Accessing OBS Using a Temporary URL

If you have any questions during development, post them on the Issues page of GitHub. For details about parameters and usage of each API, see the API Reference

ObsClient allows you to create a URL whose Query parameters are carried with authentication information by specifying the AK and SK, HTTP method, and request parameters. You can provide other users with this URL for temporary access. When generating a URL, you need to specify the validity period of the URL to restrict the access duration of visitors.

If you want to grant other users the permission to perform other operations on buckets or objects (for example, upload or download objects), generate a URL with the corresponding request (for example, to upload an object using the URL that generates the PUT request) and provide the URL for other users.

The following table lists operations can be performed through a signed URL.

Operation

HTTP Request Method (Value in OBS Java SDK)

Special Operator (Value in OBS Java SDK)

Bucket Name Required

Object Name Required

PUT Bucket

HttpMethodEnum.PUT

N/A

Yes

No

GET Buckets

HttpMethodEnum.GET

N/A

No

No

DELETE Bucket

HttpMethodEnum.DELETE

N/A

Yes

No

GET Objects

HttpMethodEnum.GET

N/A

Yes

No

GET Object versions

HttpMethodEnum.GET

SpecialParamEnum.VERSIONS

Yes

No

List Multipart uploads

HttpMethodEnum.GET

SpecialParamEnum.UPLOADS

Yes

No

Obtain Bucket Metadata

HttpMethodEnum.HEAD

N/A

Yes

No

GET Bucket location

HttpMethodEnum.GET

SpecialParamEnum.LOCATION

Yes

No

GET Bucket storageinfo

HttpMethodEnum.GET

SpecialParamEnum.STORAGEINFO

Yes

No

PUT Bucket quota

HttpMethodEnum.PUT

SpecialParamEnum.QUOTA

Yes

No

GET Bucket quota

HttpMethodEnum.GET

SpecialParamEnum.QUOTA

Yes

No

PUT Bucket storagePolicy

HttpMethodEnum.PUT

SpecialParamEnum.STORAGEPOLICY

Yes

No

GET Bucket storagePolicy

HttpMethodEnum.GET

SpecialParamEnum.STORAGEPOLICY

Yes

No

PUT Bucket acl

HttpMethodEnum.PUT

SpecialParamEnum.ACL

Yes

No

GET Bucket acl

HttpMethodEnum.GET

SpecialParamEnum.ACL

Yes

No

PUT Bucket logging

HttpMethodEnum.PUT

SpecialParamEnum.LOGGING

Yes

No

GET Bucket logging

HttpMethodEnum.GET

SpecialParamEnum.LOGGING

Yes

No

PUT Bucket policy

HttpMethodEnum.PUT

SpecialParamEnum.POLICY

Yes

No

GET Bucket policy

HttpMethodEnum.GET

SpecialParamEnum.POLICY

Yes

No

DELETE Bucket policy

HttpMethodEnum.DELETE

SpecialParamEnum.POLICY

Yes

No

PUT Bucket lifecycle

HttpMethodEnum.PUT

SpecialParamEnum.LIFECYCLE

Yes

No

GET Bucket lifecycle

HttpMethodEnum.GET

SpecialParamEnum.LIFECYCLE

Yes

No

DELETE Bucket lifecycle

HttpMethodEnum.DELETE

SpecialParamEnum.LIFECYCLE

Yes

No

PUT Bucket website

HttpMethodEnum.PUT

SpecialParamEnum.WEBSITE

Yes

No

GET Bucket website

HttpMethodEnum.GET

SpecialParamEnum.WEBSITE

Yes

No

DELETE Bucket website

HttpMethodEnum.DELETE

SpecialParamEnum.WEBSITE

Yes

No

PUT Bucket versioning

HttpMethodEnum.PUT

SpecialParamEnum.VERSIONING

Yes

No

GET Bucket versioning

HttpMethodEnum.GET

SpecialParamEnum.VERSIONING

Yes

No

PUT Bucket cors

HttpMethodEnum.PUT

SpecialParamEnum.CORS

Yes

No

GET Bucket cors

HttpMethodEnum.GET

SpecialParamEnum.CORS

Yes

No

DELETE Bucket cors

HttpMethodEnum.DELETE

SpecialParamEnum.CORS

Yes

No

