|
|
class SharedKeyAuthScheme extends StorageAuthScheme
|
|
{
|
|
protected $includedHeaders;
|
|
|
|
/**
|
|
* Constructor.
|
|
*
|
|
* @param string $accountName storage account name.
|
|
* @param string $accountKey storage account primary or secondary key.
|
|
*
|
|
* @return
|
|
* WindowsAzure\Common\Internal\Authentication\SharedKeyAuthScheme
|
|
*/
|
|
public function __construct($accountName, $accountKey)
|
|
{
|
|
parent::__construct($accountName, $accountKey);
|
|
|
|
$this->includedHeaders = array();
|
|
$this->includedHeaders[] = Resources::CONTENT_ENCODING;
|
|
$this->includedHeaders[] = Resources::CONTENT_LANGUAGE;
|
|
$this->includedHeaders[] = Resources::CONTENT_LENGTH;
|
|
$this->includedHeaders[] = Resources::CONTENT_MD5;
|
|
$this->includedHeaders[] = Resources::CONTENT_TYPE;
|
|
$this->includedHeaders[] = Resources::DATE;
|
|
$this->includedHeaders[] = Resources::IF_MODIFIED_SINCE;
|
|
$this->includedHeaders[] = Resources::IF_MATCH;
|
|
$this->includedHeaders[] = Resources::IF_NONE_MATCH;
|
|
$this->includedHeaders[] = Resources::IF_UNMODIFIED_SINCE;
|
|
$this->includedHeaders[] = Resources::RANGE;
|
|
}
|
|
|
|
/**
|
|
* Computes the authorization signature for blob and queue shared key.
|
|
*
|
|
* @param array $headers request headers.
|
|
* @param string $url reuqest url.
|
|
* @param array $queryParams query variables.
|
|
* @param string $httpMethod request http method.
|
|
*
|
|
* @see Blob and Queue Services (Shared Key Authentication) at
|
|
* http://msdn.microsoft.com/en-us/library/windowsazure/dd179428.aspx
|
|
*
|
|
* @return string
|
|
*/
|
|
protected function computeSignature($headers, $url, $queryParams, $httpMethod)
|
|
{
|
|
$canonicalizedHeaders = parent::computeCanonicalizedHeaders($headers);
|
|
|
|
$canonicalizedResource = parent::computeCanonicalizedResource(
|
|
$url, $queryParams
|
|
);
|
|
|
|
|
|
$stringToSign = array();
|
|
$stringToSign[] = strtoupper($httpMethod);
|
|
|
|
foreach ($this->includedHeaders as $header) {
|
|
$stringToSign[] = Utilities::tryGetValue($headers, $header);
|
|
}
|
|
|
|
if (count($canonicalizedHeaders) > 0) {
|
|
$stringToSign[] = implode("\n", $canonicalizedHeaders);
|
|
}
|
|
|
|
$stringToSign[] = $canonicalizedResource;
|
|
$stringToSign = implode("\n", $stringToSign);
|
|
|
|
return $stringToSign;
|
|
}
|
|
|
|
/**
|
|
* Returns authorization header to be included in the request.
|
|
*
|
|
* @param array $headers request headers.
|
|
* @param string $url reuqest url.
|
|
* @param array $queryParams query variables.
|
|
* @param string $httpMethod request http method.
|
|
*
|
|
* @see Specifying the Authorization Header section at
|
|
* http://msdn.microsoft.com/en-us/library/windowsazure/dd179428.aspx
|
|
*
|
|
* @return string
|
|
*/
|
|
public function getAuthorizationHeader($headers, $url, $queryParams, $httpMethod)
|
|
{
|
|
$signature = $this->computeSignature(
|
|
$headers, $url, $queryParams, $httpMethod
|
|
);
|
|
|
|
return 'SharedKey ' . $this->accountName . ':' . base64_encode(
|
|
hash_hmac('sha256', $signature, base64_decode($this->accountKey), true)
|
|
);
|
|
}
|
|
}
|
|
|
|
|