|
1 <?php |
|
2 /** |
|
3 * Zend Framework |
|
4 * |
|
5 * LICENSE |
|
6 * |
|
7 * This source file is subject to the new BSD license that is bundled |
|
8 * with this package in the file LICENSE.txt. |
|
9 * It is also available through the world-wide-web at this URL: |
|
10 * http://framework.zend.com/license/new-bsd |
|
11 * If you did not receive a copy of the license and are unable to |
|
12 * obtain it through the world-wide-web, please send an email |
|
13 * to license@zend.com so we can send you a copy immediately. |
|
14 * |
|
15 * @category Zend |
|
16 * @package Zend_Service_WindowsAzure |
|
17 * @copyright Copyright (c) 2005-2010 Zend Technologies USA Inc. (http://www.zend.com) |
|
18 * @license http://framework.zend.com/license/new-bsd New BSD License |
|
19 * @version $Id: SharedKeyLite.php 22773 2010-08-03 07:18:27Z maartenba $ |
|
20 */ |
|
21 |
|
22 /** |
|
23 * @see Zend_Service_WindowsAzure_Credentials_CredentialsAbstract |
|
24 */ |
|
25 require_once 'Zend/Service/WindowsAzure/Credentials/CredentialsAbstract.php'; |
|
26 |
|
27 /** |
|
28 * @see Zend_Service_WindowsAzure_Storage |
|
29 */ |
|
30 require_once 'Zend/Service/WindowsAzure/Storage.php'; |
|
31 |
|
32 /** |
|
33 * @see Zend_Service_WindowsAzure_Credentials_SharedKey |
|
34 */ |
|
35 require_once 'Zend/Service/WindowsAzure/Credentials/SharedKey.php'; |
|
36 |
|
37 /** |
|
38 * @see Zend_Service_WindowsAzure_Credentials_Exception |
|
39 */ |
|
40 require_once 'Zend/Service/WindowsAzure/Credentials/Exception.php'; |
|
41 |
|
42 /** |
|
43 * @category Zend |
|
44 * @package Zend_Service_WindowsAzure |
|
45 * @copyright Copyright (c) 2005-2010 Zend Technologies USA Inc. (http://www.zend.com) |
|
46 * @license http://framework.zend.com/license/new-bsd New BSD License |
|
47 */ |
|
48 class Zend_Service_WindowsAzure_Credentials_SharedKeyLite |
|
49 extends Zend_Service_WindowsAzure_Credentials_CredentialsAbstract |
|
50 { |
|
51 /** |
|
52 * Sign request URL with credentials |
|
53 * |
|
54 * @param string $requestUrl Request URL |
|
55 * @param string $resourceType Resource type |
|
56 * @param string $requiredPermission Required permission |
|
57 * @return string Signed request URL |
|
58 */ |
|
59 public function signRequestUrl( |
|
60 $requestUrl = '', |
|
61 $resourceType = Zend_Service_WindowsAzure_Storage::RESOURCE_UNKNOWN, |
|
62 $requiredPermission = Zend_Service_WindowsAzure_Credentials_CredentialsAbstract::PERMISSION_READ |
|
63 ) { |
|
64 return $requestUrl; |
|
65 } |
|
66 |
|
67 /** |
|
68 * Sign request headers with credentials |
|
69 * |
|
70 * @param string $httpVerb HTTP verb the request will use |
|
71 * @param string $path Path for the request |
|
72 * @param string $queryString Query string for the request |
|
73 * @param array $headers x-ms headers to add |
|
74 * @param boolean $forTableStorage Is the request for table storage? |
|
75 * @param string $resourceType Resource type |
|
76 * @param string $requiredPermission Required permission |
|
77 * @param mixed $rawData Raw post data |
|
78 * @return array Array of headers |
|
79 */ |
|
80 public function signRequestHeaders( |
|
81 $httpVerb = Zend_Http_Client::GET, |
|
