Examples with CORSRule com.aliyun.oss.model.SetBucketCORSRequest.CORSRule used on opensource projects

Example 1 with CORSRule

use of com.aliyun.oss.model.SetBucketCORSRequest.CORSRule in project aliyun-oss-java-sdk by aliyun.

the class CORSOperation method checkSetBucketCORSRequestValidity.

private static void checkSetBucketCORSRequestValidity(SetBucketCORSRequest setBucketCORSRequest) {
    assertParameterNotNull(setBucketCORSRequest, "setBucketCORSRequest");
    String bucketName = setBucketCORSRequest.getBucketName();
    assertStringNotNullOrEmpty(bucketName, "bucketName");
    ensureBucketNameValid(bucketName);
    List<CORSRule> corsRules = setBucketCORSRequest.getCorsRules();
    assertListNotNullOrEmpty(corsRules, "corsRules");
    for (CORSRule rule : setBucketCORSRequest.getCorsRules()) {
        assertListNotNullOrEmpty(rule.getAllowedOrigins(), "allowedOrigin");
        assertListNotNullOrEmpty(rule.getAllowedMethods(), "allowedMethod");
    }
}

Example 2 with CORSRule

use of com.aliyun.oss.model.SetBucketCORSRequest.CORSRule in project aliyun-oss-java-sdk by aliyun.

the class BucketCORSTest method testNormalSetBucketCORS.

@Test
public void testNormalSetBucketCORS() {
    final String bucketName = "normal-set-bucket-cors";
    try {
        ossClient.createBucket(bucketName);
        // Set bucket cors
        SetBucketCORSRequest request = new SetBucketCORSRequest(bucketName);
        CORSRule r0 = new CORSRule();
        r0.addAllowdOrigin("http://www.a.com");
        r0.addAllowdOrigin("http://www.b.com");
        r0.addAllowedMethod("GET");
        r0.addAllowedHeader("Authorization");
        r0.addExposeHeader("x-oss-test");
        r0.addExposeHeader("x-oss-test1");
        r0.setMaxAgeSeconds(100);
        request.addCorsRule(r0);
        ossClient.setBucketCORS(request);
        // Get bucket cors
        List<CORSRule> rules = ossClient.getBucketCORSRules(bucketName);
        r0 = rules.get(0);
        Assert.assertEquals(1, rules.size());
        Assert.assertEquals(2, r0.getAllowedOrigins().size());
        Assert.assertEquals(1, r0.getAllowedMethods().size());
        Assert.assertEquals(1, r0.getAllowedHeaders().size());
        Assert.assertEquals(2, r0.getExposeHeaders().size());
        Assert.assertEquals(100, r0.getMaxAgeSeconds().intValue());
        // Override existing bucket cors
        CORSRule r1 = new CORSRule();
        r1.addAllowdOrigin("*");
        r1.addAllowedMethod("GET");
        r1.addAllowedMethod("PUT");
        r1.addAllowedHeader("Authorization");
        request.clearCorsRules();
        request.addCorsRule(r1);
        ossClient.setBucketCORS(request);
        rules = ossClient.getBucketCORSRules(bucketName);
        r1 = rules.get(0);
        Assert.assertEquals(1, rules.size());
        Assert.assertEquals(1, r1.getAllowedOrigins().size());
        Assert.assertEquals(2, r1.getAllowedMethods().size());
        Assert.assertEquals(1, r1.getAllowedHeaders().size());
        // Delete bucket cors
        ossClient.deleteBucketCORSRules(bucketName);
    } catch (Exception e) {
        Assert.fail(e.getMessage());
    } finally {
        ossClient.deleteBucket(bucketName);
    }
}

Example 3 with CORSRule

use of com.aliyun.oss.model.SetBucketCORSRequest.CORSRule in project aliyun-oss-java-sdk by aliyun.

the class SecurityTokenTest method testBucketOperationsWithToken.

