feat: add S3-compatible storage provider (MinIO, Ceph, R2, etc.)
Adds a new 'S3-Compatible Storage' provider that works with any
S3-API-compatible object storage service, including MinIO, Ceph,
Cloudflare R2, Backblaze B2, and others.
Changes:
- New provider class: classes/providers/storage/s3-compatible-provider.php
- Provider key: s3compatible
- Reads user-configured endpoint URL from settings
- Uses path-style URL access (required by most S3-compatible services)
- Supports credentials via AS3CF_S3COMPAT_ACCESS_KEY_ID /
AS3CF_S3COMPAT_SECRET_ACCESS_KEY wp-config.php constants
- Disables AWS-specific features (Block Public Access, Object Ownership)
- New provider SVG icons (s3compatible.svg, -link.svg, -round.svg)
- Registered provider in main plugin class with endpoint setting support
- Updated StorageProviderSubPage to show endpoint URL input for S3-compatible
- Built pro settings bundle with rollup (Svelte 4.2.19)
- Added package.json and updated rollup.config.mjs for pro-only builds
This commit is contained in:
105
vendor/Aws3/Aws/S3/ValidateResponseChecksumParser.php
vendored
Normal file
105
vendor/Aws3/Aws/S3/ValidateResponseChecksumParser.php
vendored
Normal file
@@ -0,0 +1,105 @@
|
||||
<?php
|
||||
|
||||
namespace DeliciousBrains\WP_Offload_Media\Aws3\Aws\S3;
|
||||
|
||||
use DeliciousBrains\WP_Offload_Media\Aws3\Aws\Api\Parser\AbstractParser;
|
||||
use DeliciousBrains\WP_Offload_Media\Aws3\Aws\Api\Service;
|
||||
use DeliciousBrains\WP_Offload_Media\Aws3\Aws\Api\StructureShape;
|
||||
use DeliciousBrains\WP_Offload_Media\Aws3\Aws\CommandInterface;
|
||||
use DeliciousBrains\WP_Offload_Media\Aws3\Aws\S3\Exception\S3Exception;
|
||||
use DeliciousBrains\WP_Offload_Media\Aws3\Psr\Http\Message\ResponseInterface;
|
||||
use DeliciousBrains\WP_Offload_Media\Aws3\Psr\Http\Message\StreamInterface;
|
||||
/**
|
||||
* @internal Decorates a parser for the S3 service to validate the response checksum.
|
||||
*/
|
||||
class ValidateResponseChecksumParser extends AbstractParser
|
||||
{
|
||||
use CalculatesChecksumTrait;
|
||||
/**
|
||||
* @param callable $parser Parser to wrap.
|
||||
*/
|
||||
public function __construct(callable $parser, Service $api)
|
||||
{
|
||||
$this->api = $api;
|
||||
$this->parser = $parser;
|
||||
}
|
||||
public function __invoke(CommandInterface $command, ResponseInterface $response)
|
||||
{
|
||||
$fn = $this->parser;
|
||||
$result = $fn($command, $response);
|
||||
//Skip this middleware if the operation doesn't have an httpChecksum
|
||||
$op = $this->api->getOperation($command->getName());
|
||||
$checksumInfo = isset($op['httpChecksum']) ? $op['httpChecksum'] : [];
|
||||
if (empty($checksumInfo)) {
|
||||
return $result;
|
||||
}
|
||||
//Skip this middleware if the operation doesn't send back a checksum, or the user doesn't opt in
|
||||
$checksumModeEnabledMember = isset($checksumInfo['requestValidationModeMember']) ? $checksumInfo['requestValidationModeMember'] : "";
|
||||
$checksumModeEnabled = isset($command[$checksumModeEnabledMember]) ? $command[$checksumModeEnabledMember] : "";
|
||||
$responseAlgorithms = isset($checksumInfo['responseAlgorithms']) ? $checksumInfo['responseAlgorithms'] : [];
|
||||
if (empty($responseAlgorithms) || \strtolower($checksumModeEnabled) !== "enabled") {
|
||||
return $result;
|
||||
}
|
||||
if (\extension_loaded('awscrt')) {
|
||||
$checksumPriority = ['CRC32C', 'CRC32', 'SHA1', 'SHA256'];
|
||||
} else {
|
||||
$checksumPriority = ['CRC32', 'SHA1', 'SHA256'];
|
||||
}
|
||||
$checksumsToCheck = \array_intersect($responseAlgorithms, $checksumPriority);
|
||||
$checksumValidationInfo = $this->validateChecksum($checksumsToCheck, $response);
|
||||
if ($checksumValidationInfo['status'] == "SUCCEEDED") {
|
||||
$result['ChecksumValidated'] = $checksumValidationInfo['checksum'];
|
||||
} else {
|
||||
if ($checksumValidationInfo['status'] == "FAILED") {
|
||||
//Ignore failed validations on GetObject if it's a multipart get which returned a full multipart object
|
||||
if ($command->getName() == "GetObject" && !empty($checksumValidationInfo['checksumHeaderValue'])) {
|
||||
$headerValue = $checksumValidationInfo['checksumHeaderValue'];
|
||||
$lastDashPos = \strrpos($headerValue, '-');
|
||||
$endOfChecksum = \substr($headerValue, $lastDashPos + 1);
|
||||
if (\is_numeric($endOfChecksum) && \intval($endOfChecksum) > 1 && \intval($endOfChecksum) < 10000) {
|
||||
return $result;
|
||||
}
|
||||
}
|
||||
throw new S3Exception("Calculated response checksum did not match the expected value", $command);
|
||||
}
|
||||
}
|
||||
return $result;
|
||||
}
|
||||
public function parseMemberFromStream(StreamInterface $stream, StructureShape $member, $response)
|
||||
{
|
||||
return $this->parser->parseMemberFromStream($stream, $member, $response);
|
||||
}
|
||||
/**
|
||||
* @param $checksumPriority
|
||||
* @param ResponseInterface $response
|
||||
*/
|
||||
public function validateChecksum($checksumPriority, ResponseInterface $response)
|
||||
{
|
||||
$checksumToValidate = $this->chooseChecksumHeaderToValidate($checksumPriority, $response);
|
||||
$validationStatus = "SKIPPED";
|
||||
$checksumHeaderValue = null;
|
||||
if (!empty($checksumToValidate)) {
|
||||
$checksumHeaderValue = $response->getHeader('x-amz-checksum-' . $checksumToValidate);
|
||||
if (isset($checksumHeaderValue)) {
|
||||
$checksumHeaderValue = $checksumHeaderValue[0];
|
||||
$calculatedChecksumValue = $this->getEncodedValue($checksumToValidate, $response->getBody());
|
||||
$validationStatus = $checksumHeaderValue == $calculatedChecksumValue ? "SUCCEEDED" : "FAILED";
|
||||
}
|
||||
}
|
||||
return ["status" => $validationStatus, "checksum" => $checksumToValidate, "checksumHeaderValue" => $checksumHeaderValue];
|
||||
}
|
||||
/**
|
||||
* @param $checksumPriority
|
||||
* @param ResponseInterface $response
|
||||
*/
|
||||
public function chooseChecksumHeaderToValidate($checksumPriority, ResponseInterface $response)
|
||||
{
|
||||
foreach ($checksumPriority as $checksum) {
|
||||
$checksumHeader = 'x-amz-checksum-' . $checksum;
|
||||
if ($response->hasHeader($checksumHeader)) {
|
||||
return $checksum;
|
||||
}
|
||||
}
|
||||
return null;
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user