如何使用AWS区块链服务与go-ethereum?

huangapple go评论114阅读模式
英文:

How to use the AWS blockchain service with go-ethereum?

问题

AWS区块链服务提供了HTTPWebSocket协议的端点,但需要使用IAM签名验证才能使用它们。

要使用HTTP端点,只需通过AWS SDK在http.RoundTripper接口中对其进行签名即可。然而,如果我需要使用WebSocket端点,由于go-ethereum的限制,我只能通过websocket.Dialer结构通过rpc.DialWebsocketWithDialer传递,这意味着我无法通过实现接口来解决这个问题。

如何在go-ethereum中使用AWS区块链服务的WebSocket端点?

英文:

The AWS Blockchain service provides endpoints for HTTP and WebSocket protocols, but requires IAM signature verification to use them.

To use the HTTP endpoint, I just need to sign it in the http.RoundTripper interface via the AWS SDK. However, if I need to use a WebSocket endpoint, I can only pass in a websocket.Dialer structure via rpc.DialWebsocketWithDialer due to the limitations of go-ethereum, which means that I can't solve this problem by implementing an interface.

How do I use the AWS Blockchain Service's WebSocket endpoint with go-ethereum?

答案1

得分: 3

通过阅读github.com/gorilla/websocket的源代码,我发现在(*Dialer) DialContext函数中有一个逻辑,可以将http.Request指针传递给可定制的Proxy函数,这意味着我可以编写一个函数来实现与http.RoundTripper相同的功能,用于注入标头。

WebSocket

  1. package transport
  2. import (
  3. "context"
  4. "crypto/sha256"
  5. "encoding/hex"
  6. "net/http"
  7. "net/url"
  8. "time"
  9. "github.com/aws/aws-sdk-go-v2/aws"
  10. "github.com/aws/aws-sdk-go-v2/aws/signer/v4"
  11. "github.com/gorilla/websocket"
  12. )
  13. func NewWebSocketDialer(config aws.Config) (*websocket.Dialer, error) {
  14. return &websocket.Dialer{
  15. HandshakeTimeout: 45 * time.Second,
  16. Proxy: func(request *http.Request) (*url.URL, error) {
  17. credentials, err := config.Credentials.Retrieve(request.Context())
  18. if err != nil {
  19. return nil, err
  20. }
  21. // 因为AWS可能会签署一些无关的标头并导致身份验证失败,所以需要创建一个空请求。
  22. internalRequest, err := http.NewRequest(http.MethodGet, request.URL.String(), nil)
  23. if err != nil {
  24. return nil, err
  25. }
  26. header := request.Header.Clone()
  27. hash := sha256.New()
  28. signer := v4.NewSigner()
  29. if err := signer.SignHTTP(context.Background(), credentials, internalRequest, hex.EncodeToString(hash.Sum(nil)), "managedblockchain", config.Region, time.Now()); err != nil {
  30. return nil, err
  31. }
  32. request.Header = internalRequest.Header
  33. request.Header.Set("Connection", header["Connection"][0])
  34. request.Header.Set("Sec-WebSocket-Key", header["Sec-WebSocket-Key"][0])
  35. request.Header.Set("Sec-WebSocket-Version", header["Sec-WebSocket-Version"][0])
  36. request.Header.Set("Upgrade", header["Upgrade"][0])
  37. return http.ProxyFromEnvironment(request)
  38. },
  39. }, nil
  40. }

HTTP

  1. package transport
  2. import (
  3. "compress/gzip"
  4. "context"
  5. "crypto/sha256"
  6. "encoding/base64"
  7. "encoding/hex"
  8. "io"
  9. "net/http"
  10. "time"
  11. "github.com/aws/aws-sdk-go-v2/aws"
  12. "github.com/aws/aws-sdk-go-v2/aws/signer/v4"
  13. )
  14. var _ http.RoundTripper = &httpRoundTripper{}
  15. type httpRoundTripper struct {
  16. config aws.Config
  17. }
  18. func (h httpRoundTripper) RoundTrip(request *http.Request) (*http.Response, error) {
  19. credentials, err := h.config.Credentials.Retrieve(request.Context())
  20. if err != nil {
  21. return nil, err
  22. }
  23. internalRequest := request.Clone(request.Context())
  24. bodyReader, err := request.GetBody()
  25. if err != nil {
  26. return nil, err
  27. }
  28. hash := sha256.New()
  29. if _, err := io.Copy(hash, bodyReader); err != nil {
  30. return nil, err
  31. }
  32. signer := v4.NewSigner()
  33. if err := signer.SignHTTP(context.Background(), credentials, internalRequest, hex.EncodeToString(hash.Sum(nil)), "managedblockchain", h.config.Region, time.Now()); err != nil {
  34. return nil, err
  35. }
  36. response, err := h.config.HTTPClient.Do(internalRequest)
  37. if err != nil {
  38. return nil, err
  39. }
  40. if response.Header.Get("Content-Type") == "gzip" {
  41. gzipReader, err := gzip.NewReader(base64.NewDecoder(base64.StdEncoding, response.Body))
  42. if err != nil {
  43. return nil, err
  44. }
  45. request.Header.Set("Content-Type", "application/json")
  46. response.Body = gzipReader
  47. }
  48. return response, nil
  49. }
  50. func NewHttpRoundTripper(cfg aws.Config) http.RoundTripper {
  51. return httpRoundTripper{
  52. config: cfg,
  53. }
  54. }

以上是要翻译的内容。

英文:

By reading the github.com/gorilla/websocket source code, I found out that there is a logic in the (*Dialer) DialContext function to pass the http.Request pointer into the customizable Proxy function, which means I can write a function that does the same thing as http.RoundTripper for injecting header.

