具有凭证错误的S3存储桶 [英] S3 bucket with credentials error

问题描述

我无法将流星弹弓组件与带有临时AWS凭证的 S3 组件一起使用.调用方法"slingshot/uploadRequest" InvalidClientTokenId时，我始终收到错误 Exception:请求中包含的安全令牌无效.

I'm having trouble using the meteor slingshot component with the S3 with temporary AWS Credentials component. I keep getting the error Exception while invoking method 'slingshot/uploadRequest' InvalidClientTokenId: The security token included in the request is invalid.

绝对不知道我在做什么错.如果我在没有凭据的情况下正常使用弹弓，则可以正常工作.

Absolutely no idea what I'm doing wrong. If I use slingshot normally without credentials it works fine.

import { Meteor } from 'meteor/meteor';
import moment from 'moment';
const cryptoRandomString = require('crypto-random-string');

var AWS = require('aws-sdk');

var sts = new AWS.STS();

Slingshot.createDirective('UserProfileResumeUpload', Slingshot.S3Storage.TempCredentials, {
  bucket: 'mybuckname', // change this to your s3's bucket name
  region: 'ap-southeast-2',
  acl: 'private',

  temporaryCredentials: Meteor.wrapAsync(function (expire, callback) {
    //AWS dictates that the minimum duration must be 900 seconds:
    var duration = Math.max(Math.round(expire / 1000), 900);

    sts.getSessionToken({
        DurationSeconds: duration
    }, function (error, result) {
        callback(error, result && result.Credentials);
    });
  }),

  authorize: function () {
    //Deny uploads if user is not logged in.
    if (!this.userId) {
      const message = 'Please login before posting files';
      throw new Meteor.Error('Login Required', message);
    }

    return true;
  },

  key: function () {
    return 'mydirectory' + '/' + cryptoRandomString(10) + moment().valueOf();
  }
});

路径: Settings.json

{
  "AWSAccessKeyId": "myAWSKEYID",
  "AWSSecretAccessKey": "MyAWSSeceretAccessKey"
}

推荐答案

我已经在服务器端完成了这样的事情:

I've done it in server side like this :

Slingshot.createDirective("UserProfileResumeUpload", Slingshot.S3Storage, {
  AWSAccessKeyId: Meteor.settings.AWS.AccessKeyId,
  AWSSecretAccessKey: Meteor.settings.AWS.SecretAccessKey,
  bucket: 'mybuckname', // change this to your s3's bucket name
  region: 'ap-southeast-2',
  acl: 'private',
  ...
}

和settings.json

and in settings.json

{
"AWS":  {
  "AccessKeyId": "myAWSKEYID",
  "SecretAccessKey": "MyAWSSeceretAccessKey" 
 }
}

这篇关于具有凭证错误的S3存储桶的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！