cos-nodejs-sdk-v5 - npm Package Compare versions

Comparing version 1.0.0 to 1.1.0

package.json

 {
   "name": "cos-nodejs-sdk-v5",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "description": "cos nodejs sdk v5",
-  "main": "sdk/cos.js",
-  "files": [
-    "sdk"
-  ],
-  "publishConfig": {
-    "registry": "https://registry.npmjs.org/"
-  },
+  "main": "index.js",
   "devDependencies": {},
   "scripts": {
-    "test": "echo \"Error: no test specified\" && exit 1"
+    "test": "node demo/demo.js"
   },
@@ -28,7 +22,8 @@ "repository": {
   "dependencies": {
+    "async": "^2.2.0",
     "eventproxy": "^0.3.5",
-    "async": "^2.2.0",
+    "lodash": "^4.17.4",
     "request": "^2.81.0",
     "xml2js": "^0.4.17"
   }
-}
+}

README.md

@@ -0,0 +0,0 @@ # cos-nodejs-sdk-v5

sdk/util.js

@@ -0,4 +1,6 @@
+'use strict';
+
 var crypto = require('crypto');
 var xml2js = require('xml2js');
-var xmlParser = new xml2js.Parser({explicitArray : false, ignoreAttrs : true});
+var xmlParser = new xml2js.Parser({explicitArray: false, ignoreAttrs: true});
 var xmlBuilder = new xml2js.Builder();
@@ -10,156 +12,174 @@
 
-	opt = opt || {};
+    opt = opt || {};
 
-	var secretId = opt.secretId;
-	var secretKey = opt.secretKey;
+    var secretId = opt.secretId;
+    var secretKey = opt.secretKey;
+    var method = (opt.method || 'get').toLowerCase();
+    var pathname = opt.pathname || '/';
+    var queryParams = opt.params || '';
+    var headers = opt.headers || '';
 
-	var method = opt.method || 'get';
-	method = method.toLowerCase();
-	var pathname = opt.pathname || '/';
-	var queryParams = opt.params || '';
-	var headers = opt.headers || '';
+    var getObjectKeys = function (obj) {
+        var list = [];
+        for (var key in obj) {
+            if (obj.hasOwnProperty(key)) {
+                list.push(key);
+            }
+        }
+        return list.sort();
+    };
 
-	var getObjectKeys = function (obj) {
-		var list = [];
-		for (var key in obj) {
-			if (obj.hasOwnProperty(key)) {
-				list.push(key);
-			}
-		}
-		return list.sort();
-	};
+    var obj2str = function (obj) {
+        var i, key, val;
+        var list = [];
+        var keyList = Object.keys(obj);
+        for (i = 0; i < keyList.length; i++) {
+            key = keyList[i];
+            val = obj[key] || '';
+            key = key.toLowerCase();
+            key = encodeURIComponent(key);
+            list.push(key + '=' + encodeURIComponent(val));
+        }
+        return list.join('&');
+    };
 
-	var obj2str = function (obj) {
-		var i, key, val;
-		var list = [];
-		var keyList = Object.keys(obj);
-		for (i = 0; i < keyList.length; i++) {
-			key = keyList[i];
-			val = obj[key] || '';
-			key = key.toLowerCase();
-			key = encodeURIComponent(key);
-			list.push(key + '=' + encodeURIComponent(val));
-		}
-		return list.join('&');
-	};
+    // 签名有效起止时间
+    var now = parseInt(new Date().getTime() / 1000) - 1;
+    var expired = now; // now + ';' + (now + 60) + ''; // 签名过期时间为当前 + 3600s
 
-	// 签名有效起止时间
-	var now = parseInt(new Date().getTime() / 1000) - 1;
-	var expired = now; // now + ';' + (now + 60) + ''; // 签名过期时间为当前 + 3600s
+    if (opt.expires) {
+        expired += (opt.expires * 1);
+    } else {
+        expired += 3600;
+    }
 
