请求安全令牌-Java示例代码

<repositories>
     <repository>
         <id>sonatype-nexus-staging</id>
         <name>Sonatype Nexus Staging</name>
         <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
         <releases>
             <enabled>true</enabled>
         </releases>
         <snapshots>
             <enabled>true</enabled>
         </snapshots>
     </repository>
 </repositories>
<dependencies>
 <dependency>
   <groupId>com.aliyun</groupId>
   <artifactId>aliyun-java-sdk-sts</artifactId>
   <version>2.1.6</version>
 </dependency>
 <dependency>
   <groupId>com.aliyun</groupId>
   <artifactId>aliyun-java-sdk-core</artifactId>
   <version>2.2.0</version>
 </dependency>
</dependencies>

STS需要一个角色的参数roleArn。登录 RAM 控制台，单击 角色管理，再单击具体 角色名称 后，在基本信息中有一个参数Arn，例如1351140512345678:role/teststs。

• main函数

  public static void main(String[] args) throws Exception {
     IClientProfile profile = DefaultProfile.getProfile(
                                            "cn-hangzhou",
                                            <accessKeyId>,
                                            <accessKeySecret>);
     DefaultAcsClient client = new DefaultAcsClient(profile);
     AssumeRoleResponse response = assumeRole(client, <roleArn>);
     AssumeRoleResponse.Credentials credentials = response.getCredentials();
     System.out.println(credentials.getAccessKeyId() + "\n" +
                        credentials.getAccessKeySecret() + "\n" +
                        credentials.getSecurityToken() + "\n" +
                        credentials.getExpiration());
  }

• 生成临时AK和Token的函数

  private static AssumeRoleResponse assumeRole(
                                     DefaultAcsClient client,
                                     String roleArn)
                                     throws ClientException {
     final AssumeRoleRequest request = new AssumeRoleRequest();
     request.setVersion("2015-04-01");
     request.setMethod(MethodType.POST);
     request.setProtocol(ProtocolType.HTTPS);
     request.setDurationSeconds(900L);
     request.setRoleArn(roleArn);
     request.setRoleSessionName("test-token");
     return client.getAcsResponse(request);
  }

示例代码中生成的Token有效时间为900秒，可以根据实际需求调整（最小900秒，最大3,600秒）。

private static boolean isTimeExpire(String expiration) {
     Date nowDate = new Date();
     Date expireDate = javax.xml.bind.DatatypeConverter.parseDateTime(expiration).getTime();
     if (expireDate.getTime() <= nowDate.getTime()) {
         return true;
     } else {
         return false;
     }
}