vanilla js로 AWS signature version 4 계산

Question

인증유형이 AWS_IAM인 Lambda 함수 URL로 API를 호출해야 하는데 순수 javascript 프로젝트라서 라이브러리를 사용할 수 없어서 직접 signature를 계산하는 로직을 작성했는데 아래와 같이 signature가 일치하지 않는다는 에러가 발생합니다.message : &#34;The request signature we calculated does not match the signature you provided. Check your AWS Secret Access Key and signing method. Consult the service documentation for details.&#34;Lambda 함수 URL로 API 호출하는 코드입니다.function getSignatureKey(key, dateStamp, regionName, serviceName) { var kDate &#61; CryptoJS.HmacSHA256(dateStamp, &#34;AWS4&#34; &#43; key); var kRegion &#61; CryptoJS.HmacSHA256(regionName, kDate); var kService &#61; CryptoJS.HmacSHA256(serviceName, kRegion); var kSigning &#61; CryptoJS.HmacSHA256(&#34;aws4_request&#34;, kService); return kSigning; } const now &#61; new Date(); const amzdate &#61; now .toJSON() .replace(/[-:]/g, &#34;&#34;) .replace(/\.[0-9]*/, &#34;&#34;); const datestamp &#61; now.toJSON().replace(/-/g, &#34;&#34;).replace(/T.*/, &#34;&#34;); const accessKey &#61; &#34;&#34;; const secretKey &#61; &#34;&#34;; const sessionToken &#61; &#34;&#34;; const region &#61; &#34;ap-northeast-2&#34;; const serviceName &#61; &#34;lambda&#34;; const apiMethod &#61; &#34;GET&#34;; const apiHost &#61; &#34;lambda 함수 url&#34;; const apiQueryString &#61; &#34;&#34;; const canonicalHeaders &#61; &#34;host:&#34; &#43; apiHost &#43; &#34;
x-amz-date:&#34; &#43; amzdate &#43; &#34;
x-amz-security-token:&#34; &#43; sessionToken &#43; &#34;
&#34;; const signedHeaders &#61; &#34;host;x-amz-date;x-amz-security-token&#34;; const payloadHash &#61; CryptoJS.SHA256(&#34;&#34;).toString(CryptoJS.enc.Hex); const canonicalRequest &#61; apiMethod &#43; &#34;
&#34; &#43; apiQueryString &#43; &#34;
&#34; &#43; canonicalHeaders &#43; &#34;
&#34; &#43; signedHeaders &#43; &#34;
&#34; &#43; payloadHash; const algorithm &#61; &#34;AWS4-HMAC-SHA256&#34;; const credentialScope &#61; datestamp &#43; &#34;/&#34; &#43; region &#43; &#34;/&#34; &#43; serviceName &#43; &#34;/&#34; &#43; &#34;aws4_request&#34;; const stringToSign &#61; algorithm &#43; &#34;
&#34; &#43; amzdate &#43; &#34;
&#34; &#43; credentialScope &#43; &#34;
&#34; &#43; CryptoJS.SHA256(canonicalRequest).toString(CryptoJS.enc.Hex); const signingKey &#61; getSignatureKey(secretKey, datestamp, region, serviceName); const signature &#61; CryptoJS.HmacSHA256(signingKey, stringToSign).toString( CryptoJS.enc.Hex ); const authorizationHeader &#61; algorithm &#43; &#34; Credential&#61;&#34; &#43; accessKey &#43; &#34;/&#34; &#43; credentialScope &#43; &#34;, SignedHeaders&#61;host;x-amz-date, Signature&#61;&#34; &#43; signature; fetch(URL, { method: &#34;GET&#34;, headers: { Accept: &#34;application/json&#34;, &#34;X-Amz-Security-Token&#34;: sessionToken, &#34;X-Amz-Date&#34;: amzdate, Authorization: authorizationHeader, }, }) .then((resp) &#61;> resp.json()) .then(function (data) { let items &#61; data.Items; return ( items && items.map((item, index) &#61;> { }); }) ); }) .catch((err) &#61;> console.log(err));Lambda 코드입니다.const AWS &#61; require('aws-sdk'); const dynamo &#61; new AWS.DynamoDB.DocumentClient(); exports.handler &#61; async (event, context) &#61;> { let body; let statusCode &#61; '200'; const headers &#61; { Accept: '*/*', 'content-type': 'application/json', 'Access-Control-Allow-Headers' : &#34;Access-Control-Allow-Headers, Origin, Accept, Authorization, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, X-Amz-Date&#34;, 'Access-Control-Allow-Origin' : 'http://127.0.0.1:5500, https://master.amplifyapp.com', 'Access-Control-Allow-Methods': 'POST, GET, OPTIONS, DELETE' }; try { switch (event.requestContext.http.method) { case 'DELETE': body &#61; await dynamo.delete(JSON.parse(event.body)).promise(); break; case 'GET': body &#61; await dynamo.scan({ TableName: &#34;EEGPlatform_Proejct&#34; }).promise(); break; case 'POST': body &#61; await dynamo.put(JSON.parse(event.body)).promise(); break; case 'PUT': body &#61; await dynamo.update(JSON.parse(event.body)).promise(); break; default: throw new Error(&#96;Unsupported method &#34;${event.httpMethod}&#34;&#96;); } } catch (err) { statusCode &#61; '400'; body &#61; err.message; } finally { body &#61; JSON.stringify(body); } return { statusCode, body, headers, }; }Postman에서는 AWS_IAM으로 정상적으로 호출되는 것 확인했습니다.며칠 째 계속 잡고 있는데 어느 부분에서 잘못됐는지 모르겠어서 질문올려봅니다. 도움 주시면 정말 감사하겠습니다.

vanilla js로 AWS signature version 4 계산

0개의 답변

#vanillajs 목록