aws-simple-sign.core — dk.emcken/aws-simple-sign 1.6.0

Relevant AWS documentation: https://docs.aws.amazon.com/AmazonS3/latest/API/sig-v4-header-based-auth.html https://docs.aws.amazon.com/AmazonS3/latest/userguide/RESTAuthentication.html

->query-str clj

(->query-str query-params)

algorithm clj

as-existing-file clj

(as-existing-file file-path)

Takes a string with the path to the file and returns a File object if the file exists otherwise nil.

char-range clj

(char-range start end)

compute-signature clj

(compute-signature {:keys [credentials str-to-sign region service short-date]})

digits clj

encode clj

(encode skip-chars c)

formatter clj

generate-presigned-url clj

(generate-presigned-url bucket object-key opts)

(generate-presigned-url bucket
                        object-key
                        credentials
                        {:keys [region endpoint]
                         :or {region (:aws/region credentials)
                              endpoint (:aws/endpoint credentials)}
                         :as opts})

Takes bucket name, object key and a map with options. The option :path-style true forces the use of the 'old way' of URL's.

get-query-params clj

(get-query-params params-str)

guarantee-credientials clj

(guarantee-credientials {:aws/keys [access-key secret-key] :as credentials})

hash-sha256 clj

(hash-sha256 input)

hashed-payload clj

(hashed-payload payload)

hex-encode clj

(hex-encode bytes)

hex-encode-str clj

(hex-encode-str bytes)

hmac-sha-256 clj

(hmac-sha-256 key data)

presign clj

(presign url)

(presign url opts)

(presign url
         credentials
         {:keys [ref-time region expires]
          :or
            {expires "3600" region (:aws/region credentials) ref-time (Date.)}})

Take an URL for a S3 object and returns a string with a presigned GET-URL for that particular object. Takes the following options (a map) as the last argument, the map value shows the default values: {:ref-time (java.util.Date.) ; timestamp incorporated into the signature :expires "3600" ; signature expires x seconds after ref-time :region "us-east-1"} ; signature locked to AWS region

By default credentials are read from standard AWS location.

read-credentials-file clj

(read-credentials-file file-path profile-name)

read-env-credentials clj

(read-env-credentials)

(read-env-credentials profile-name)

sign-request clj

(sign-request request opts)

(sign-request {:keys [body headers method url] :as request}
              credentials
              {:keys [ref-time region service]
               :or {region (:aws/region credentials)
                    service "execute-api"
                    ref-time (Date.)}})

signature clj

(signature canonical-url
           credentials
           {:keys [scope method timestamp region service query-params
                   content-sha256 signed-headers]})

AWS specification: https://docs.aws.amazon.com/AmazonS3/latest/API/sig-v4-header-based-auth.html Inspired by https://gist.github.com/souenzzo/21f3e81b899ba3f04d5f8858b4ecc2e9

unreserved-chars clj

uri-encode clj

(uri-encode skip-chars uri)

url-unreserved-chars clj