aliyun Rest ful api V3版本身份验证构造

参考官网：https://help.aliyun.com/zh/sdk/product-overview/v3-request-structure-and-signature?spm=a2c4g.11186623.0.0.787951e7lHcjZb
构造代码 ：使用GET请求进行构造，算法使用sha256 使用postman进行验证
代码如下，linux环境运行，先安装openssl库：

#include <iostream>
#include <sstream>
#include <iomanip>
#include <cstring>
#include <random>
#include <chrono>
#include <cctype>
#include <iomanip>
#include <openssl/hmac.h>
#include <openssl/sha.h>
// HMAC-SHA256 calculation using OpenSSL library
//build，在Linux下编译 :  g++ -o a.out awsSignature.cpp -std=c++11 -lssl -lcrypto
std::string HMAC_SHA256(const std::string& key, const std::string& data) {unsigned char result[EVP_MAX_MD_SIZE];unsigned int result_len;HMAC(EVP_sha256(), key.c_str(), key.length(),reinterpret_cast<const unsigned char*>(data.c_str()), data.length(),result, &result_len);std::stringstream ss;for (unsigned int i = 0; i < result_len; i++) {ss << std::hex << std::setw(2) << std::setfill('0') << static_cast<int>(result[i]);}return ss.str();
}
// AWS Signature Version 4 calculation
std::string CalculateAWSV4Signature(const std::string& secretAccessKey, const std::string& region,const std::string& service, const std::string& timestamp,const std::string& payloadHash, const std::string& canonicalRequest) {// Step 1: Derive signing keystd::string kDate = HMAC_SHA256("AWS4" + secretAccessKey, timestamp.substr(0, 8));std::string kRegion = HMAC_SHA256(kDate, region);std::string kService = HMAC_SHA256(kRegion, service);std::string kSigning = HMAC_SHA256(kService, "aws4_request");// Step 2: Calculate signaturestd::string stringToSign = "AWS4-HMAC-SHA256\n" + timestamp + "\n" + timestamp.substr(0, 8) +"/" + region + "/" + service + "/aws4_request\n" + HMAC_SHA256(kSigning, canonicalRequest + "\n" + payloadHash);std::string signature = HMAC_SHA256(kSigning, stringToSign);return signature;
}std::string calculateHash(const std::string& data) {unsigned char hash[SHA256_DIGEST_LENGTH];SHA256_CTX sha256;SHA256_Init(&sha256);SHA256_Update(&sha256, data.c_str(), data.length());SHA256_Final(hash, &sha256);std::stringstream ss;for (int i = 0; i < SHA256_DIGEST_LENGTH; i++) {ss << std::hex << std::setw(2) << std::setfill('0') << static_cast<int>(hash[i]);}return ss.str();
}
std::string CanonicalizeRequest(const std::string& HTTPMethod, const std::string& CanonicalUri, const std::string& CanonicalQueryString, const std::string& CanonicalHeaders, const std::string& SignedHeaders, const std::string& payload)
{std::string canonicalize_string= HTTPMethod + "\n" +"/"+CanonicalUri + "\n" +CanonicalQueryString + "\n" +CanonicalHeaders + "\n" +SignedHeaders + "\n" +payload;return canonicalize_string;
}
std::string generateSignatureNonce() {// 使用 std::random_device 获取真正的随机数种子std::random_device rd;// 使用 std::mt19937 作为伪随机数生成器引擎std::mt19937 gen(rd());// 使用 std::uniform_int_distribution 来生成范围内的随机数std::uniform_int_distribution<> dis(0, 999999);// 生成随机数int nonceValue = dis(gen);// 将随机数转换为字符串std::ostringstream oss;oss << nonceValue;return oss.str();
}
std::string GetDate(int t){std::chrono::system_clock::time_point now_time = std::chrono::system_clock::now();std::time_t now_t = std::chrono::system_clock::to_time_t(now_time);std::tm gm_time = *std::gmtime(&now_t);char buf[128];if(t==1)std::strftime(buf, sizeof(buf), "%a, %d %b %Y %H:%M:%S GMT", &gm_time);else{std::strftime(buf, sizeof(buf), "%FT%TZ", &gm_time);}std::string time(buf);return time;
}std::string UrlEncode(std::string& url){std::ostringstream encoded;encoded << std::hex << std::uppercase << std::setfill('0');for (char ch : url) {if (std::isalnum(ch) || ch == '-' || ch == '_' || ch == '.' || ch == '~') {// 字母数字字符和"- _ ."波浪符号保持不变encoded << ch;} else {// 其他字符进行百分号编码encoded << '%' << std::setw(2) << static_cast<int>(static_cast<unsigned char>(ch));}}return encoded.str();
}
int main() {// AWS credentials and request detailsstd::string accessKeyId = "你们密钥id";std::string secretAccessKey = "你的密钥";std::string region = "cn-shanghai";std::string param = "RegionId";std::string version="2014-05-26";std::string timestamp =GetDate(2);std::cout<<"timestamp: "<<timestamp<<std::endl;std::string canonicalRequest = "";std::string GMTime=GetDate(1);//GMT=1std::cout<<"GMTime"<<GMTime<<std::endl;//规范化请求构建参数std::string signature_nonce=generateSignatureNonce();std::cout<<signature_nonce<<std::endl;std::string HTTPRequestMethod="GET";std::string CanonicalURI ="";std::string CanonicalQueryString=UrlEncode(param)+"="+UrlEncode(region);//升序 url编码std::string CanonicalHeaders="host:ecs.cn-shanghai.aliyuncs.com\nx-acs-action:DescribeInstances\nx-acs-content-sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\nx-acs-date:"+timestamp+"\nx-acs-signature-nonce:"+signature_nonce+"\nx-acs-version:"+version+"\n";std::string SignedHeaders="host;x-acs-action;x-acs-content-sha256;x-acs-date;x-acs-signature-nonce;x-acs-version";std::string HashedRequestPayload="e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855";//获取规范化请求值std::string CanonicalRequestString=CanonicalizeRequest(HTTPRequestMethod,CanonicalURI,CanonicalQueryString,CanonicalHeaders,SignedHeaders,HashedRequestPayload);std::cout<<CanonicalRequestString<<std::endl;//计算规范化请求的hash值std::string hashCanonicalRequest=calculateHash(CanonicalRequestString);std::string StringToSign="ACS3-HMAC-SHA256\n"+hashCanonicalRequest;//. 计算signaturestd::string signature = HMAC_SHA256(secretAccessKey,StringToSign);std::cout << "signature: " << signature << std::endl;return 0;
}