2.3.11.6. 围绕将 STS Lite 与 Keystone 搭配使用的限制（技术预览）

流程

1. 打开并编辑 Boto 的 auth.py 文件。

   1. 将以下四行添加到代码块中：

      class SigV4Auth(BaseSigner):
        """
        Sign a request with Signature V4.
        """
        REQUIRES_REGION = True
      
        def __init__(self, credentials, service_name, region_name):
            self.credentials = credentials
            # We initialize these value here so the unit tests can have
            # valid values.  But these will get overriden in ``add_auth``
            # later for real requests.
            self._region_name = region_name
            if service_name == 'sts': 

      1

      
                self._service_name = 's3' 

      2

      
            else: 

      3

      
                self._service_name = service_name 

      4

      Copy to Clipboard Toggle word wrap

   2. 将以下两行添加到代码块中：

      def _modify_request_before_signing(self, request):
              if 'Authorization' in request.headers:
                  del request.headers['Authorization']
              self._set_necessary_date_headers(request)
              if self.credentials.token:
                  if 'X-Amz-Security-Token' in request.headers:
                      del request.headers['X-Amz-Security-Token']
                  request.headers['X-Amz-Security-Token'] = self.credentials.token
      
              if not request.context.get('payload_signing_enabled', True):
                  if 'X-Amz-Content-SHA256' in request.headers:
                      del request.headers['X-Amz-Content-SHA256']
                  request.headers['X-Amz-Content-SHA256'] = UNSIGNED_PAYLOAD 

      1

      
              else: 

      2

      
                  request.headers['X-Amz-Content-SHA256'] = self.payload(request)

      Copy to Clipboard Toggle word wrap