using Aliyun.Acs.Core.Exceptions;
using Aliyun.Acs.Sts.Model.V20150401;
using Aliyun.Acs.Core.Http;
using Aliyun.Acs.Core.Profile;
using Aliyun.Acs.Core;namespace Test
{public class OssServer{private const string REGION_CN_HANGZHOU = "cn-hangzhou";private const string STS_API_VERSION = "2015-04-01";private const string AccessKeyID = "****你的AccessKeyID****";private const string AccessKeySecret = "****你的AccessKeySecret****";private const string RoleArn = "****你的RoleArn****";private const int TokenExpireTime = 3600;//这里是权限配置，请参考oss的文档private const string PolicyFile = @"{""Statement"": [{""Action"": [""oss:PutObject""],""Effect"": ""Allow"",""Resource"": [""acs:oss:*:*:bucketName/*"", ""acs:oss:*:*:bucketName""]}],""Version"": ""1""
}"; private AssumeRoleResponse assumeRole(String accessKeyId, String accessKeySecret, String roleArn,String roleSessionName, String policy, ProtocolType protocolType, long durationSeconds){try{// 创建一个 Aliyun Acs Client, 用于发起 OpenAPI 请求IClientProfile profile = DefaultProfile.GetProfile(REGION_CN_HANGZHOU, accessKeyId, accessKeySecret);DefaultAcsClient client = new DefaultAcsClient(profile);// 创建一个 AssumeRoleRequest 并设置请求参数AssumeRoleRequest request = new AssumeRoleRequest();//request.Version = STS_API_VERSION;request.Method = MethodType.POST;//request.Protocol = protocolType;
request.RoleArn = roleArn;request.RoleSessionName = roleSessionName;request.Policy = policy;request.DurationSeconds = durationSeconds;// 发起请求，并得到responseAssumeRoleResponse response = client.GetAcsResponse(request);return response;}catch (ClientException e){throw e;}}public StsTokenModel GetToken(){// 只有 RAM用户（子账号）才能调用 AssumeRole 接口// 阿里云主账号的AccessKeys不能用于发起AssumeRole请求// 请首先在RAM控制台创建一个RAM用户，并为这个用户创建AccessKeys// RoleArn 需要在 RAM 控制台上获取// RoleSessionName 是临时Token的会话名称，自己指定用于标识你的用户，主要用于审计，或者用于区分Token颁发给谁// 但是注意RoleSessionName的长度和规则，不要有空格，只能有'-' '_' 字母和数字等字符// 具体规则请参考API文档中的格式要求string roleSessionName = "alice-001";// 必须为 HTTPStry{AssumeRoleResponse stsResponse = assumeRole(AccessKeyID, AccessKeySecret, RoleArn, roleSessionName,PolicyFile, ProtocolType.HTTPS, TokenExpireTime);return new StsTokenModel(){status = 200,AccessKeyId = stsResponse.Credentials.AccessKeyId,AccessKeySecret = stsResponse.Credentials.AccessKeySecret,Expiration = stsResponse.Credentials.Expiration,Security = stsResponse.Credentials.SecurityToken};}catch (ClientException e){return new StsTokenModel() { status = Convert.ToInt32(e.ErrorCode) };}}}
}    

    public class StsTokenModel{public int status { get; set; }public string AccessKeyId { get; set; }public string AccessKeySecret { get; set; }public string Security { get; set; }public string Expiration { get; set; }}