@SuppressWarnings("deprecation")
@Test
public void testBucketOperationsWithToken() throws JSONException {
    List<String> actions = new ArrayList<String>();
    actions.add("oss:ListBuckets");
    List<String> resources = new ArrayList<String>();
    resources.add("acs:oss:*:" + STS_USER + ":*");
    // List buckets with security token is not supported
    OSSClient sessionClient = createSessionClient(actions, resources);
    try {
        sessionClient.listBuckets();
    } catch (Exception e) {
        Assert.fail(e.getMessage());
    } finally {
        actions.clear();
        resources.clear();
        sessionClient.shutdown();
    }
    // Delete bucket if already exists
    final String bucketName = "test-bucket-operations-with-token";
    actions.add("oss:DeleteBucket");
    resources.add("acs:oss:*:" + STS_USER + ":" + bucketName);
    sessionClient = createSessionClient(actions, resources);
    try {
        sessionClient.deleteBucket(bucketName);
    } catch (OSSException oe) {
        Assert.assertEquals(OSSErrorCode.NO_SUCH_BUCKET, oe.getErrorCode());
    } catch (Exception e) {
        Assert.fail(e.getMessage());
    } finally {
        actions.clear();
        resources.clear();
        sessionClient.shutdown();
    }
    waitForCacheExpiration(2);
    // Put bucket with valid security token
    actions.add("oss:PutBucket");
    resources.add("acs:oss:*:" + STS_USER + ":" + bucketName);
    sessionClient = createSessionClient(actions, resources);
    try {
        sessionClient.createBucket(bucketName);
    } catch (Exception e) {
        Assert.fail(e.getMessage());
    } finally {
        actions.clear();
        resources.clear();
    }
    // Put unmatched bucket with valid security token
    String unmatchedBucketName = bucketName + DUMMY_SUFFIX;
    try {
        sessionClient.createBucket(unmatchedBucketName);
    } catch (OSSException e) {
        Assert.assertEquals(OSSErrorCode.ACCESS_DENIED, e.getErrorCode());
        Assert.assertTrue(e.getMessage().startsWith(SECURITY_TOKEN_ACCESS_DENIED_ERR));
    } finally {
        actions.clear();
        resources.clear();
    }
    // Put bucket with non-existent username && valid security token
    final String nonexistentUser = "non-existent-user";
    actions.add("oss:PutBucket");
    resources.add("acs:oss:*:" + nonexistentUser + ":" + bucketName);
    sessionClient = createSessionClient(actions, resources);
    try {
        sessionClient.createBucket(unmatchedBucketName);
    } catch (OSSException e) {
        Assert.assertEquals(OSSErrorCode.ACCESS_DENIED, e.getErrorCode());
        Assert.assertTrue(e.getMessage().startsWith(SECURITY_TOKEN_ACCESS_DENIED_ERR));
    } finally {
        actions.clear();
        resources.clear();
        sessionClient.shutdown();
    }
    // Allow anyone to trigger operations start with 'Put'
    final String anyone = "*";
    actions.add("oss:Put*");
    resources.add("acs:oss:*:" + anyone + ":" + bucketName);
    sessionClient = createSessionClient(actions, resources);
    try {
        sessionClient.createBucket(bucketName);
    } catch (Exception e) {
        Assert.fail(e.getMessage());
    } finally {
        actions.clear();
        resources.clear();
        sessionClient.shutdown();
    }
    // Put bucket acl
    actions.add("oss:PutBucketAcl");
    resources.add("acs:oss:*:" + STS_USER + ":" + bucketName);
    sessionClient = createSessionClient(actions, resources);
    try {
        sessionClient.setBucketAcl(bucketName, CannedAccessControlList.PublicRead);
    } catch (Exception e) {
        Assert.fail(e.getMessage());
    } finally {
        actions.clear();
        resources.clear();
    }
    try {
        sessionClient.getBucketAcl(bucketName);
    } catch (OSSException e) {
        Assert.assertEquals(OSSErrorCode.ACCESS_DENIED, e.getErrorCode());
        Assert.assertTrue(e.getMessage().startsWith(SECURITY_TOKEN_ACCESS_DENIED_ERR));
    } finally {
        actions.clear();
        resources.clear();
        sessionClient.shutdown();
    }
    // Get bucket acl
    actions.add("oss:GetBucketAcl");
    resources.add("acs:oss:*:" + STS_USER + ":" + bucketName);
