纯JavaScript应用程序+ Amazon S3？ [英] Pure Javascript app + Amazon S3?

问题描述

我想要确认或反驳以下内容：

对于我目前为止阅读的内容，无法编写只有javascript的网络应用程序 - 没有服务器端逻辑 - 由Amazon S3提供，如果您需要为每个客户端拥有多个客户端和私有数据，那么它们也只将数据存储到S3。

我看到的问题是每个Ajax调用所需的授权头，这将迫使我把签名（和我的AWS ID）在页面源中供每个人看到。

正确或我误解了文档？

是否有解决方法？

解决方案

>总之，您是正确的。

如果您的AWS金钥在客户端以任何方式结束，您就会遇到麻烦。

---

一个可能的解决方案是让用户指定他们的 AWS密钥来存储他们的数据。 p>

I'm looking to confirm or refute the following:

For what I have read so far it is not possible to write a web application with only javascript -- no server side logic -- served from Amazon S3 that also store data only to S3 if you need to have multiple clients with private data per client.

The issue I see is the Authorization header required for every Ajax call that would force me to put the signature (and my AWS id) right there in the page source for everybody to see.

Is that correct or I misunderstood the docs?

Are there workarounds?

解决方案

In short, you are correct.

If your AWS key ends-up in any way on the client-side, you are in trouble.

---

A possible solution is, of course, to have the user specify their AWS key for storing their data.

这篇关于纯JavaScript应用程序+ Amazon S3？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！