PUT Bucket notification

HttpMethodEnum.PUT

SpecialParamEnum.NOTIFICATION

Yes

No

GET Bucket notification

HttpMethodEnum.GET

SpecialParamEnum.NOTIFICATION

Yes

No

PUT Bucket tagging

HttpMethodEnum.PUT

SpecialParamEnum.TAGGING

Yes

No

GET Bucket tagging

HttpMethodEnum.GET

SpecialParamEnum.TAGGING

Yes

No

DELETE Bucket tagging

HttpMethodEnum.DELETE

SpecialParamEnum.TAGGING

Yes

No

PUT Object

HttpMethodEnum.PUT

N/A

Yes

Yes

Append Object

HttpMethodEnum.POST

SpecialParamEnum.APPEND

Yes

Yes

GET Object

HttpMethodEnum.GET

N/A

Yes

Yes

PUT Object - Copy

HttpMethodEnum.PUT

N/A

Yes

Yes

DELETE Object

HttpMethodEnum.DELETE

N/A

Yes

Yes

DELETE Objects

HttpMethodEnum.POST

SpecialParamEnum.DELETE

Yes

Yes

Obtain Object Metadata

HttpMethodEnum.HEAD

N/A

Yes

Yes

PUT Object acl

HttpMethodEnum.PUT

SpecialParamEnum.ACL

Yes

Yes

GET Object acl

HttpMethodEnum.GET

SpecialParamEnum.ACL

Yes

Yes

Initiate Multipart Upload

HttpMethodEnum.POST

SpecialParamEnum.UPLOADS

Yes

Yes

PUT Part

HttpMethodEnum.PUT

N/A

Yes

Yes

PUT Part - Copy

HttpMethodEnum.PUT

N/A

Yes

Yes

List Parts

HttpMethodEnum.GET

N/A

Yes

Yes

Complete Multipart Upload

HttpMethodEnum.POST

N/A

Yes

Yes

DELETE Multipart Upload

HttpMethodEnum.DELETE

N/A

Yes

Yes

POST Object restore

HttpMethodEnum.POST

SpecialParamEnum.RESTORE

Yes

Yes

To access OBS using a temporary URL generated by the OBS Java SDK, perform the following steps:

  1. Call ObsClient.createTemporarySignature to generate a signed URL.
  2. Use any HTTP library to make an HTTP/HTTPS request to OBS.

The following content provides examples of accessing OBS using a temporary URL, including bucket creation, as well as object upload, download, listing, and deletion.

Creating a Bucket

String endPoint = "http://your-endpoint";
String ak = "*** Provide your Access Key ***";
String sk = "*** Provide your Secret Key ***";

// Create an instance of ObsClient.
ObsClient obsClient = new ObsClient(ak, sk, endPoint);
// Specify the validity period of the URL to 3600 seconds.
long expireSeconds = 3600L;

TemporarySignatureRequest request = new TemporarySignatureRequest(HttpMethodEnum.PUT, expireSeconds);
request.setBucketName("bucketname");
TemporarySignatureResponse response = obsClient.createTemporarySignature(request);
System.out.println("Creating bucket using temporary signature url:");
System.out.println("\t" + response.getSignedUrl());

Request.Builder builder = new Request.Builder();
for (Map.Entry<String, String> entry : response.getActualSignedRequestHeaders().entrySet()) {
       builder.header(entry.getKey(), entry.getValue());
}
// Make a PUT request to create a bucket.
String location = "your bucket location";
Request httpRequest = builder.url(response.getSignedUrl()).put(RequestBody.create(null, "<CreateBucketConfiguration><Location>" + location + "</Location></CreateBucketConfiguration>".getBytes())).build();
OkHttpClient httpClient = new OkHttpClient.Builder().followRedirects(false).retryOnConnectionFailure(false)
              .cache(null).build();

Call c = httpClient.newCall(httpRequest);
Response res = c.execute();
System.out.println("\tStatus:" + res.code());
if (res.body() != null) {
       System.out.println("\tContent:" + res.body().string() + "\n");
}
res.close();