    sessionClient = createSessionClient(actions, resources);
    try {
        AccessControlList returnedAcl = sessionClient.getBucketAcl(bucketName);
        Set<Grant> grants = returnedAcl.getGrants();
        Assert.assertEquals(1, grants.size());
        Grant grant = (Grant) grants.toArray()[0];
        Assert.assertEquals(GroupGrantee.AllUsers, grant.getGrantee());
        Assert.assertEquals(Permission.Read, grant.getPermission());
    } catch (Exception e) {
        Assert.fail(e.getMessage());
    } finally {
        actions.clear();
        resources.clear();
    }
    try {
        sessionClient.setBucketAcl(bucketName, CannedAccessControlList.Private);
    } catch (OSSException e) {
        Assert.assertEquals(OSSErrorCode.ACCESS_DENIED, e.getErrorCode());
        Assert.assertTrue(e.getMessage().startsWith(SECURITY_TOKEN_ACCESS_DENIED_ERR));
    } finally {
        actions.clear();
        resources.clear();
        sessionClient.shutdown();
    }
    // Put bucket logging
    final String targetPrefix = "bucket-logging-prefix";
    actions.add("oss:PutBucketLogging");
    resources.add("acs:oss:*:" + STS_USER + ":" + bucketName);
    sessionClient = createSessionClient(actions, resources);
    try {
        SetBucketLoggingRequest request = new SetBucketLoggingRequest(bucketName);
        request.setTargetBucket(bucketName);
        request.setTargetPrefix(targetPrefix);
        sessionClient.setBucketLogging(request);
    } catch (Exception e) {
        Assert.fail(e.getMessage());
    } finally {
        actions.clear();
        resources.clear();
    }
    try {
        sessionClient.getBucketLogging(bucketName);
    } catch (OSSException e) {
        Assert.assertEquals(OSSErrorCode.ACCESS_DENIED, e.getErrorCode());
        Assert.assertTrue(e.getMessage().startsWith(SECURITY_TOKEN_ACCESS_DENIED_ERR));
    } finally {
        actions.clear();
        resources.clear();
        sessionClient.shutdown();
    }
    // Get bucket logging
    actions.add("oss:GetBucketLogging");
    resources.add("acs:oss:*:" + STS_USER + ":" + bucketName);
    sessionClient = createSessionClient(actions, resources);
    try {
        BucketLoggingResult result = sessionClient.getBucketLogging(bucketName);
        Assert.assertEquals(bucketName, result.getTargetBucket());
        Assert.assertEquals(targetPrefix, result.getTargetPrefix());
    } catch (Exception e) {
        Assert.fail(e.getMessage());
    } finally {
        actions.clear();
        resources.clear();
    }
    try {
        SetBucketLoggingRequest request = new SetBucketLoggingRequest(bucketName);
        request.setTargetBucket(bucketName);
        request.setTargetPrefix(targetPrefix);
        sessionClient.setBucketLogging(request);
    } catch (OSSException e) {
        Assert.assertEquals(OSSErrorCode.ACCESS_DENIED, e.getErrorCode());
        Assert.assertTrue(e.getMessage().startsWith(SECURITY_TOKEN_ACCESS_DENIED_ERR));
    } finally {
        actions.clear();
        resources.clear();
        sessionClient.shutdown();
    }
    // Delete bucket logging
    actions.add("oss:DeleteBucketLogging");
    resources.add("acs:oss:*:" + STS_USER + ":" + bucketName);
    sessionClient = createSessionClient(actions, resources);
    try {
        sessionClient.deleteBucketLogging(bucketName);
    } catch (Exception e) {
        Assert.fail(e.getMessage());
    } finally {
        actions.clear();
        resources.clear();
        sessionClient.shutdown();
    }
    // Put bucket website
    final String indexDocument = "index.html";
    final String errorDocument = "error.html";
    actions.add("oss:PutBucketWebsite");
    resources.add("acs:oss:*:" + STS_USER + ":" + bucketName);
    sessionClient = createSessionClient(actions, resources);
    try {
        SetBucketWebsiteRequest request = new SetBucketWebsiteRequest(bucketName);
        request.setIndexDocument(indexDocument);
        request.setErrorDocument(errorDocument);
        sessionClient.setBucketWebsite(request);
    } catch (Exception e) {
        Assert.fail(e.getMessage());
    } finally {
        actions.clear();
