IBM云对象存储节点IBM身份验证

Question

我正在尝试通过nodejs (到node-red)连接到我的云对象存储。我不想使用现有的SDK。为了简单起见，我将在这个问题中使用postman/curl。此外，下面的请求应该列出我的所有存储桶。

这是我当前的curl等价请求(从postman创建)

GET / HTTP/1.1
Host: s3.us-south.cloud-object-storage.appdomain.cloud
ibm-service-instance-id: MY INSTANCE ID
Content-Type: text/plain
Authorization: Bearer MYTOKEN
User-Agent: PostmanRuntime/7.13.0
Accept: */*
Cache-Control: no-cache
Postman-Token: POSTMAN TOKEN
Host: s3.us-south.cloud-object-storage.appdomain.cloud
accept-encoding: gzip, deflate
Connection: keep-alive
cache-control: no-cache

但这会返回：

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<Error>
    <Code>AccessDenied</Code>
    <Message>Access Denied</Message>
    <Resource></Resource>
    <RequestId>REQ ID</RequestId>
    <httpStatusCode>403</httpStatusCode>
</Error>

我是不是漏掉了什么？我指的是这个文档：https://cloud.ibm.com/docs/services/cloud-object-storage/cli?topic=cloud-object-storage-compatibility-api-bucket-operations#compatibility-api-list-buckets

Answer 1

您需要获取API auth令牌。为此，您需要已经获得的API密钥。有关how to request the IAM access token的信息，请参阅此处。基本上：

curl -X "POST" "https://iam.cloud.ibm.com/identity/token" \
     -H 'Accept: application/json' \
     -H 'Content-Type: application/x-www-form-urlencoded' \
     --data-urlencode "apikey={api-key}" \
     --data-urlencode "response_type=cloud_iam" \
     --data-urlencode "grant_type=urn:ibm:params:oauth:grant-type:apikey"