User the secure s3 endpoint and store our files encrypted.
This commit is contained in:
parent
65aad1a2d9
commit
b96f678df8
2 changed files with 127 additions and 129 deletions
|
@ -20,8 +20,7 @@ class S3FileWriteException(Exception):
|
||||||
|
|
||||||
class UserRequestFiles(object):
|
class UserRequestFiles(object):
|
||||||
def __init__(self, s3_access_key, s3_secret_key, bucket_name):
|
def __init__(self, s3_access_key, s3_secret_key, bucket_name):
|
||||||
self._s3_conn = boto.connect_s3(s3_access_key, s3_secret_key,
|
self._s3_conn = boto.connect_s3(s3_access_key, s3_secret_key)
|
||||||
is_secure=False)
|
|
||||||
self._bucket_name = bucket_name
|
self._bucket_name = bucket_name
|
||||||
self._bucket = self._s3_conn.get_bucket(bucket_name)
|
self._bucket = self._s3_conn.get_bucket(bucket_name)
|
||||||
self._access_key = s3_access_key
|
self._access_key = s3_access_key
|
||||||
|
@ -34,7 +33,8 @@ class UserRequestFiles(object):
|
||||||
file_id = str(uuid4())
|
file_id = str(uuid4())
|
||||||
full_key = os.path.join(self._prefix, file_id)
|
full_key = os.path.join(self._prefix, file_id)
|
||||||
k = Key(self._bucket, full_key)
|
k = Key(self._bucket, full_key)
|
||||||
url = k.generate_url(300, 'PUT', headers={'Content-Type': mime_type})
|
url = k.generate_url(300, 'PUT', headers={'Content-Type': mime_type},
|
||||||
|
encrypt_key=True)
|
||||||
return (url, file_id)
|
return (url, file_id)
|
||||||
|
|
||||||
def store_file(self, flask_file):
|
def store_file(self, flask_file):
|
||||||
|
@ -43,7 +43,7 @@ class UserRequestFiles(object):
|
||||||
k = Key(self._bucket, full_key)
|
k = Key(self._bucket, full_key)
|
||||||
logger.debug('Setting s3 content type to: %s' % flask_file.content_type)
|
logger.debug('Setting s3 content type to: %s' % flask_file.content_type)
|
||||||
k.set_metadata('Content-Type', flask_file.content_type)
|
k.set_metadata('Content-Type', flask_file.content_type)
|
||||||
bytes_written = k.set_contents_from_file(flask_file)
|
bytes_written = k.set_contents_from_file(flask_file, encrypt_key=True)
|
||||||
|
|
||||||
if bytes_written == 0:
|
if bytes_written == 0:
|
||||||
raise S3FileWriteException('Unable to write file to S3')
|
raise S3FileWriteException('Unable to write file to S3')
|
||||||
|
|
|
@ -36,9 +36,7 @@ class S3Storage(Storage):
|
||||||
|
|
||||||
def __init__(self, storage_path, s3_access_key, s3_secret_key, s3_bucket):
|
def __init__(self, storage_path, s3_access_key, s3_secret_key, s3_bucket):
|
||||||
self._s3_conn = \
|
self._s3_conn = \
|
||||||
boto.s3.connection.S3Connection(s3_access_key,
|
boto.s3.connection.S3Connection(s3_access_key, s3_secret_key)
|
||||||
s3_secret_key,
|
|
||||||
is_secure=False)
|
|
||||||
self._s3_bucket = self._s3_conn.get_bucket(s3_bucket)
|
self._s3_bucket = self._s3_conn.get_bucket(s3_bucket)
|
||||||
self._root_path = storage_path
|
self._root_path = storage_path
|
||||||
|
|
||||||
|
@ -70,7 +68,7 @@ class S3Storage(Storage):
|
||||||
def put_content(self, path, content):
|
def put_content(self, path, content):
|
||||||
path = self._init_path(path)
|
path = self._init_path(path)
|
||||||
key = boto.s3.key.Key(self._s3_bucket, path)
|
key = boto.s3.key.Key(self._s3_bucket, path)
|
||||||
key.set_contents_from_string(content)
|
key.set_contents_from_string(content, encrypt_key=True)
|
||||||
return path
|
return path
|
||||||
|
|
||||||
def stream_read(self, path):
|
def stream_read(self, path):
|
||||||
|
@ -97,7 +95,7 @@ class S3Storage(Storage):
|
||||||
if self.buffer_size > buffer_size:
|
if self.buffer_size > buffer_size:
|
||||||
buffer_size = self.buffer_size
|
buffer_size = self.buffer_size
|
||||||
path = self._init_path(path)
|
path = self._init_path(path)
|
||||||
mp = self._s3_bucket.initiate_multipart_upload(path)
|
mp = self._s3_bucket.initiate_multipart_upload(path, encrypt_key=True)
|
||||||
num_part = 1
|
num_part = 1
|
||||||
while True:
|
while True:
|
||||||
try:
|
try:
|
||||||
|
|
Reference in a new issue