Uploading an Object

String endPoint = "http://your-endpoint";
String ak = "*** Provide your Access Key ***";
String sk = "*** Provide your Secret Key ***";

// Create an instance of ObsClient.
ObsClient obsClient = new ObsClient(ak, sk, endPoint);
// Specify the validity period of the URL to 3600 seconds.
long expireSeconds = 3600L;

Map<String, String> headers = new HashMap<String, String>();
String contentType = "text/plain";
headers.put("Content-Type", contentType);

TemporarySignatureRequest request = new TemporarySignatureRequest(HttpMethodEnum.PUT, expireSeconds);
request.setBucketName("bucketname");
request.setObjectKey("objectname");
request.setHeaders(headers);

TemporarySignatureResponse response = obsClient.createTemporarySignature(request);

System.out.println("Creating object using temporary signature url:");
System.out.println("\t" + response.getSignedUrl());
Request.Builder builder = new Request.Builder();
for (Map.Entry<String, String> entry : response.getActualSignedRequestHeaders().entrySet()) {
       builder.header(entry.getKey(), entry.getValue());
}

//Make a PUT request to upload an object.
Request httpRequest = builder.url(response.getSignedUrl()).put(RequestBody.create(MediaType.parse(contentType), "Hello OBS".getBytes("UTF-8"))).build();
OkHttpClient httpClient = new OkHttpClient.Builder().followRedirects(false).retryOnConnectionFailure(false)
              .cache(null).build();

Call c = httpClient.newCall(httpRequest);
Response res = c.execute();
System.out.println("\tStatus:" + res.code());
if (res.body() != null) {
       System.out.println("\tContent:" + res.body().string() + "\n");
}
res.close();

Downloading an Object

String endPoint = "http://your-endpoint";
String ak = "*** Provide your Access Key ***";
String sk = "*** Provide your Secret Key ***";

// Create an instance of ObsClient.
ObsClient obsClient = new ObsClient(ak, sk, endPoint);
// Specify the validity period of the URL to 3600 seconds.
long expireSeconds = 3600L;


TemporarySignatureRequest request = new TemporarySignatureRequest(HttpMethodEnum.GET, expireSeconds);
request.setBucketName("bucketname");
request.setObjectKey("objectname");

TemporarySignatureResponse response = obsClient.createTemporarySignature(request);

System.out.println("Getting object using temporary signature url:");
System.out.println("\t" + response.getSignedUrl());
Request.Builder builder = new Request.Builder();
for (Map.Entry<String, String> entry : response.getActualSignedRequestHeaders().entrySet()) {
       builder.header(entry.getKey(), entry.getValue());
}

//Make a GET request to download an object.
Request httpRequest = builder.url(response.getSignedUrl()).get().build();
OkHttpClient httpClient = new OkHttpClient.Builder().followRedirects(false).retryOnConnectionFailure(false)
              .cache(null).build();

Call c = httpClient.newCall(httpRequest);
Response res = c.execute();
System.out.println("\tStatus:" + res.code());
if (res.body() != null) {
       System.out.println("\tContent:" + res.body().string() + "\n");
}
res.close();

Listing Objects

String endPoint = "http://your-endpoint";
String ak = "*** Provide your Access Key ***";
String sk = "*** Provide your Secret Key ***";

// Create an instance of ObsClient.
ObsClient obsClient = new ObsClient(ak, sk, endPoint);
// Specify the validity period of the URL to 3600 seconds.
long expireSeconds = 3600L;


TemporarySignatureRequest request = new TemporarySignatureRequest(HttpMethodEnum.GET, expireSeconds);
request.setBucketName("bucketname");

TemporarySignatureResponse response = obsClient.createTemporarySignature(request);

System.out.println("Getting object list using temporary signature url:");
System.out.println("\t" + response.getSignedUrl());
Request.Builder builder = new Request.Builder();
for (Map.Entry<String, String> entry : response.getActualSignedRequestHeaders().entrySet()) {
       builder.header(entry.getKey(), entry.getValue());
}

//Make a GET request to obtain the object list.
Request httpRequest = builder.url(response.getSignedUrl()).get().build();
OkHttpClient httpClient = new OkHttpClient.Builder().followRedirects(false).retryOnConnectionFailure(false)
              .cache(null).build();