-	if (opt.expires) {
-		expired += (opt.expires * 1);
-	} else {
-		expired += 3600;
-	}
+    // 要用到的 Authorization 参数列表
+    var qSignAlgorithm = 'sha1';
+    var qAk = secretId;
+    var qSignTime = now + ';' + expired;
+    var qKeyTime = now + ';' + expired;
+    var qHeaderList = getObjectKeys(headers).join(';').toLowerCase();
+    var qUrlParamList = getObjectKeys(queryParams).join(';').toLowerCase();
 
-	// 要用到的 Authorization 参数列表
-	var qSignAlgorithm = 'sha1';
-	var qAk = secretId;
-	var qSignTime = now + ';' + expired;
-	var qKeyTime = now + ';' + expired;
-	var qHeaderList = getObjectKeys(headers).join(';').toLowerCase();
-	var qUrlParamList = getObjectKeys(queryParams).join(';').toLowerCase();
+    // 签名算法说明文档：https://www.qcloud.com/document/product/436/7778
+    // 步骤一：计算 SignKey
+    var signKey = crypto.createHmac('sha1', secretKey).update(qKeyTime).digest('hex');//CryptoJS.HmacSHA1(qKeyTime, secretKey).toString();
 
-	// 签名算法说明文档：https://www.qcloud.com/document/product/436/7778
-	// 步骤一：计算 SignKey
-	var signKey = crypto.createHmac('sha1', secretKey).update(qKeyTime).digest('hex');//CryptoJS.HmacSHA1(qKeyTime, secretKey).toString();
+    // 新增修改，formatString 添加 encodeURIComponent
 
-	// 新增修改，formatString 添加 encodeURIComponent
+    //pathname = encodeURIComponent(pathname);
 
-	//pathname = encodeURIComponent(pathname);
 
+    // 步骤二：构成 FormatString
+    var formatString = [method, pathname, obj2str(queryParams), obj2str(headers), ''].join('\n');
 
-	// 步骤二：构成 FormatString
-	var formatString = [method, pathname, obj2str(queryParams), obj2str(headers), ''].join('\n');
+    formatString = new Buffer(formatString, 'utf8');
 
-	formatString = new Buffer(formatString,'utf8');
+    // 步骤三：计算 StringToSign
+    var sha1Algo = crypto.createHash('sha1');
+    sha1Algo.update(formatString);
+    var res = sha1Algo.digest('hex');
+    var stringToSign = ['sha1', qSignTime, res, ''].join('\n');
 
-	// 步骤三：计算 StringToSign
-	var sha1Algo = crypto.createHash('sha1');
-	sha1Algo.update(formatString);
-	var res = sha1Algo.digest('hex');
-	var stringToSign = ['sha1', qSignTime, res, ''].join('\n');
+    // 步骤四：计算 Signature
+    var qSignature = crypto.createHmac('sha1', signKey).update(stringToSign).digest('hex');//CryptoJS.HmacSHA1(stringToSign, signKey).toString();
 
-	// 步骤四：计算 Signature
-	var qSignature = crypto.createHmac('sha1', signKey).update(stringToSign).digest('hex');//CryptoJS.HmacSHA1(stringToSign, signKey).toString();
+    // 步骤五：构造 Authorization
+    var authorization = [
+        'q-sign-algorithm=' + qSignAlgorithm,
+        'q-ak=' + qAk,
+        'q-sign-time=' + qSignTime,
+        'q-key-time=' + qKeyTime,
+        'q-header-list=' + qHeaderList,
+        'q-url-param-list=' + qUrlParamList,
+        'q-signature=' + qSignature
+    ].join('&');
 
-	// 步骤五：构造 Authorization
-	var authorization = [
-		'q-sign-algorithm=' + qSignAlgorithm,
-		'q-ak=' + qAk,
-		'q-sign-time=' + qSignTime,
-		'q-key-time=' + qKeyTime,
-		'q-header-list=' + qHeaderList,
-		'q-url-param-list=' + qUrlParamList,
-		'q-signature=' + qSignature
-	].join('&');
+    return authorization;
 
-	return authorization;
-
 };
 
