func (s *ObjectService) GetPresignedURL(ctx context.Context, httpMethod, key, ak, sk string, expired time.Duration, opt interface{}, signHost ...bool) (*url.URL, error)
type PresignedURLOptions struct {Query *url.ValuesHeader *http.Header}
Parameter | Type | Description |
httpMethod | string | HTTP request method |
key | string | Object key, a unique ID of an object in a bucket. For more information, see Object Overview > Object Key. (Note: The key does not need to be encoded.) |
ak | string | SecretId |
sk | string | SecretKey |
expired | time.Duration | Validity period of the signature |
opt | interface{} | Extension. We recommend you enter parameters of the *PresignedURLOptions type or nil. |
PresignedURLOptions | struct | Request parameters and headers to include in the signature |
Query | struct | Request parameters to include in the signature |
Header | struct | Request headers to include in the signature |
signHost | bool | Whether to include the host header in the signature. The default value is true. You can also choose not to include the host header in the signature, but the request may fail or vulnerabilities may occur. This parameter is optional. |
package mainimport ("context""github.com/tencentyun/cos-go-sdk-v5""net/http""net/url""os""strings""time")func main(){// Bucket name in the format of `BucketName-APPID` (`APPID` is required), which can be viewed in the COS console at https://console.tencentcloud.com/cos5/bucket.// Replace it with your region, which can be viewed in the COS console at https://console.tencentcloud.com/. For more information about regions, visit https://www.tencentcloud.com/document/product/436/6224.u, _ := url.Parse("https://examplebucket-1250000000.cos.ap-guangzhou.myqcloud.com")b := &cos.BaseURL{BucketURL: u}client := cos.NewClient(b, &http.Client{Transport: &cos.AuthorizationTransport{// Get the key from environment variables// Environment variable `SECRETID` refers to the user's `SecretId`, which can be viewed in the CAM console at https://console.tencentcloud.com/cam/capi.SecretID: os.Getenv("SECRETID"), // User `SecretId`. We recommend you use a sub-account key and follow the principle of least privilege to reduce risks. For information about how to obtain a sub-account key, visit https://www.tencentcloud.com/document/product/598/37140?from_cn_redirect=1.// Environment variable `SECRETKEY` refers to the user's `SecretKey`, which can be viewed in the CAM console at https://console.tencentcloud.com/cam/capi.SecretKey: os.Getenv("SECRETKEY"), // User `SecretKey`. We recommend you use a sub-account key and follow the principle of least privilege to reduce risks. For information about how to obtain a sub-account key, visit https://www.tencentcloud.com/document/product/598/37140?from_cn_redirect=1.},})ak := "SECRETID"sk := "SECRETKEY"name := "exampleobject"ctx := context.Background()f := strings.NewReader("test")// 1. Upload the object using the standard method._, err := client.Object.Put(ctx, name, f, nil)if err != nil{panic(err)}// Getting Pre-Signed URLspresignedURL, err := client.Object.GetPresignedURL(ctx, http.MethodPut, name, ak, sk, time.Hour, nil)if err != nil{panic(err)}// 2. Upload the object using a pre-signed URL.data := "test upload with presignedURL"f = strings.NewReader(data)req, err := http.NewRequest(http.MethodPut, presignedURL.String(), f)if err != nil{panic(err)}// You can configure request headers by yourself.req.Header.Set("Content-Type", "text/html")_, err = http.DefaultClient.Do(req)if err != nil{panic(err)}}
package mainimport ("bytes""context""errors""github.com/tencentyun/cos-go-sdk-v5""io/ioutil""net/http""net/url""os""time")func main(){// Bucket name in the format of `BucketName-APPID` (`APPID` is required), which can be viewed in the COS console at https://console.tencentcloud.com/cos5/bucket.// Replace it with your region, which can be viewed in the COS console at https://console.tencentcloud.com/. For more information about regions, visit https://www.tencentcloud.com/document/product/436/6224.u, _ := url.Parse("https://examplebucket-1250000000.cos.ap-guangzhou.myqcloud.com")b := &cos.BaseURL{BucketURL: u}client := cos.NewClient(b, &http.Client{Transport: &cos.AuthorizationTransport{// Get the key from environment variables// Environment variable `SECRETID` refers to the user's `SecretId`, which can be viewed in the CAM console at https://console.tencentcloud.com/cam/capi.SecretID: os.Getenv("SECRETID"), // User `SecretId`. We recommend you use a sub-account key and follow the principle of least privilege to reduce risks. For information about how to obtain a sub-account key, visit https://www.tencentcloud.com/document/product/598/37140?from_cn_redirect=1.