如何在 Google Cloud Function 中生成链接到特定存储桶 GCS 的预签名 URL？

Question

如何将服务账号生成的私钥文件添加到云功能进行认证？

以下代码返回身份验证凭据错误，它说我需要一个私钥来签署凭据。如何创建这个并传入云函数？

import datetime

from google.cloud import storage


def generate_download_signed_url_v4(bucket_name, blob_name):
    """Generates a v4 signed URL for downloading a blob.

    Note that this method requires a service account key file. You can not use
    this if you are using Application Default Credentials from Google Compute
    Engine or from the Google Cloud SDK.
    """
    # bucket_name = 'your-bucket-name'
    # blob_name = 'your-object-name'

    storage_client = storage.Client()
    bucket = storage_client.bucket(bucket_name)
    blob = bucket.blob(blob_name)

    url = blob.generate_signed_url(
        version="v4",
        # This URL is valid for 15 minutes
        expiration=datetime.timedelta(minutes=15),
        # Allow GET requests using this URL.
        method="GET",
    )

    print("Generated GET signed URL:")
    print(url)
    print("You can use this URL with any user agent, for example:")
    print("curl '{}'".format(url))
    return url

Answer 1

我可以帮助您找到有关如何使用 Python 在 GCF 中创建签名 url 的信息。您需要使用Cloud Storage Python Client libraries，正如官方 GCP 文档中的 example 中所述。此外，Medium 上的 example 也可以帮助您。