PDF《Micro Video Service》

Micro Video Service 开发者手册 Product Introduction 开发者手册 Product Introduction Copyright Notice ?2013-2017 Tencent Cloud.

All rights reserved. Copyright in this document is exclusively owned by Tencent Cloud. You must not reproduce, modify, copy or distribute in any way, in whole or in part, the contents of this document without Tencent Cloud's the prior written consent. Trademark Notice All trademarks associated with Tencent Cloud and its services are owned by Tencent Cloud Computing (Beijing) Company Limited and its affiliated companies. Trademarks of third parties referred to in this document are owned by their respective proprietors. Service Statement This document is intended to provide users with general information about Tencent Cloud's products and services only and does not form part of Tencent Cloud's terms and conditions. Tencent Cloud's products or services are subject to change. Specific products and services and the standards applicable to them are exclusively provided for in Tencent Cloud's applicable terms and conditions. Page

2 of

8 ?2013-2017 Tencent Cloud. All rights reserved. 开发者手册 Product Introduction Contents Documentation Legal Notice

2 开发者手册.4 鉴权及签名文档

4 Page

3 of

8 ?2013-2017 Tencent Cloud. All rights reserved. 开发者手册 Product Introduction 开发者手册 鉴权及签名文档

1 签名与鉴权 腾讯移动服务通过签名来验证请求的合法性.开发者通过将签名授权给客户端,使其具备上传下载及管理指定 资源的能力.签名分为多次有效签名和单次有效签名: 多次有效签名: 签名中不绑定文件fileid,需要设置大于当前时间的有效期,有效期内此签名可多次使用,有效期最长可设置三 个月. 单次有效签名: 签名中绑定文件fileid,有效期必须设置为0,此签名只可使用一次,且只能应用于被绑定的文件. 具体适用场景参见签名适用场景.

2 签名算法 2.1 获取签名所需信息 生成签名所需信息包括项目ID(appid),空间名称(bucket,视频资源的组织管理单元),项目的Secret ID和Secret Key.获取这些信息的方法如下: 1) 登录 微视频-视频空间, 进入视频空间;

2) 如开发者未创建视频空间,可添加视频空间,空间名称(bucket)由用户自行输入;

3) 登陆视频空间-项目设置,进入项目设置;

4) 如果开发者未添加密钥,则需添加密钥,获取项目的Secret ID和Secret Key,每个项目最多添加两对密钥;

如果已经添加过密钥则直接获取项目的Appid、Secret ID和Secret Key. 注: (1) 添加视频空间可参考添加视频空间;

(2) 密钥管理可参考添加密钥. 2.2 拼接签名串 拼接多次有效签名串: Page

4 of

8 ?2013-2017 Tencent Cloud. All rights reserved. 开发者手册 Product Introduction a=[appid]&b=[bucket]&k=[SecretID]&e=[expiredTime]&t=[currentTime]&r=[rand]&f= 拼接单次有效签名串: a=[appid]&b=[bucket]&k=[SecretID]&e=[expiredTime]&t=[currentTime]&r=[rand]&f=[fileid] 签名串中各字段含义如下: 字段 解释 a 开发者的项目ID,接入微视频创建空间时系统生成的唯 一标识项目的ID,即Appid b 视频空间名称bucket k 项目的Secret ID e 签名的有效期,是一个符合UNIX Epoch时间戳规范的 数值,单位为秒;

单次签名时,e必须设置为0 t 当前时间戳,是一个符合UNIX Epoch时间戳规范的数 值,单位为秒,多次签名时,e应大于t r 随机串,无符号10进制整数,用户需自行生成,最长1 0位fileid 资源存储的唯一标识,格式为"/appid/bucketname/ 用户自定义路径或资源名",并且需要对其中非'/'字符 进行urlencode编码 注: 拼接单次有效签名的签名串时,过期时间e必须设置为0 ,以保证此签名只能只能针对固定资源且只能使用一次;