82 $path = '/', |
|
83 $queryString = '', |
|
84 $headers = null, |
|
85 $forTableStorage = false, |
|
86 $resourceType = Zend_Service_WindowsAzure_Storage::RESOURCE_UNKNOWN, |
|
87 $requiredPermission = Zend_Service_WindowsAzure_Credentials_CredentialsAbstract::PERMISSION_READ, |
|
88 $rawData = null |
|
89 ) { |
|
90 // Table storage? |
|
91 if (!$forTableStorage) { |
|
92 throw new Zend_Service_WindowsAzure_Credentials_Exception('The Windows Azure SDK for PHP does not support SharedKeyLite authentication on blob or queue storage. Use SharedKey authentication instead.'); |
|
93 } |
|
94 |
|
95 // Determine path |
|
96 if ($this->_usePathStyleUri) { |
|
97 $path = substr($path, strpos($path, '/')); |
|
98 } |
|
99 |
|
100 // Determine query |
|
101 $queryString = $this->_prepareQueryStringForSigning($queryString); |
|
102 |
|
103 // Build canonicalized resource string |
|
104 $canonicalizedResource = '/' . $this->_accountName; |
|
105 if ($this->_usePathStyleUri) { |
|
106 $canonicalizedResource .= '/' . $this->_accountName; |
|
107 } |
|
108 $canonicalizedResource .= $path; |
|
109 if ($queryString !== '') { |
|
110 $canonicalizedResource .= $queryString; |
|
111 } |
|
112 |
|
113 // Request date |
|
114 $requestDate = ''; |
|
115 if (isset($headers[Zend_Service_WindowsAzure_Credentials_CredentialsAbstract::PREFIX_STORAGE_HEADER . 'date'])) { |
|
116 $requestDate = $headers[Zend_Service_WindowsAzure_Credentials_CredentialsAbstract::PREFIX_STORAGE_HEADER . 'date']; |
|
117 } else { |
|
118 $requestDate = gmdate('D, d M Y H:i:s', time()) . ' GMT'; // RFC 1123 |
|
119 } |
|
120 |
|
121 // Create string to sign |
|
122 $stringToSign = array(); |
|
123 $stringToSign[] = $requestDate; // Date |
|
124 $stringToSign[] = $canonicalizedResource; // Canonicalized resource |
|
125 $stringToSign = implode("\n", $stringToSign); |
|
126 $signString = base64_encode(hash_hmac('sha256', $stringToSign, $this->_accountKey, true)); |
|
127 |
|
128 // Sign request |
|
129 $headers[Zend_Service_WindowsAzure_Credentials_CredentialsAbstract::PREFIX_STORAGE_HEADER . 'date'] = $requestDate; |
|
130 $headers['Authorization'] = 'SharedKeyLite ' . $this->_accountName . ':' . $signString; |
|
131 |
|
132 // Return headers |
|
133 return $headers; |
|
134 } |
|
135 |
|
136 /** |
|
137 * Prepare query string for signing |
|
138 * |
|
139 * @param string $value Original query string |
|
140 * @return string Query string for signing |
|
141 */ |
|
142 protected function _prepareQueryStringForSigning($value) |
|
143 { |
|
144 // Check for 'comp=' |
|
145 if (strpos($value, 'comp=') === false) { |
|
146 // If not found, no query string needed |
|
147 return ''; |
|
148 } else { |
|
149 // If found, make sure it is the only parameter being used |
|
150 if (strlen($value) > 0 && strpos($value, '?') === 0) { |
|
151 $value = substr($value, 1); |
|
152 } |
|
153 |
|
154 // Split parts |
|
155 $queryParts = explode('&', $value); |
|
156 foreach ($queryParts as $queryPart) { |
|
157 if (strpos($queryPart, 'comp=') !== false) { |
|
158 return '?' . $queryPart; |
|
159 } |
|
160 } |
|
161 |
|
162 // Should never happen... |
|
163 return ''; |
|
164 } |
|
165 } |
|
166 } |