        resources.clear();
        sessionClient.shutdown();
    }
    // Put bucket referer
    final String referer0 = "http://www.aliyun.com";
    final String referer1 = "https://www.aliyun.com";
    final String referer2 = "http://www.*.com";
    final String referer3 = "https://www.?.aliyuncs.com";
    actions.add("oss:PutBucketReferer");
    resources.add("acs:oss:*:" + STS_USER + ":" + bucketName);
    sessionClient = createSessionClient(actions, resources);
    try {
        // Set non-empty referer list
        BucketReferer r = new BucketReferer();
        List<String> refererList = new ArrayList<String>();
        refererList.add(referer0);
        refererList.add(referer1);
        refererList.add(referer2);
        refererList.add(referer3);
        r.setRefererList(refererList);
        sessionClient.setBucketReferer(bucketName, r);
    } catch (Exception e) {
        Assert.fail(e.getMessage());
    } finally {
        actions.clear();
        resources.clear();
        sessionClient.shutdown();
    }
    // Put bucket lifecycle
    final String ruleId0 = "delete obsoleted files";
    final String matchPrefix0 = "obsoleted/";
    final String ruleId1 = "delete temporary files";
    final String matchPrefix1 = "temporary/";
    actions.add("oss:PutBucketLifecycle");
    resources.add("acs:oss:*:" + STS_USER + ":" + bucketName);
    sessionClient = createSessionClient(actions, resources);
    try {
        SetBucketLifecycleRequest request = new SetBucketLifecycleRequest(bucketName);
        request.AddLifecycleRule(new LifecycleRule(ruleId0, matchPrefix0, RuleStatus.Enabled, 3));
        request.AddLifecycleRule(new LifecycleRule(ruleId1, matchPrefix1, RuleStatus.Enabled, DateUtil.parseIso8601Date("2022-10-12T00:00:00.000Z")));
        sessionClient.setBucketLifecycle(request);
    } catch (Exception e) {
        Assert.fail(e.getMessage());
    } finally {
        actions.clear();
        resources.clear();
        sessionClient.shutdown();
    }
    // Put bucket cors
    actions.add("oss:PutBucketCors");
    resources.add("acs:oss:*:" + STS_USER + ":" + bucketName);
    sessionClient = createSessionClient(actions, resources);
    try {
        SetBucketCORSRequest request = new SetBucketCORSRequest(bucketName);
        CORSRule r0 = new CORSRule();
        r0.addAllowdOrigin("http://www.a.com");
        r0.addAllowdOrigin("http://www.b.com");
        r0.addAllowedMethod("GET");
        r0.addAllowedHeader("Authorization");
        r0.addExposeHeader("x-oss-test");
        r0.addExposeHeader("x-oss-test1");
        r0.setMaxAgeSeconds(100);
        request.addCorsRule(r0);
        sessionClient.setBucketCORS(request);
    } catch (Exception e) {
        Assert.fail(e.getMessage());
    } finally {
        actions.clear();
        resources.clear();
        sessionClient.shutdown();
    }
    // List objects
    actions.add("oss:ListObjects");
    resources.add("acs:oss:*:" + STS_USER + ":" + bucketName);
    sessionClient = createSessionClient(actions, resources);
    try {
        ObjectListing objectListing = sessionClient.listObjects(bucketName);
        Assert.assertEquals(0, objectListing.getObjectSummaries().size());
        Assert.assertEquals(bucketName, objectListing.getBucketName());
        Assert.assertNull(objectListing.getDelimiter());
        Assert.assertNull(objectListing.getPrefix());
        Assert.assertNull(objectListing.getMarker());
        Assert.assertNull(objectListing.getNextMarker());
        Assert.assertFalse(objectListing.isTruncated());
    } catch (Exception e) {
        Assert.fail(e.getMessage());
    } finally {
        actions.clear();
        resources.clear();
        sessionClient.shutdown();
    }
    // Cleanup bucket if already exists
    actions.add("oss:DeleteBucket");
    resources.add("acs:oss:*:" + STS_USER + ":" + bucketName);
    sessionClient = createSessionClient(actions, resources);
    try {
        sessionClient.deleteBucket(bucketName);
    } catch (Exception e) {
        Assert.fail(e.getMessage());
    } finally {
        actions.clear();
        resources.clear();
        sessionClient.shutdown();
    }
}

