Malin
3248cbb029
Adds a new 'S3-Compatible Storage' provider that works with any
S3-API-compatible object storage service, including MinIO, Ceph,
Cloudflare R2, Backblaze B2, and others.
Changes:
- New provider class: classes/providers/storage/s3-compatible-provider.php
- Provider key: s3compatible
- Reads user-configured endpoint URL from settings
- Uses path-style URL access (required by most S3-compatible services)
- Supports credentials via AS3CF_S3COMPAT_ACCESS_KEY_ID /
AS3CF_S3COMPAT_SECRET_ACCESS_KEY wp-config.php constants
- Disables AWS-specific features (Block Public Access, Object Ownership)
- New provider SVG icons (s3compatible.svg, -link.svg, -round.svg)
- Registered provider in main plugin class with endpoint setting support
- Updated StorageProviderSubPage to show endpoint URL input for S3-compatible
- Built pro settings bundle with rollup (Svelte 4.2.19)
- Added package.json and updated rollup.config.mjs for pro-only builds
96 lines
3.9 KiB
PHP
96 lines
3.9 KiB
PHP
<?php
|
|
|
|
namespace DeliciousBrains\WP_Offload_Media\Aws3\Aws\CloudFront;
|
|
|
|
use DeliciousBrains\WP_Offload_Media\Aws3\GuzzleHttp\Psr7;
|
|
use DeliciousBrains\WP_Offload_Media\Aws3\GuzzleHttp\Psr7\Uri;
|
|
use DeliciousBrains\WP_Offload_Media\Aws3\Psr\Http\Message\UriInterface;
|
|
/**
|
|
* Creates signed URLs for Amazon CloudFront resources.
|
|
*/
|
|
class UrlSigner
|
|
{
|
|
private $signer;
|
|
/**
|
|
* @param $keyPairId string ID of the key pair
|
|
* @param $privateKey string Path to the private key used for signing
|
|
*
|
|
* @throws \RuntimeException if the openssl extension is missing
|
|
* @throws \InvalidArgumentException if the private key cannot be found.
|
|
*/
|
|
public function __construct($keyPairId, $privateKey)
|
|
{
|
|
$this->signer = new Signer($keyPairId, $privateKey);
|
|
}
|
|
/**
|
|
* Create a signed Amazon CloudFront URL.
|
|
*
|
|
* Keep in mind that URLs meant for use in media/flash players may have
|
|
* different requirements for URL formats (e.g. some require that the
|
|
* extension be removed, some require the file name to be prefixed
|
|
* - mp4:<path>, some require you to add "/cfx/st" into your URL).
|
|
*
|
|
* @param string $url URL to sign (can include query
|
|
* string string and wildcards)
|
|
* @param string|integer|null $expires UTC Unix timestamp used when signing
|
|
* with a canned policy. Not required
|
|
* when passing a custom $policy.
|
|
* @param string $policy JSON policy. Use this option when
|
|
* creating a signed URL for a custom
|
|
* policy.
|
|
*
|
|
* @return string The file URL with authentication parameters
|
|
* @throws \InvalidArgumentException if the URL provided is invalid
|
|
* @link http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/WorkingWithStreamingDistributions.html
|
|
*/
|
|
public function getSignedUrl($url, $expires = null, $policy = null)
|
|
{
|
|
// Determine the scheme of the url
|
|
$urlSections = \explode('://', $url);
|
|
if (\count($urlSections) < 2) {
|
|
throw new \InvalidArgumentException("Invalid URL: {$url}");
|
|
}
|
|
// Get the real scheme by removing wildcards from the scheme
|
|
$scheme = \str_replace('*', '', $urlSections[0]);
|
|
$uri = new Uri($scheme . '://' . $urlSections[1]);
|
|
$query = Psr7\Query::parse($uri->getQuery(), \PHP_QUERY_RFC3986);
|
|
$signature = $this->signer->getSignature($this->createResource($scheme, (string) $uri), $expires, $policy);
|
|
$uri = $uri->withQuery(\http_build_query($query + $signature, '', '&', \PHP_QUERY_RFC3986));
|
|
return $scheme === 'rtmp' ? $this->createRtmpUrl($uri) : (string) $uri;
|
|
}
|
|
private function createRtmpUrl(UriInterface $uri)
|
|
{
|
|
// Use a relative URL when creating Flash player URLs
|
|
$result = \ltrim($uri->getPath(), '/');
|
|
if ($query = $uri->getQuery()) {
|
|
$result .= '?' . $query;
|
|
}
|
|
return $result;
|
|
}
|
|
/**
|
|
* @param $scheme
|
|
* @param $url
|
|
*
|
|
* @return string
|
|
*/
|
|
private function createResource($scheme, $url)
|
|
{
|
|
switch ($scheme) {
|
|
case 'http':
|
|
case 'http*':
|
|
case 'https':
|
|
return $url;
|
|
case 'rtmp':
|
|
$parts = \parse_url($url);
|
|
$pathParts = \pathinfo($parts['path']);
|
|
$resource = \ltrim($pathParts['dirname'] . '/' . $pathParts['basename'], '/');
|
|
// Add a query string if present.
|
|
if (isset($parts['query'])) {
|
|
$resource .= "?{$parts['query']}";
|
|
}
|
|
return $resource;
|
|
}
|
|
throw new \InvalidArgumentException("Invalid URI scheme: {$scheme}. " . "Scheme must be one of: http, https, or rtmp");
|
|
}
|
|
}
|