// Environment variable `SECRETKEY` refers to the user's `SecretKey`, which can be viewed in the CAM console at https://console.tencentcloud.com/cam/capi.SecretKey: os.Getenv("SECRETKEY"), // User `SecretKey`. We recommend you use a sub-account key and follow the principle of least privilege to reduce risks. For information about how to obtain a sub-account key, visit https://www.tencentcloud.com/document/product/598/37140?from_cn_redirect=1.},})ak := "SECRETID"sk := "SECRETKEY"name := "exampleobject"ctx := context.Background()// 1. Download the object using the standard method.resp, err := client.Object.Get(ctx, name, nil)if err != nil{panic(err)}bs, _ := ioutil.ReadAll(resp.Body)resp.Body.Close()// Getting Pre-Signed URLspresignedURL, err := client.Object.GetPresignedURL(ctx, http.MethodGet, name, ak, sk, time.Hour, nil)if err != nil{panic(err)}// 2. Download the object using a pre-signed URL.resp2, err := http.Get(presignedURL.String())if err != nil{panic(err)}bs2, _ := ioutil.ReadAll(resp2.Body)resp2.Body.Close()if bytes.Compare(bs2, bs) != 0 {panic(errors.New("content is not consistent"))}}
package mainimport ("context""fmt""github.com/tencentyun/cos-go-sdk-v5""net/http""net/url""os""time""strings")// You can use tags to put the request parameters or request headers in the signature.type URLToken struct {SessionToken string `url:"x-cos-security-token,omitempty" header:"-"`}func main(){// Replace it with your temporary key.tak := os.Getenv("SECRETID")// User `SecretId`. We recommend you use a sub-account key and follow the principle of least privilege to reduce risks. For information about how to obtain a sub-account key, visit https://www.tencentcloud.com/document/product/598/37140?from_cn_redirect=1.tsk := os.Getenv("SECRETKEY")// User `SecretKey`. We recommend you use a sub-account key and follow the principle of least privilege to reduce risks. For information about how to obtain a sub-account key, visit https://www.tencentcloud.com/document/product/598/37140?from_cn_redirect=1.token := &URLToken{SessionToken: "<token>",}u, _ := url.Parse("https://examplebucket-1250000000.cos.ap-guangzhou.myqcloud.com")b := &cos.BaseURL{BucketURL: u}c := cos.NewClient(b, &http.Client{})name := "exampleobject"ctx := context.Background()// Method 1. Use “PresignedURLOptions” to configure “x-cos-security-token”.// You can add request parameters and request headers through “PresignedURLOptions”.opt := &cos.PresignedURLOptions{Query: &url.Values{},Header: &http.Header{},}opt.Query.Add("x-cos-security-token", "<token>")// Get the pre-signed URL.presignedURL, err := c.Object.GetPresignedURL(ctx, http.MethodPut, name, tak, tsk, time.Hour, opt)if err != nil{fmt.Printf("Error: %v\\n", err)return}// Upload the object using a pre-signed URL.data := "test upload with presignedURL"f := strings.NewReader(data)req, err := http.NewRequest(http.MethodPut, presignedURL.String(), f)if err != nil{fmt.Printf("Error: %v\\n", err)}_, err = http.DefaultClient.Do(req)if err != nil{fmt.Printf("Error: %v\\n", err)}// Method 2. Use tags to configure “x-cos-security-token”.// Get the pre-signed URL.presignedURL, err = c.Object.GetPresignedURL(ctx, http.MethodPut, name, tak, tsk, time.Hour, token)if err != nil{fmt.Printf("Error: %v\\n", err)return}f = strings.NewReader(data)req, err = http.NewRequest(http.MethodPut, presignedURL.String(), f)if err != nil{fmt.Printf("Error: %v\\n", err)}_, err = http.DefaultClient.Do(req)if err != nil{fmt.Printf("Error: %v\\n", err)}}
package mainimport ("context""fmt""github.com/tencentyun/cos-go-sdk-v5""net/http""net/url""os""time")// You can use tags to put the request parameters or request headers in the signature.type URLToken struct {SessionToken string `url:"x-cos-security-token,omitempty" header:"-"`}func main(){// Replace it with your temporary key.tak := os.Getenv("SECRETID") // User `SecretId`. We recommend you use a sub-account key and follow the principle of least privilege to reduce risks. For information about how to obtain a sub-account key, visit https://www.tencentcloud.com/document/product/598/37140?from_cn_redirect=1.tsk := os.Getenv("SECRETKEY") // User `SecretKey`. We recommend you use a sub-account key and follow the principle of least privilege to reduce risks. For information about how to obtain a sub-account key, visit https://www.tencentcloud.com/document/product/598/37140?from_cn_redirect=1.token := &URLToken{SessionToken: "<token>",}u, _ := url.Parse("https://examplebucket-1250000000.cos.ap-guangzhou.myqcloud.com")b := &cos.BaseURL{BucketURL: u}c := cos.NewClient(b, &http.Client{})name := "exampleobject"ctx := context.Background()// Method 1. Use “PresignedURLOptions” to configure “x-cos-security-token”.