Call c = httpClient.newCall(httpRequest);
Response res = c.execute();
System.out.println("\tStatus:" + res.code());
if (res.body() != null) {
       System.out.println("\tContent:" + res.body().string() + "\n");
}
res.close();

Deleting an Object

String endPoint = "http://your-endpoint";
String ak = "*** Provide your Access Key ***";
String sk = "*** Provide your Secret Key ***";

// Create an instance of ObsClient.
ObsClient obsClient = new ObsClient(ak, sk, endPoint);
// Specify the validity period of the URL to 3600 seconds.
long expireSeconds = 3600L;


TemporarySignatureRequest request = new TemporarySignatureRequest(HttpMethodEnum.DELETE, expireSeconds);
request.setBucketName("bucketname");
request.setObjectKey("objectname");

TemporarySignatureResponse response = obsClient.createTemporarySignature(request);

System.out.println("Deleting object using temporary signature url:");
System.out.println("\t" + response.getSignedUrl());
Request.Builder builder = new Request.Builder();
for (Map.Entry<String, String> entry : response.getActualSignedRequestHeaders().entrySet()) {
       builder.header(entry.getKey(), entry.getValue());
}

//Make a DELETE request to delete an object.
Request httpRequest = builder.url(response.getSignedUrl()).delete().build();
OkHttpClient httpClient = new OkHttpClient.Builder().followRedirects(false).retryOnConnectionFailure(false)
              .cache(null).build();

Call c = httpClient.newCall(httpRequest);
Response res = c.execute();
System.out.println("\tStatus:" + res.code());
if (res.body() != null) {
       System.out.println("\tContent:" + res.body().string() + "\n");
}
res.close();

Initiating Multipart Upload

String endPoint = "http://your-endpoint";
String ak = "*** Provide your Access Key ***";
String sk = "*** Provide your Secret Key ***";

// Create an instance of ObsClient.
ObsClient obsClient = new ObsClient(ak, sk, endPoint);
// Specify the validity period of the URL to 3600 seconds.
long expireSeconds = 3600L;

TemporarySignatureRequest request = new TemporarySignatureRequest(HttpMethodEnum.POST, expireSeconds);
request.setBucketName("bucketname");
request.setObjectKey("objectname");
request.setSpecialParam(SpecialParamEnum.UPLOADS);

TemporarySignatureResponse response = obsClient.createTemporarySignature(request);

System.out.println("initiate multipart upload using temporary signature url:");
System.out.println("\t" + response.getSignedUrl());

Request.Builder builder = new Request.Builder();
for (Map.Entry<String, String> entry : response.getActualSignedRequestHeaders().entrySet()) {
       builder.header(entry.getKey(), entry.getValue());
}

// POST a request to initialize a multipart upload.
Request httpRequest = builder.url(response.getSignedUrl()).post(RequestBody.create(null, "")).build();
OkHttpClient httpClient = new OkHttpClient.Builder().followRedirects(false).retryOnConnectionFailure(false)
              .cache(null).build();

Call c = httpClient.newCall(httpRequest);
Response res = c.execute();
System.out.println("\tStatus:" + res.code());
if (res.body() != null) {
       System.out.println("\tContent:" + res.body().string() + "\n");
}
res.close();

Uploading Parts

String endPoint = "http://your-endpoint";
String ak = "*** Provide your Access Key ***";
String sk = "*** Provide your Secret Key ***";

// Create an instance of ObsClient.
ObsClient obsClient = new ObsClient(ak, sk, endPoint);
// Specify the validity period of the URL to 3600 seconds.
long expireSeconds = 3600L;

TemporarySignatureRequest request = new TemporarySignatureRequest(HttpMethodEnum.PUT, expireSeconds);
request.setBucketName("bucketname");
request.setObjectKey("objectname");

Map<String, Object> queryParams = new HashMap<String, Object>();
// Set the partNumber parameter, for example, queryParams.put("partNumber", "1").
queryParams.put("partNumber", "partNumber");
queryParams.put("uploadId", "your uploadId");

request.setQueryParams(queryParams);