WebSocket

  1. package transport
  2. import (
  3. "context"
  4. "crypto/sha256"
  5. "encoding/hex"
  6. "net/http"
  7. "net/url"
  8. "time"
  9. "github.com/aws/aws-sdk-go-v2/aws"
  10. "github.com/aws/aws-sdk-go-v2/aws/signer/v4"
  11. "github.com/gorilla/websocket"
  12. )
  13. func NewWebSocketDialer(config aws.Config) (*websocket.Dialer, error) {
  14. return &websocket.Dialer{
  15. HandshakeTimeout: 45 * time.Second,
  16. Proxy: func(request *http.Request) (*url.URL, error) {
  17. credentials, err := config.Credentials.Retrieve(request.Context())
  18. if err != nil {
  19. return nil, err
  20. }
  21. // Because AWS may sign some unrelated headers and cause authentication failure, you need to create a blank request.
  22. internalRequest, err := http.NewRequest(http.MethodGet, request.URL.String(), nil)
  23. if err != nil {
  24. return nil, err
  25. }
  26. header := request.Header.Clone()
  27. hash := sha256.New()
  28. signer := v4.NewSigner()
  29. if err := signer.SignHTTP(context.Background(), credentials, internalRequest, hex.EncodeToString(hash.Sum(nil)), "managedblockchain", config.Region, time.Now()); err != nil {
  30. return nil, err
  31. }
  32. request.Header = internalRequest.Header
  33. request.Header.Set("Connection", header["Connection"][0])
  34. request.Header.Set("Sec-WebSocket-Key", header["Sec-WebSocket-Key"][0])
  35. request.Header.Set("Sec-WebSocket-Version", header["Sec-WebSocket-Version"][0])
  36. request.Header.Set("Upgrade", header["Upgrade"][0])
  37. return http.ProxyFromEnvironment(request)
  38. },
  39. }, nil
  40. }

HTTP

  1. package transport
  2. import (
  3. "compress/gzip"
  4. "context"
  5. "crypto/sha256"
  6. "encoding/base64"
  7. "encoding/hex"
  8. "io"
  9. "net/http"
  10. "time"
  11. "github.com/aws/aws-sdk-go-v2/aws"
  12. "github.com/aws/aws-sdk-go-v2/aws/signer/v4"
  13. )
  14. var _ http.RoundTripper = &httpRoundTripper{}
  15. type httpRoundTripper struct {
  16. config aws.Config
  17. }
  18. func (h httpRoundTripper) RoundTrip(request *http.Request) (*http.Response, error) {
  19. credentials, err := h.config.Credentials.Retrieve(request.Context())
  20. if err != nil {
  21. return nil, err
  22. }
  23. internalRequest := request.Clone(request.Context())
  24. bodyReader, err := request.GetBody()
  25. if err != nil {
  26. return nil, err
  27. }
  28. hash := sha256.New()
  29. if _, err := io.Copy(hash, bodyReader); err != nil {
  30. return nil, err
  31. }
  32. signer := v4.NewSigner()
  33. if err := signer.SignHTTP(context.Background(), credentials, internalRequest, hex.EncodeToString(hash.Sum(nil)), "managedblockchain", h.config.Region, time.Now()); err != nil {
  34. return nil, err
  35. }
  36. response, err := h.config.HTTPClient.Do(internalRequest)
  37. if err != nil {
  38. return nil, err
  39. }
  40. if response.Header.Get("Content-Type") == "gzip" {
  41. gzipReader, err := gzip.NewReader(base64.NewDecoder(base64.StdEncoding, response.Body))
  42. if err != nil {
  43. return nil, err
  44. }
  45. request.Header.Set("Content-Type", "application/json")
  46. response.Body = gzipReader
  47. }
  48. return response, nil
  49. }
  50. func NewHttpRoundTripper(cfg aws.Config) http.RoundTripper {
  51. return httpRoundTripper{
  52. config: cfg,
  53. }
  54. }

huangapple
  • 本文由 发表于 2022年5月8日 09:39:00
  • 转载请务必保留本文链接:https://go.coder-hub.com/72157490.html
匿名

发表评论

匿名网友

:?: :razz: :sad: :evil: :!: :smile: :oops: :grin: :eek: :shock: :???: :cool: :lol: :mad: :twisted: :roll: :wink: :idea: :arrow: :neutral: :cry: :mrgreen:

确定