69 lines
2.1 KiB
PHP
69 lines
2.1 KiB
PHP
<?php
|
|
|
|
namespace Aws\S3;
|
|
|
|
use Aws\Common\Exception\RuntimeException;
|
|
use Guzzle\Common\Event;
|
|
use Guzzle\Service\Command\CommandInterface;
|
|
use Symfony\Component\EventDispatcher\EventSubscriberInterface;
|
|
|
|
/**
|
|
* This listener simplifies the SSE-C process by encoding and hashing the key.
|
|
*/
|
|
class SseCpkListener implements EventSubscriberInterface
|
|
{
|
|
public static function getSubscribedEvents()
|
|
{
|
|
return array('command.before_prepare' => 'onCommandBeforePrepare');
|
|
}
|
|
|
|
public function onCommandBeforePrepare(Event $event)
|
|
{
|
|
/** @var CommandInterface $command */
|
|
$command = $event['command'];
|
|
|
|
// Allows only HTTPS connections when using SSE-C
|
|
if ($command['SSECustomerKey'] ||
|
|
$command['CopySourceSSECustomerKey']
|
|
) {
|
|
$this->validateScheme($command);
|
|
}
|
|
|
|
// Prepare the normal SSE-CPK headers
|
|
if ($command['SSECustomerKey']) {
|
|
$this->prepareSseParams($command);
|
|
}
|
|
|
|
// If it's a copy operation, prepare the SSE-CPK headers for the source.
|
|
if ($command['CopySourceSSECustomerKey']) {
|
|
$this->prepareSseParams($command, true);
|
|
}
|
|
}
|
|
|
|
private function validateScheme(CommandInterface $command)
|
|
{
|
|
if ($command->getClient()->getConfig('scheme') !== 'https') {
|
|
throw new RuntimeException('You must configure your S3 client to '
|
|
. 'use HTTPS in order to use the SSE-C features.');
|
|
}
|
|
}
|
|
|
|
private function prepareSseParams(
|
|
CommandInterface $command,
|
|
$isCopy = false
|
|
) {
|
|
$prefix = $isCopy ? 'CopySource' : '';
|
|
|
|
// Base64 encode the provided key
|
|
$key = $command[$prefix . 'SSECustomerKey'];
|
|
$command[$prefix . 'SSECustomerKey'] = base64_encode($key);
|
|
|
|
// Base64 the provided MD5 or, generate an MD5 if not provided
|
|
if ($md5 = $command[$prefix . 'SSECustomerKeyMD5']) {
|
|
$command[$prefix . 'SSECustomerKeyMD5'] = base64_encode($md5);
|
|
} else {
|
|
$command[$prefix . 'SSECustomerKeyMD5'] = base64_encode(md5($key, true));
|
|
}
|
|
}
|
|
}
|