Example 4 with CORSRule

use of com.aliyun.oss.model.SetBucketCORSRequest.CORSRule in project aliyun-oss-java-sdk by aliyun.

the class BucketCORSTest method testUnormalSetBucketCORS.

@Test
public void testUnormalSetBucketCORS() {
    final String bucketName = "unormal-set-bucket-cors";
    try {
        ossClient.createBucket(bucketName);
        // Set count of cors rules exceed MAX_CORS_RULE_LIMIT
        try {
            SetBucketCORSRequest request = new SetBucketCORSRequest(bucketName);
            CORSRule r = new CORSRule();
            for (int i = 0; i < MAX_CORS_RULE_LIMIT; i++) {
                request.addCorsRule(r);
            }
            request.addCorsRule(r);
            Assert.fail("Set bucket cors should not be successful");
        } catch (Exception e) {
            Assert.assertTrue(e instanceof IllegalArgumentException);
        }
        try {
            SetBucketCORSRequest request = new SetBucketCORSRequest(bucketName);
            CORSRule r = new CORSRule();
            List<CORSRule> rules = new ArrayList<CORSRule>();
            for (int i = 0; i < MAX_CORS_RULE_LIMIT; i++) {
                rules.add(r);
            }
            rules.add(r);
            request.setCorsRules(rules);
            Assert.fail("Set bucket cors should not be successful");
        } catch (Exception e) {
            Assert.assertTrue(e instanceof IllegalArgumentException);
        }
        // Miss required field 'AllowedOrigins'
        try {
            SetBucketCORSRequest request = new SetBucketCORSRequest(bucketName);
            CORSRule r = new CORSRule();
            r.addAllowedMethod("GET");
            r.addAllowedMethod("PUT");
            r.addAllowedHeader("Authorization");
            request.addCorsRule(r);
            Assert.fail("Set bucket cors should not be successful");
        } catch (Exception e) {
            Assert.assertTrue(e instanceof IllegalArgumentException);
        }
        // Miss required field 'AllowedMethods'
        try {
            SetBucketCORSRequest request = new SetBucketCORSRequest(bucketName);
            CORSRule r = new CORSRule();
            r.addAllowdOrigin("*");
            r.addAllowedHeader("Authorization");
            request.addCorsRule(r);
            Assert.fail("Set bucket cors should not be successful");
        } catch (Exception e) {
            Assert.assertTrue(e instanceof IllegalArgumentException);
        }
        // Fill more one asterisk wildcards in allowed origins
        try {
            SetBucketCORSRequest request = new SetBucketCORSRequest(bucketName);
            CORSRule r = new CORSRule();
            r.addAllowdOrigin("www.*.abc.*.com");
            r.addAllowedMethod("GET");
            r.addAllowedMethod("PUT");
            r.addAllowedHeader("Authorization");
            request.addCorsRule(r);
            Assert.fail("Set bucket cors should not be successful");
        } catch (Exception e) {
            Assert.assertTrue(e instanceof IllegalArgumentException);
        }
        // Unsupported method
        try {
            SetBucketCORSRequest request = new SetBucketCORSRequest(bucketName);
            CORSRule r = new CORSRule();
            r.addAllowdOrigin("*");
            r.addAllowedMethod("OPTIONS");
            r.addAllowedHeader("Authorization");
            request.addCorsRule(r);
            Assert.fail("Set bucket cors should not be successful");
        } catch (Exception e) {
            Assert.assertTrue(e instanceof IllegalArgumentException);
        }
        // Fill one asterisk wildcard in allowed origins
        try {
            SetBucketCORSRequest request = new SetBucketCORSRequest(bucketName);
            CORSRule r = new CORSRule();
            r.addAllowdOrigin("*");
            r.addAllowedMethod("GET");
            r.addAllowedHeader("Authorization");
            r.addExposeHeader("x-oss-*");
            request.addCorsRule(r);
            Assert.fail("Set bucket cors should not be successful");
        } catch (Exception e) {
            Assert.assertTrue(e instanceof IllegalArgumentException);
        }
    } catch (Exception e) {
        Assert.fail(e.getMessage());
    } finally {
        ossClient.deleteBucket(bucketName);
    }
}

