<?php
/* =================================================================================
 * License: GPL-2.0 license
 * Author: 众产®  https://ciy.cn/code
 * Version: 0.1.2
====================================================================================*/

namespace web\ambap;

class upload {
    public static function json_upload() {
        $rsuser = verifyfast();
        error_reporting(E_ALL ^ E_NOTICE);
        $uploadcfg['exts'] = array(
            'jpe', 'jpg', 'jpeg', 'gif', 'png', 'ai', 'bmp', 'psb', 'psd', 'tif', 'svg', 'webp',
            'zip', '7z', 'rar', 'tar', 'arj', 'iso', 'cab', 'gz',
            'txt', 'csv', 'doc', 'docx', 'pps', 'ppt', 'pptx', 'pdf', 'wps', 'wpt', 'xls', 'xlsx', 'xml', 'et', 'ett',
            'avi', 'mp4', 'mp3', 'swf', 'flv', 'f4v', 'm4v', 'wma', 'rm', 'rmvb', '3gp', 'ts', 'mts', 'vob', 'mpg', 'mpeg', 'mov', 'wmv', 'wav',
            'bak', 'cad', 'chm', 'log', 'ai', 'ico'
        );
        $uploadcfg['noexts'] = array('goc', 'php', 'php3', 'php4', 'phtm', 'phtml', 'php5', 'js', 'html', 'htm', 'sh', 'so'); //建议nginx部署使用。
        $uploadcfg['checkext'] = 'exts'; //扩展名白名单exts、黑名单noexts
        $path = get('pathfile');
        $rep = get('rep');
        if(empty($path))
            return errjson('缺少参数pathfile');
        if (count($_FILES) == 0)
            return errjson('没有文件上传');
        $file = reset($_FILES);
        if ($file['error'] > 0)
            return errjson(\ciy\upload::UploadError($file['error']));
        list($name, $extfile) = \ciy\upload::Fileext($path);
        if ($uploadcfg['checkext'] == 'exts') {
            if (!in_array($extfile, $uploadcfg['exts']))
                return errjson("不允许上传{$extfile}类型文件");
        } else {
            if (in_array($extfile, $uploadcfg['noexts']))
                return errjson("禁止上传{$extfile}类型文件");
        }
        $ret = \ciy\upload::SaveUploadFile($path, $file, $rep == 'true');
        if (is_array($ret))
            return succjson($ret);
        return errjson($ret);
    }
    public static function json_yunsync() {
        if (count($_FILES) == 0)
            return errjson('没有文件上传');
        $file = reset($_FILES);
        if ($file['error'] > 0)
            return errjson('上传参数出错:' . $file['error']);
        //上传临时文件,通过http put 上传到s3
        $post = new \ciy\post();
        $headers = json_decode($post->get('headers'), true);
        $url = $post->get('url');
        $http = new \ciy\http();
        foreach($headers as $key => $value){
            $http->set_header($key,$value);
        }
        $http->set_method('PUT');
        $http->upfile($url, $file['tmp_name']);
        $statcode = $http->get_statcode();
        if($statcode == 200)
            return succjson();
        $data = $http->get_data();
        $ind = strpos($data,'error:');
        if($ind !== false)
            return errjson(substr($data, $ind + 6));
        return errjson('code[' . $statcode . ']');
    }
    public static function json_s3() {
        //根据token的ABC决定，用哪个key，包含access/key/region/bucket/endpoint
        //存到目录和文件，由js决定，ud/xxx/xxx.jpg
        $path = get('pathfile'); //    s0/2/2024/0913/demo/65631_7101.jpg
        $storselect = get('storselect'); //   A
        $cfg = webini('s3' . $storselect);
        if(is_string($cfg))
            return errjson($cfg);

        $objectKey = 'ud/' . $path;
        $sha256 = 'UNSIGNED-PAYLOAD';

        $zdate = gmdate('Ymd\THis\Z');
        $shortDate = substr($zdate, 0, 8);

        $dateKey = hash_hmac('sha256', $shortDate, 'AWS4' . $cfg['secret'], true);

        $regionKey = hash_hmac('sha256', $cfg['region'], $dateKey, true);
        $serviceKey = hash_hmac('sha256', 's3', $regionKey, true);
        $signingKey = hash_hmac('sha256', 'aws4_request', $serviceKey, true);

        $canonicalUri = '/' . $cfg['bucket'] . '/' . $objectKey;
        $canonicalQueryString = '';
        $canonicalHeaders = 'host:' . $cfg['endpoint'] . "\n" .
            'x-amz-acl:' . $cfg['acl'] . "\n" .
            'x-amz-content-sha256:' . $sha256 . "\n" .
            'x-amz-date:' . $zdate . "\n";
        $signedHeaders = 'host;x-amz-acl;x-amz-content-sha256;x-amz-date';
        $canonicalRequest = 'PUT' . "\n" .
            $canonicalUri . "\n" .
            $canonicalQueryString . "\n" .
            $canonicalHeaders . "\n" .
            $signedHeaders . "\n" .
            $sha256;

        $stringToSign = 'AWS4-HMAC-SHA256' . "\n" .
            $zdate . "\n" .
            $shortDate . '/' . $cfg['region'] . '/s3/aws4_request' . "\n" .
            hash('sha256', $canonicalRequest);

        $signature = hash_hmac('sha256', $stringToSign, $signingKey);

        $authorizationHeader = 'AWS4-HMAC-SHA256 Credential=' . $cfg['access'] . '/' . $shortDate . '/' . $cfg['region'] . '/s3/aws4_request, ' .
            'SignedHeaders=' . $signedHeaders . ', ' .
            'Signature=' . $signature;

        $ret['method'] = 'PUT';
        $ret['url'] = 'https://' . $cfg['endpoint'] . '/' . $cfg['bucket'] . '/' . $objectKey;
        $ret['syncurl'] = 'https://up.ciy.cn/up/?json=true&func=yunsync';
        $ret['headers'] = array();
        $ret['headers']['Authorization'] = $authorizationHeader;
        $ret['headers']['x-amz-acl'] = $cfg['acl'];
        $ret['headers']['x-amz-content-sha256'] = $sha256;
        $ret['headers']['x-amz-date'] = $zdate;
        //直传后返回url
        return succjson($ret);
    }
}