// You can add request parameters and request headers through “PresignedURLOptions”.opt := &cos.PresignedURLOptions{Query: &url.Values{},Header: &http.Header{},}opt.Query.Add("x-cos-security-token", "<token>")// Get the pre-signed URL.presignedURL, err := c.Object.GetPresignedURL(ctx, http.MethodGet, name, tak, tsk, time.Hour, opt)if err != nil{fmt.Printf("Error: %v\\n", err)return}// Access the object with the pre-signed URL.resp, err := http.Get(presignedURL.String())if err != nil{fmt.Printf("Error: %v\\n", err)}defer resp.Body.Close()fmt.Println(presignedURL.String())fmt.Printf("resp:%v\\n", resp)// Method 2. Use tags to configure “x-cos-security-token”.// Get the pre-signed URL.presignedURL, err = c.Object.GetPresignedURL(ctx, http.MethodGet, name, tak, tsk, time.Hour, token)if err != nil{fmt.Printf("Error: %v\\n", err)return}// Access the object with the pre-signed URL.resp, err = http.Get(presignedURL.String())if err != nil{fmt.Printf("Error: %v\\n", err)}defer resp.Body.Close()fmt.Println(presignedURL.String())fmt.Printf("resp:%v\\n", resp)}
package mainimport ("context""fmt""github.com/tencentyun/cos-go-sdk-v5""net/http""net/url""os""time")func main(){// Replace it with your keytak := os.Getenv("SECRETID") // User `SecretId`. We recommend you use a sub-account key and follow the principle of least privilege to reduce risks. For information about how to obtain a sub-account key, visit https://www.tencentcloud.com/document/product/598/37140?from_cn_redirect=1.tsk := os.Getenv("SECRETKEY") // User `SecretKey`. We recommend you use a sub-account key and follow the principle of least privilege to reduce risks. For information about how to obtain a sub-account key, visit https://www.tencentcloud.com/document/product/598/37140?from_cn_redirect=1.// Change it to the custom domain.u, _ := url.Parse("https://<custom domain>")b := &cos.BaseURL{BucketURL: u}c := cos.NewClient(b, &http.Client{})name := "exampleobject"ctx := context.Background()// Get the pre-signed URL.presignedURL, err := c.Object.GetPresignedURL(ctx, http.MethodGet, name, tak, tsk, time.Hour, nil)if err != nil{fmt.Printf("Error: %v\\n", err)return}// Access the object with the pre-signed URL.resp, err := http.Get(presignedURL.String())if err != nil{fmt.Printf("Error: %v\\n", err)}defer resp.Body.Close()fmt.Println(presignedURL.String())fmt.Printf("resp:%v\\n", resp)}
package mainimport ("context""fmt""github.com/tencentyun/cos-go-sdk-v5""net/http""net/url""os""time")func main(){// Replace it with your temporary key.tak := os.Getenv("SECRETID") // User `SecretId`. We recommend you use a sub-account key and follow the principle of least privilege to reduce risks. For information about how to obtain a sub-account key, visit https://www.tencentcloud.com/document/product/598/37140?from_cn_redirect=1.tsk := os.Getenv("SECRETKEY") // User `SecretKey`. We recommend you use a sub-account key and follow the principle of least privilege to reduce risks. For information about how to obtain a sub-account key, visit https://www.tencentcloud.com/document/product/598/37140?from_cn_redirect=1.u, _ := url.Parse("https://examplebucket-1250000000.cos.ap-guangzhou.myqcloud.com")b := &cos.BaseURL{BucketURL: u}c := cos.NewClient(b, &http.Client{})name := "exampleobject"ctx := context.Background()// You can add request parameters and request headers through “PresignedURLOptions”.opt := &cos.PresignedURLOptions{// HTTP request parameters, which should be the same as those passed to the actual request. This can prevent users from tampering with the HTTP request parameters.Query: &url.Values{},// HTTP request headers, which should be included in the actual request. This can prevent users from tampering with the HTTP request headers that are signed here.Header: &http.Header{},}// Add request parameters. The returned pre-signed URL will include the parameters added.opt.Query.Add("x-cos-security-token", "<token>")// Add request headers. The returned pre-signed URL only sets the request headers to the signature. Therefore, you still need to set the headers when issuing requests.opt.Header.Add("Content-Type", "text/html")// The SDK includes the `host` header in the signature by default. If the `signHost` parameter is not passed in or `SignHost` is `true`, the `host` header is included in the signature.// If `signHost` is `false`, the `host` header is not included in the signature, which may lead to request failure or security vulnerabilities.var signHost bool = true// Get the pre-signed URL with the signature containing `host`presignedURL, err := c.Object.GetPresignedURL(ctx, http.MethodPut, name, tak, tsk, time.Hour, opt, signHost)if err != nil{fmt.Printf("Error: %v\\n", err)return}// Access the object with the pre-signed URL.req, _ := http.NewRequest(http.MethodPut, presignedURL.String(), strings.NewReader("test"))// Set headers when issuing requests.req.Header.Set("Content-Type", "text/html")resp, err := http.DefaultClient.Do(req)if err != nil{fmt.Printf("Error: %v\\n", err)}defer resp.Body.Close()fmt.Println(presignedURL.String())fmt.Printf("resp:%v\\n", resp)}
Feedback