Help Center/
Object Storage Service/
SDK Reference/
BrowserJS/
Server-Side Encryption/
Example of Encryption
Updated on 2024-04-26 GMT+08:00
Example of Encryption
If you have any questions during development, post them on the Issues page of GitHub. For details about parameters and usage of each API, see the API Reference.
Encrypting an Object to Be Uploaded
Sample code:
// Create an instance of ObsClient. var obsClient = new ObsClient({ // Hard-coded or plaintext AK/SK are risky. For security purposes, encrypt your AK/SK and store them in the configuration file or environment variables. In this example, the AK/SK are stored in environment variables for identity authentication. Before running this example, configure environment variables AccessKeyID and SecretAccessKey. // The front-end code does not have the process environment variable, so you need to use a module bundler like webpack to define the process variable. // Obtain an AK/SK pair on the management console. For details, see https://support.huaweicloud.com/intl/en-us/usermanual-ca/ca_01_0003.html. access_key_id: process.env.AccessKeyID, secret_access_key: process.env.SecretAccessKey, // Replace the example endpoint with the actual one in your case. server: 'https://obs.ap-southeast-1.myhuaweicloud.com' }); obsClient.putObject({ Bucket: 'bucketname', Key: 'objectname', SourceFile: document.getElementById('input-file').files[0], // Set the SSE-C encryption algorithm. SseC: 'AES256', // Use the original AES-256 character string, but not the key after Base64 encoding. SseCKey: 'your sse-c key generated by AES-256 algorithm' }, function (err, result) { if(err){ console.log('Error-->' + err); }else{ console.log('Status-->' + result.CommonMsg.Status); } }); obsClient.putObject({ Bucket: 'bucketname', Key: 'objectname2', SourceFile: document.getElementById('input-file2').files[0], // Set the SSE-KMS encryption algorithm. SseKms: 'kms' }, function (err, result) { if(err){ console.log('Error-->' + err); }else{ console.log('Status-->' + result.CommonMsg.Status); } });
Decrypting a Downloaded Object
Sample code:
// Create an instance of ObsClient. var obsClient = new ObsClient({ // Hard-coded or plaintext AK/SK are risky. For security purposes, encrypt your AK/SK and store them in the configuration file or environment variables. In this example, the AK/SK are stored in environment variables for identity authentication. Before running this example, configure environment variables AccessKeyID and SecretAccessKey. // The front-end code does not have the process environment variable, so you need to use a module bundler like webpack to define the process variable. // Obtain an AK/SK pair on the management console. For details, see https://support.huaweicloud.com/intl/en-us/usermanual-ca/ca_01_0003.html. access_key_id: process.env.AccessKeyID, secret_access_key: process.env.SecretAccessKey, // Replace the example endpoint with the actual one in your case. server: 'https://obs.ap-southeast-1.myhuaweicloud.com' }); obsClient.getObject({ Bucket: 'bucketname', Key: 'objectname', // Set the SSE-C decryption algorithm. SseC: 'AES256', // The key used here must be the one used for uploading the object. SseCKey: 'your sse-c key generated by AES-256 algorithm' }, function (err, result) { if(err){ console.log('Error-->' + err); }else{ console.log('Status-->' + result.CommonMsg.Status); if(result.CommonMsg.Status < 300 && result.InterfaceResult){ console.log('Content-->' + result.InterfaceResult.Content); } } });
Parent topic: Server-Side Encryption
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.
The system is busy. Please try again later.
For any further questions, feel free to contact us through the chatbot.
Chatbot