+// XML 对象转 JSON 对象
+var xml2json = function (bodyStr) {
+    var d = {};
+    xmlParser.parseString(bodyStr, function (err, result) {
+        d = result;
+    });
 
-// XML格式转json
-var xml2json = function(bodyStr) {
-	var d = {};
-	xmlParser.parseString(bodyStr, function(err, result) {
-		d = result;
-	});
-
-	return d;
+    return d;
 };
 
-var json2xml = function(json) {
-	var xml = xmlBuilder.buildObject(json);
-	return xml;
+// JSON 对象转 XML 对象
+var json2xml = function (json) {
+    var xml = xmlBuilder.buildObject(json);
+    return xml;
 };
 
-var md5 = function(str, encoding) {
-	var md5 = crypto.createHash('md5');
-	md5.update(str);
-	encoding = encoding || 'hex';
-	return md5.digest(encoding); 
+// 计算 MD5
+var md5 = function (str, encoding) {
+    var md5 = crypto.createHash('md5');
+    md5.update(str);
+    encoding = encoding || 'hex';
+    return md5.digest(encoding);
 };
 
 
+// 清除对象里值为的 undefined 或 null 的属性
+var clearKey = function (obj) {
+    var retObj = {};
+    for (var key in obj) {
+        if (obj[key]) {
+            retObj[key] = obj[key];
+        }
+    }
+    return retObj;
+};
 
-// 用于清除值为 undefine 或者 null 的属性
-var clearKey = function(obj) {
-	var retObj = {};
-	for (var key in obj) {
-		if (obj[key]) {
-			retObj[key] = obj[key];
-		}
-	}
+// 获取文件 sha1 值
+var getFileSHA = function (readStream, callback) {
+    var SHA = crypto.createHash('sha1');
 
-	return retObj;
-};
+    readStream.on('data', function (chunk) {
+        SHA.update(chunk);
+    });
 
+    readStream.on('error', function (err) {
+        callback(err);
+    });
 
-var getFileSHA = function(readStream, callback) {
-	var SHA = crypto.createHash('sha1');
+    readStream.on('end', function () {
+        var hash = SHA.digest('hex');
 
-	readStream.on('data', function(chunk) {
-		SHA.update(chunk);
-	});
+        callback(null, hash);
+    });
+};
 
-	readStream.on('error', function(err) {
-		callback(err);
-	});
+// 简单的属性复制方法
+function extend(target, source) {
+    for (var method in source) {
+        if (!target[method]) {
+            target[method] = source[method];
+        }
+    }
+    return target;
+}
 
-	readStream.on('end', function() {
-		var hash = SHA.digest('hex');
-
-		callback(null, hash);
-	});
+var binaryBase64 = function (str) {
+    var i, len, char, arr = [];
+    for (i = 0, len = str.length / 2; i < len; i++) {
+        char = parseInt(str[i * 2] + str[i * 2 + 1], 16);
+        arr.push(char);
+    }
+    return new Buffer(arr).toString('base64');
 };
 
 var util = {
-	getAuth: getAuth,
-	xml2json: xml2json,
-	json2xml: json2xml,
-	md5: md5,
-	clearKey: clearKey,
-	getFileSHA : getFileSHA
+    getAuth: getAuth,
+    xml2json: xml2json,
+    json2xml: json2xml,
+    md5: md5,
+    clearKey: clearKey,
+    getFileSHA: getFileSHA,
+    extend: extend,
+    binaryBase64: binaryBase64
 };
@@ -166,0 +186,0 @@

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Fixed alerts

No tests

Quality

Package does not have any tests. This is a strong signal of a poorly maintained or low quality package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

111983

increased by24.81%

Number of package files

11

increased by83.33%

Lines of code

2853

increased by13.03%

Number of low quality alerts

0

decreased by-100%

Worsened metrics

Dependency count

5

increased by25%

Number of low supply chain risk alerts

4

increased by33.33%

Number of medium supply chain risk alerts

3

increased byInfinity%

Dependency changes

• + Addedlodash@^4.17.4