Example 5 with CORSRule

use of com.aliyun.oss.model.SetBucketCORSRequest.CORSRule in project aliyun-oss-java-sdk by aliyun.

the class ResponseParsers method parseListBucketCORS.

/**
 * Unmarshall get bucket cors response body to cors rules.
 */
@SuppressWarnings("unchecked")
public static List<CORSRule> parseListBucketCORS(InputStream responseBody) throws ResponseParseException {
    try {
        Element root = getXmlRootElement(responseBody);
        List<CORSRule> corsRules = new ArrayList<CORSRule>();
        List<Element> corsRuleElems = root.getChildren("CORSRule");
        for (Element corsRuleElem : corsRuleElems) {
            CORSRule rule = new CORSRule();
            List<Element> allowedOriginElems = corsRuleElem.getChildren("AllowedOrigin");
            for (Element allowedOriginElement : allowedOriginElems) {
                rule.getAllowedOrigins().add(allowedOriginElement.getValue());
            }
            List<Element> allowedMethodElems = corsRuleElem.getChildren("AllowedMethod");
            for (Element allowedMethodElement : allowedMethodElems) {
                rule.getAllowedMethods().add(allowedMethodElement.getValue());
            }
            List<Element> allowedHeaderElems = corsRuleElem.getChildren("AllowedHeader");
            for (Element allowedHeaderElement : allowedHeaderElems) {
                rule.getAllowedHeaders().add(allowedHeaderElement.getValue());
            }
            List<Element> exposeHeaderElems = corsRuleElem.getChildren("ExposeHeader");
            for (Element exposeHeaderElement : exposeHeaderElems) {
                rule.getExposeHeaders().add(exposeHeaderElement.getValue());
            }
            Element maxAgeSecondsElem = corsRuleElem.getChild("MaxAgeSeconds");
            if (maxAgeSecondsElem != null) {
                rule.setMaxAgeSeconds(Integer.parseInt(maxAgeSecondsElem.getValue()));
            }
            corsRules.add(rule);
        }
        return corsRules;
    } catch (JDOMParseException e) {
        throw new ResponseParseException(e.getPartialDocument() + ": " + e.getMessage(), e);
    } catch (Exception e) {
        throw new ResponseParseException(e.getMessage(), e);
    }
}