Amazon S3 REST API; how is the API-key transferred firsttime between client and service? -


within research came across many different sources, somehow fail see, side generating private api-key , how other side getting hold of it.

many people recommend amazon s3 restful api role model, hence if understand that, create similar own purposes.

amazon's s3 rest api.

e.g. example here explains process nicely, fails explain, side generating api-key? upon user signup, service side generating private api-key , assigns user id in database?

if case though, client needs know api key in order create signature each request, service can verify it. how both sides hold of private api key?

in case have iphone app , angularjs web app clients talking restful api service.

many thanks,

first, don't want give out keys clients. in general, that's security nightmare. (also, key creation can take hours propagate. , you'll have manage permissions each key, etc.) signing done server, , key doesn't leave server.

you want server have s3 key, return signed links give client power (get particular file, or put file). it's bit mother-may-i game: client asks "s3 signed link", can talk s3 1 thing. since server doing trivial amount of work (checking request authorized, returning signed url), able scale pretty well.

for things, "list files" or "delete file", might better server call s3 (i.e. making web request s3 within web request client) , return results client (instead of messing signed links). if this, may run problems when scaling -- unless using right technologies. (i.e. want evented server node.js)

note put request, signed link must specify lot of stuff ahead of time (like file type, etc). have read aws spec carefully.

be careful of confused deputy problem. code have 1 key can see user's files, responsible security between users.


Comments

Post a Comment

Popular posts from this blog

SPSS keyboard combination alters encoding -

my question not have programming practical issue on spss. accident keyword combination cannot remember because did not intend press changed encoding in spss , text in data in different language english shown small boxes. nevertheless, when kind of analysis performed different language text shown in output. does know reason? tried change encoding did not produce result. first, @ edit > options , see whether setting unicode or locale. might fix it. if have text in multiple languages, want unicode. otherwise, may have specific locale set wrong. can change set locale, need know locale want use.
Read more

Add new record to the table by click on the button in Microsoft Access -

in ms access form want implement separate button, adds new record table. in order added button , attached button event: private sub btnaddrec_click() refresh codecontextobject on error resume next docmd.gotorecord , , acnewrec if err.number <> 0 btnaddrec.enabled = false end if end end sub everything ok when open window , click btnaddrec button, problem when first of perform navigation through existed records , after click on button. got runtime error: 2105: «you can't go specified record. may @ end of recordset» . how solve issue, need have ability add new record on click on specific button, no matter, have walked or not walked through records before. thanks. i created simple form field call description (and autonumber) , created button code follows click event. filled number of records , navigated through them, clicked addnewrec button. form navigated new record without issues. able click addnewrec button directly after
Read more

CSS3 Transition to highlight new elements created in JQuery -

i want use css3 color transition apply highlight-fading color effect (yellow transparent) new elements appended markup using jquery. css #content div { background-color:transparent; -moz-transition:background-color 2s; -webkit-transition:background-color 2s; -o-transition:background-color 2s; transition:background-color 2s; } #content div.new { background-color:yellow; } html <div id="content"></div> <a id="add-element" href="#">add new element</a> js $('#add-element').click(function() { var newelement = $('<div class="new">new element</div>'); $('#content').append(newelement); newelement.removeclass('new'); }); when click link, new element created. class "new" (background color yellow) , it's appended html markup. should able remove "new" class trigger background color transition transparent (or whate
Read more