AWS 區(qū)塊鏈服務(wù)為HTTP和WebSocket協(xié)議提供端點(diǎn)，但需要 IAM 簽名驗(yàn)證才能使用它們。要使用 HTTP 端點(diǎn)，我只需通過 AWS SDK在http.RoundTripper接口中對其進(jìn)行簽名。但是，如果我需要使用WebSocket端點(diǎn)，由于go-ethereum的限制，我只能通過rpc.DialWebsocketWithDialer傳入一個(gè)websocket.Dialer結(jié)構(gòu)，這意味著我無法通過實(shí)現(xiàn)接口來解決這個(gè)問題。如何將 AWS 區(qū)塊鏈服務(wù)的 WebSocket 端點(diǎn)與 go-ethereum 結(jié)合使用？
1 回答
精慕HU
TA貢獻(xiàn)1845條經(jīng)驗(yàn) 獲得超8個(gè)贊
通過閱讀github.com/gorilla/websocket 的源代碼，我發(fā)現(xiàn)函數(shù)中有一個(gè)邏輯(*Dialer) DialContext將 http.Request 指針傳遞給可定制的函數(shù)，這意味著我可以編寫一個(gè)與forProxy做同樣事情的函數(shù)http.RoundTripper注入標(biāo)頭。
WebSocket
package transport
import (
"context"
"crypto/sha256"
"encoding/hex"
"net/http"
"net/url"
"time"
"github.com/aws/aws-sdk-go-v2/aws"
"github.com/aws/aws-sdk-go-v2/aws/signer/v4"
"github.com/gorilla/websocket"
)
func NewWebSocketDialer(config aws.Config) (*websocket.Dialer, error) {
return &websocket.Dialer{
HandshakeTimeout: 45 * time.Second,
Proxy: func(request *http.Request) (*url.URL, error) {
credentials, err := config.Credentials.Retrieve(request.Context())
if err != nil {
return nil, err
}
// Because AWS may sign some unrelated headers and cause authentication failure, you need to create a blank request.
internalRequest, err := http.NewRequest(http.MethodGet, request.URL.String(), nil)
if err != nil {
return nil, err
}
header := request.Header.Clone()
hash := sha256.New()
signer := v4.NewSigner()
if err := signer.SignHTTP(context.Background(), credentials, internalRequest, hex.EncodeToString(hash.Sum(nil)), "managedblockchain", config.Region, time.Now()); err != nil {
return nil, err
}
request.Header = internalRequest.Header
request.Header.Set("Connection", header["Connection"][0])
request.Header.Set("Sec-WebSocket-Key", header["Sec-WebSocket-Key"][0])
request.Header.Set("Sec-WebSocket-Version", header["Sec-WebSocket-Version"][0])
request.Header.Set("Upgrade", header["Upgrade"][0])
return http.ProxyFromEnvironment(request)
},
}, nil
}
HTTP
package transport
import (
"compress/gzip"
"context"
"crypto/sha256"
"encoding/base64"
"encoding/hex"
"io"
"net/http"
"time"
"github.com/aws/aws-sdk-go-v2/aws"
"github.com/aws/aws-sdk-go-v2/aws/signer/v4"
)
var _ http.RoundTripper = &httpRoundTripper{}
type httpRoundTripper struct {
config aws.Config
}
func (h httpRoundTripper) RoundTrip(request *http.Request) (*http.Response, error) {
credentials, err := h.config.Credentials.Retrieve(request.Context())
if err != nil {
return nil, err
}
internalRequest := request.Clone(request.Context())
bodyReader, err := request.GetBody()
if err != nil {
return nil, err
}
hash := sha256.New()
if _, err := io.Copy(hash, bodyReader); err != nil {
return nil, err
}
signer := v4.NewSigner()
if err := signer.SignHTTP(context.Background(), credentials, internalRequest, hex.EncodeToString(hash.Sum(nil)), "managedblockchain", h.config.Region, time.Now()); err != nil {
return nil, err
}
response, err := h.config.HTTPClient.Do(internalRequest)
if err != nil {
return nil, err
}
if response.Header.Get("Content-Type") == "gzip" {
gzipReader, err := gzip.NewReader(base64.NewDecoder(base64.StdEncoding, response.Body))
if err != nil {
return nil, err
}
request.Header.Set("Content-Type", "application/json")
response.Body = gzipReader
}
return response, nil
}
func NewHttpRoundTripper(cfg aws.Config) http.RoundTripper {
return httpRoundTripper{
config: cfg,
}
}
- 1 回答
- 0 關(guān)注
- 125 瀏覽
添加回答
舉報(bào)
0/150
提交
取消