README

Please use the features of the official AWS SDK PHP https://github.com/aws/aws-sdk-php

Specifically, have a look at https://docs.aws.amazon.com/sdk-for-php/v3/developer-guide/s3-presigned-post.html

Create V4 signature for AWS S3 REST API Post requests

Homepage: https://github.com/mfn/php-aws-post-v4-sign

Blurb

This library can create signature for a POST request designated for Amazon Simple Storage (S3) REST API service.

This package does not depend on the AWS PHP SDK. It can only create a signature. Logically, this code exists in similar form inside the SDK, but it's not possible form the outside to leaverage it.

Fore more information see:

Requirements

PHP 5.4

Install / Setup

Using composer: composer.phar require mfn/aws-post-v4-sign 0.1

Example

<?php
use Mfn\Aws\Signature\V4\SignatureV4;

$secret = 'ADFSDFDS3432S23423'; # Your secret key => never share!
$time = time();
$credential = join('/', [
    $accesKeyId, # Your AWS access key ID
    gmdate('Ymd', $time),
    'us-west-1',
    's3',
    'aws4_request',
]);
# Example policy
$policy = [
    'expiration' => gmdate('Y-m-d\TH:i:s\Z', strtotime('+2 hours', $time)),
    'conditions' => [
        ['acl' => 'public-read'],
        ['bucket' => 'your-bucket'],
        ['starts-with', '$key', ''],
        ['x-amz-credential' => $credential],
        ['x-amz-algorithm' => 'AWS4-HMAC-SHA256'],
        ['x-amz-date' => gmdate('Ymd\THis\Z', $time)],
    ],
];

$sigGen = new SignatureV4(
    $secret, # the secret part; never share with anyone!
    $policy
);
$signature = $sigGen->getSignature();

The SignatureV4 class will parse the $policy to that extent to extract the x-awz-credential key, as this credential is an essential part for creating the signature.

As a base64 encoded JSON representation of the $policy is required to create the signature and is usually required for the final request, a method for retrieving it exists: $encodedPolicy = $sigGen->getBase64EncodedPolicy();

Contribute

Fork it, hack on a feature branch, create a pull request, be awesome!

No developer is an island so adhere to these standards:

mfn / aws-post-v4-sign

Maintainers

Details