TemporarySignatureResponse response = obsClient.createTemporarySignature(request);

System.out.println("upload part using temporary signature url:");
System.out.println("\t" + response.getSignedUrl());

Request.Builder builder = new Request.Builder();
for (Map.Entry<String, String> entry : response.getActualSignedRequestHeaders().entrySet()) {
       builder.header(entry.getKey(), entry.getValue());
}

// PUT a request to upload object parts.
Request httpRequest = builder.url(response.getSignedUrl()).put(RequestBody.create(null, new byte[6 * 1024 * 1024])).build();
OkHttpClient httpClient = new OkHttpClient.Builder().followRedirects(false).retryOnConnectionFailure(false)
              .cache(null).build();

Call c = httpClient.newCall(httpRequest);
Response res = c.execute();
System.out.println("\tStatus:" + res.code());
if (res.body() != null) {
       System.out.println("\tContent:" + res.body().string() + "\n");
}
res.close();

Listing Uploaded Parts

String endPoint = "http://your-endpoint";
String ak = "*** Provide your Access Key ***";
String sk = "*** Provide your Secret Key ***";

// Create an instance of ObsClient.
ObsClient obsClient = new ObsClient(ak, sk, endPoint);
// Specify the validity period of the URL to 3600 seconds.
long expireSeconds = 3600L;

TemporarySignatureRequest request = new TemporarySignatureRequest(HttpMethodEnum.GET, expireSeconds);
request.setBucketName("bucketname");
request.setObjectKey("objectname");

Map<String, Object> queryParams = new HashMap<String, Object>();
queryParams.put("uploadId", "your uploadId");
request.setQueryParams(queryParams);

TemporarySignatureResponse response = obsClient.createTemporarySignature(request);

System.out.println("list parts using temporary signature url:");
System.out.println("\t" + response.getSignedUrl());

Request.Builder builder = new Request.Builder();
for (Map.Entry<String, String> entry : response.getActualSignedRequestHeaders().entrySet()) {
       builder.header(entry.getKey(), entry.getValue());
}

// Make a GET request to list uploaded parts.
Request httpRequest = builder.url(response.getSignedUrl()).get().build();
OkHttpClient httpClient = new OkHttpClient.Builder().followRedirects(false).retryOnConnectionFailure(false)
              .cache(null).build();

Call c = httpClient.newCall(httpRequest);
Response res = c.execute();
System.out.println("\tStatus:" + res.code());
if (res.body() != null) {
       System.out.println("\tContent:" + res.body().string() + "\n");
}
res.close();

Merging Uploaded Parts

String endPoint = "http://your-endpoint";
String ak = "*** Provide your Access Key ***";
String sk = "*** Provide your Secret Key ***";

// Create an instance of ObsClient.
ObsClient obsClient = new ObsClient(ak, sk, endPoint);
// Specify the validity period of the URL to 3600 seconds.
long expireSeconds = 3600L;

TemporarySignatureRequest request = new TemporarySignatureRequest(HttpMethodEnum.POST, expireSeconds);
request.setBucketName("bucketname");
request.setObjectKey("objectname");

Map<String, String> headers = new HashMap<String, String>();
String contentType = "application/xml";
headers.put("Content-Type", contentType);
request.setHeaders(headers);

Map<String, Object> queryParams = new HashMap<String, Object>();
queryParams.put("uploadId", "your uploadId");
request.setQueryParams(queryParams);

TemporarySignatureResponse response = obsClient.createTemporarySignature(request);

System.out.println("complete multipart upload using temporary signature url:");
System.out.println("\t" + response.getSignedUrl());

Request.Builder builder = new Request.Builder();
for (Map.Entry<String, String> entry : response.getActualSignedRequestHeaders().entrySet()) {
       builder.header(entry.getKey(), entry.getValue());
}

// The following content is an example code. You need to assemble the following content by listing the response results of the uploaded parts.
String content = "<CompleteMultipartUpload>";
content += "<Part>";
content += "<PartNumber>1</PartNumber>";
content += "<ETag>da6a0d097e307ac52ed9b4ad551801fc</ETag>";
content += "</Part>";
content += "<Part>";
content += "<PartNumber>2</PartNumber>";
content += "<ETag>da6a0d097e307ac52ed9b4ad551801fc</ETag>";
content += "</Part>";
content += "</CompleteMultipartUpload>";

