123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322 |
- <?php
- namespace Aws\Endpoint;
- use ArrayAccess;
- use Aws\HasDataTrait;
- use Aws\Sts\RegionalEndpoints\ConfigurationProvider;
- use Aws\S3\RegionalEndpoint\ConfigurationProvider as S3ConfigurationProvider;
- use InvalidArgumentException as Iae;
- final class Partition implements ArrayAccess, PartitionInterface
- {
- use HasDataTrait;
- private $stsLegacyGlobalRegions = [
- 'ap-northeast-1',
- 'ap-south-1',
- 'ap-southeast-1',
- 'ap-southeast-2',
- 'aws-global',
- 'ca-central-1',
- 'eu-central-1',
- 'eu-north-1',
- 'eu-west-1',
- 'eu-west-2',
- 'eu-west-3',
- 'sa-east-1',
- 'us-east-1',
- 'us-east-2',
- 'us-west-1',
- 'us-west-2',
- ];
-
- public function __construct(array $definition)
- {
- foreach (['partition', 'regions', 'services', 'dnsSuffix'] as $key) {
- if (!isset($definition[$key])) {
- throw new Iae("Partition missing required $key field");
- }
- }
- $this->data = $definition;
- }
- public function getName()
- {
- return $this->data['partition'];
- }
-
- public function getDnsSuffix()
- {
- return $this->data['dnsSuffix'];
- }
- public function isRegionMatch($region, $service)
- {
- if (isset($this->data['regions'][$region])
- || isset($this->data['services'][$service]['endpoints'][$region])
- ) {
- return true;
- }
- if (isset($this->data['regionRegex'])) {
- return (bool) preg_match(
- "@{$this->data['regionRegex']}@",
- $region
- );
- }
- return false;
- }
- public function getAvailableEndpoints(
- $service,
- $allowNonRegionalEndpoints = false
- ) {
- if ($this->isServicePartitionGlobal($service)) {
- return [$this->getPartitionEndpoint($service)];
- }
- if (isset($this->data['services'][$service]['endpoints'])) {
- $serviceRegions = array_keys(
- $this->data['services'][$service]['endpoints']
- );
- return $allowNonRegionalEndpoints
- ? $serviceRegions
- : array_intersect($serviceRegions, array_keys(
- $this->data['regions']
- ));
- }
- return [];
- }
- public function __invoke(array $args = [])
- {
- $service = isset($args['service']) ? $args['service'] : '';
- $region = isset($args['region']) ? $args['region'] : '';
- $scheme = isset($args['scheme']) ? $args['scheme'] : 'https';
- $options = isset($args['options']) ? $args['options'] : [];
- $data = $this->getEndpointData($service, $region, $options);
- $variant = $this->getVariant($options, $data);
- if (isset($variant['hostname'])) {
- $template = $variant['hostname'];
- } else {
- $template = isset($data['hostname']) ? $data['hostname'] : '';
- }
- $dnsSuffix = isset($variant['dnsSuffix'])
- ? $variant['dnsSuffix']
- : $this->data['dnsSuffix'];
- return [
- 'endpoint' => "{$scheme}://" . $this->formatEndpoint(
- $template,
- $service,
- $region,
- $dnsSuffix
- ),
- 'signatureVersion' => $this->getSignatureVersion($data),
- 'signingRegion' => isset($data['credentialScope']['region'])
- ? $data['credentialScope']['region']
- : $region,
- 'signingName' => isset($data['credentialScope']['service'])
- ? $data['credentialScope']['service']
- : $service,
- ];
- }
- private function getEndpointData($service, $region, $options)
- {
- $defaultRegion = $this->resolveRegion($service, $region, $options);
- $data = isset($this->data['services'][$service]['endpoints'][$defaultRegion])
- ? $this->data['services'][$service]['endpoints'][$defaultRegion]
- : [];
- $data += isset($this->data['services'][$service]['defaults'])
- ? $this->data['services'][$service]['defaults']
- : [];
- $data += isset($this->data['defaults'])
- ? $this->data['defaults']
- : [];
- return $data;
- }
- private function getSignatureVersion(array $data)
- {
- static $supportedBySdk = [
- 's3v4',
- 'v4',
- 'anonymous',
- ];
- $possibilities = array_intersect(
- $supportedBySdk,
- isset($data['signatureVersions'])
- ? $data['signatureVersions']
- : ['v4']
- );
- return array_shift($possibilities);
- }
- private function resolveRegion($service, $region, $options)
- {
- if (isset($this->data['services'][$service]['endpoints'][$region])
- && $this->isFipsEndpointUsed($region)
- ) {
- return $region;
- }
- if ($this->isServicePartitionGlobal($service)
- || $this->isStsLegacyEndpointUsed($service, $region, $options)
- || $this->isS3LegacyEndpointUsed($service, $region, $options)
- ) {
- return $this->getPartitionEndpoint($service);
- }
- return $region;
- }
- private function isServicePartitionGlobal($service)
- {
- return isset($this->data['services'][$service]['isRegionalized'])
- && false === $this->data['services'][$service]['isRegionalized']
- && isset($this->data['services'][$service]['partitionEndpoint']);
- }
-
- private function isStsLegacyEndpointUsed($service, $region, $options)
- {
- return $service === 'sts'
- && in_array($region, $this->stsLegacyGlobalRegions)
- && (empty($options['sts_regional_endpoints'])
- || ConfigurationProvider::unwrap(
- $options['sts_regional_endpoints']
- )->getEndpointsType() !== 'regional'
- );
- }
-
- private function isS3LegacyEndpointUsed($service, $region, $options)
- {
- return $service === 's3'
- && $region === 'us-east-1'
- && (empty($options['s3_us_east_1_regional_endpoint'])
- || S3ConfigurationProvider::unwrap(
- $options['s3_us_east_1_regional_endpoint']
- )->getEndpointsType() !== 'regional'
- );
- }
- private function getPartitionEndpoint($service)
- {
- return $this->data['services'][$service]['partitionEndpoint'];
- }
- private function formatEndpoint($template, $service, $region, $dnsSuffix)
- {
- return strtr($template, [
- '{service}' => $service,
- '{region}' => $region,
- '{dnsSuffix}' => $dnsSuffix,
- ]);
- }
-
- private function isFipsEndpointUsed($region)
- {
- return strpos($region, "fips") !== false;
- }
-
- private function getVariant(array $options, array $data)
- {
- $variantTags = [];
- if (isset($options['use_fips_endpoint'])) {
- $useFips = $options['use_fips_endpoint'];
- if (is_bool($useFips)) {
- $useFips && $variantTags[] = 'fips';
- } elseif ($useFips->isUseFipsEndpoint()) {
- $variantTags[] = 'fips';
- }
- }
- if (isset($options['use_dual_stack_endpoint'])) {
- $useDualStack = $options['use_dual_stack_endpoint'];
- if (is_bool($useDualStack)) {
- $useDualStack && $variantTags[] = 'dualstack';
- } elseif ($useDualStack->isUseDualStackEndpoint()) {
- $variantTags[] = 'dualstack';
- }
- }
- if (!empty($variantTags)) {
- if (isset($data['variants'])) {
- foreach ($data['variants'] as $variant) {
- if (array_count_values($variant['tags']) == array_count_values($variantTags)) {
- return $variant;
- }
- }
- }
- if (isset($this->data['defaults']['variants'])) {
- foreach ($this->data['defaults']['variants'] as $variant) {
- if (array_count_values($variant['tags']) == array_count_values($variantTags)) {
- return $variant;
- }
- }
- }
- }
- }
- }
|