First commit

2025-10-02 10:33:06 +08:00
parent 198b8bf2a6
commit c38eed4a22
5512 changed files with 958855 additions and 0 deletions
--- a/app/Common/extend/alibabacloud/client/src/Credentials/Providers/EcsRamRoleProvider.php
+++ b/app/Common/extend/alibabacloud/client/src/Credentials/Providers/EcsRamRoleProvider.php
@@ -0,0 +1,128 @@
+<?php
+
+namespace AlibabaCloud\Client\Credentials\Providers;
+
+use Exception;
+use Stringy\Stringy;
+use AlibabaCloud\Client\SDK;
+use AlibabaCloud\Client\Result\Result;
+use Psr\Http\Message\ResponseInterface;
+use GuzzleHttp\Exception\GuzzleException;
+use AlibabaCloud\Client\Request\RpcRequest;
+use AlibabaCloud\Client\Credentials\StsCredential;
+use AlibabaCloud\Client\Exception\ClientException;
+use AlibabaCloud\Client\Exception\ServerException;
+use AlibabaCloud\Client\Credentials\EcsRamRoleCredential;
+
+/**
+ * Class EcsRamRoleProvider
+ *
+ * @package   AlibabaCloud\Client\Credentials\Providers
+ */
+class EcsRamRoleProvider extends Provider
+{
+
+    /**
+     * Expiration time slot for temporary security credentials.
+     *
+     * @var int
+     */
+
+    protected $expirationSlot = 10;
+
+    /**
+     * @var string
+     */
+    private $uri = 'http://100.100.100.200/latest/meta-data/ram/security-credentials/';
+
+    /**
+     * Get credential.
+     *
+     * @return StsCredential
+     * @throws ClientException
+     * @throws ServerException
+     */
+    public function get()
+    {
+        $result = $this->getCredentialsInCache();
+
+        if ($result === null) {
+            $result = $this->request();
+
+            if (!isset($result['AccessKeyId'], $result['AccessKeySecret'], $result['SecurityToken'])) {
+                throw new ServerException($result, $this->error, SDK::INVALID_CREDENTIAL);
+            }
+
+            $this->cache($result->toArray());
+        }
+
+        return new StsCredential(
+            $result['AccessKeyId'],
+            $result['AccessKeySecret'],
+            $result['SecurityToken']
+        );
+    }
+
+    /**
+     * Get credentials by request.
+     *
+     * @return Result
+     * @throws ClientException
+     * @throws ServerException
+     */
+    public function request()
+    {
+        $result = $this->getResponse();
+
+        if ($result->getStatusCode() === 404) {
+            $message = 'The role was not found in the instance';
+            throw new ClientException($message, SDK::INVALID_CREDENTIAL);
+        }
+
+        if (!$result->isSuccess()) {
+            $message = 'Error retrieving credentials from result';
+            throw new ServerException($result, $message, SDK::INVALID_CREDENTIAL);
+        }
+
+        return $result;
+    }
+
+    /**
+     * Get data from meta.
+     *
+     * @return mixed|ResponseInterface
+     * @throws ClientException
+     * @throws Exception
+     */
+    public function getResponse()
+    {
+        /**
+         * @var EcsRamRoleCredential $credential
+         */
+        $credential = $this->client->getCredential();
+        $url        = $this->uri . $credential->getRoleName();
+
+        $options = [
+            'http_errors'     => false,
+            'timeout'         => 1,
+            'connect_timeout' => 1,
+            'debug'           => $this->client->isDebug(),
+        ];
+
+        try {
+            return RpcRequest::createClient()->request('GET', $url, $options);
+        } catch (GuzzleException $exception) {
+            if (Stringy::create($exception->getMessage())->contains('timed')) {
+                $message = 'Timeout or instance does not belong to Alibaba Cloud';
+            } else {
+                $message = $exception->getMessage();
+            }
+
+            throw new ClientException(
+                $message,
+                SDK::SERVER_UNREACHABLE,
+                $exception
+            );
+        }
+    }
+}