// POST a request to merge uploaded parts.
Request httpRequest = builder.url(response.getSignedUrl()).post(RequestBody.create(MediaType.parse(contentType), content.getBytes("UTF-8"))).build();
OkHttpClient httpClient = new OkHttpClient.Builder().followRedirects(false).retryOnConnectionFailure(false)
              .cache(null).build();

Call c = httpClient.newCall(httpRequest);
Response res = c.execute();
System.out.println("\tStatus:" + res.code());
if (res.body() != null) {
       System.out.println("\tContent:" + res.body().string() + "\n");
}
res.close();

Obtains the download link of image processing.

String endPoint = "http://your-endpoint";
String ak = "*** Provide your Access Key ***";
String sk = "*** Provide your Secret Key ***";

// Create an instance of ObsClient.
ObsClient obsClient = new ObsClient(ak, sk, endPoint);
// Specify the validity period of the URL to 3600 seconds.
long expireSeconds = 3600L;


TemporarySignatureRequest request = new TemporarySignatureRequest(HttpMethodEnum.GET, expireSeconds);
request.setBucketName("bucketname");
request.setObjectKey("objectname");

// Set the parameters for image processing.

Map<String,Object> queryParams = new HashMap<String, Object>();
queryParams.put("x-image-process", "image/resize,m_fixed,w_100,h_100/rotate,100");
request.setQueryParams(queryParams);

TemporarySignatureResponse response = obsClient.createTemporarySignature(request);
// Obtain the download link that supports image processing.
System.out.println("Getting object using temporary signature url:");
System.out.println("\t" + response.getSignedUrl());
res.close();

Downloading an SSE-C Encrypted Object

String endPoint = "http://your-endpoint";
String ak = "*** Provide your Access Key ***";
String sk = "*** Provide your Secret Key ***";

ObsConfiguration config = new ObsConfiguration();
config.setSocketTimeout(30000);
config.setConnectionTimeout(10000);
config.setEndPoint(endPoint);
// Create an instance of ObsClient.
ObsClient obsClient = new ObsClient(ak, sk, config);
// Specify the validity period of the URL to 3600 seconds.
long expireSeconds = 3600L;

TemporarySignatureRequest request = new TemporarySignatureRequest(HttpMethodEnum.GET, expireSeconds);
request.setBucketName("bucketname");
request.setObjectKey("objectname");
// Set SSE-C encryption headers.
Map<String, String> headers = new HashMap<String, String>();
headers.put("x-obs-server-side-encryption-customer-algorithm", "AES256");
// Set the encryption key. This header is a 256-bit key with Base64 encoding.
headers.put("x-obs-server-side-encryption-customer-key", "your base64 sse-c key generated by AES-256 algorithm");
// Set the MD5 value of the encryption key. This header is a 128-bit MD5 value with Base64 encoding.
headers.put("x-obs-server-side-encryption-customer-key-MD5", "the md5 value of your sse-c key");
request.setHeaders(headers);

TemporarySignatureResponse response = obsClient.createTemporarySignature(request);

System.out.println("Getting object using temporary signature url:");
System.out.println("\t" + response.getSignedUrl());
Request.Builder builder = new Request.Builder();
for (Map.Entry<String, String> entry : response.getActualSignedRequestHeaders().entrySet()) {
       builder.header(entry.getKey(), entry.getValue());
}

//Make a GET request to download an object.
Request httpRequest = builder.url(response.getSignedUrl()).get().build();
OkHttpClient httpClient = new OkHttpClient.Builder().followRedirects(false).retryOnConnectionFailure(false)
              .cache(null).build();

Call c = httpClient.newCall(httpRequest);
Response res = c.execute();
System.out.println("\tStatus:" + res.code());
if (res.body() != null) {
       System.out.println("\tContent:" + res.body().string() + "\n");
}
res.close();
  • HttpMethodEnum is an enumeration function defined in OBS Java SDK, whose value indicates the request method types.