Search code examples
phpcodeigniteramazon-s3php-curl

how to send curl request for delete image from s3 bucket in php


function S3_delete($s3_array)
{ 

    $AWSAccessKeyId = 'youraccesskey';
    $AWSSecretAccessKey = 'yoursecretaccesskey';
    $BucketName = 'yourbucket';
    $AWSRegion = 'ap-south-1'; 

    $canonical_uri="/images/coupon_images/medium_banner/2019091810352344157.jpg";

    $encoded_uri = str_replace('%2F', '/', rawurlencode($canonical_uri));

    if($AWSRegion == 'us-east-1') {
        $hostname = trim($BucketName .".s3.amazonaws.com");
        $header_string = "host:" . $hostname . "\n";
        $signed_headers_string = "host";
    } else {
        $hostname =  trim($BucketName . ".s3-" . $AWSRegion . ".amazonaws.com");
        $header_string = "host:" . $hostname . "\n";
        $signed_headers_string = "host";
    }

    $date_text = gmdate('Ymd', time());
    $time_text = gmdate('Ymd\THis\Z');
    $algorithm = 'AWS4-HMAC-SHA256';
    $scope = $date_text . "/" . $AWSRegion . "/s3/aws4_request";

    $x_amz_params = array(
        'X-Amz-Algorithm' => $algorithm,
        'X-Amz-Credential' => $AWSAccessKeyId . '/' . $scope,
        'X-Amz-Date' => $time_text,
        'X-Amz-SignedHeaders' => $signed_headers_string
    );

    $expires = 72000;
    if ($expires > 0) {
        $x_amz_params['X-Amz-Expires'] = $expires;
    }
    ksort($x_amz_params);

    $query_string = "";
    foreach ($x_amz_params as $key => $value) {
        $query_string .= rawurlencode($key) . '=' . rawurlencode($value) . "&";
    }
    $query_string = substr($query_string, 0, -1);

    $canonical_request = "DELETE\n" . $encoded_uri . "\n" . $query_string . "\n" . $header_string . "\n" . $signed_headers_string . "\nUNSIGNED-PAYLOAD";
    $string_to_sign = $algorithm . "\n" . $time_text . "\n" . $scope . "\n" . hash('sha256', $canonical_request, false);
    $signing_key = hash_hmac('sha256', 'aws4_request', hash_hmac('sha256', 's3', hash_hmac('sha256', $AWSRegion, hash_hmac('sha256', $date_text, 'AWS4' . $AWSSecretAccessKey, true), true), true), true);
    $signature = hash_hmac('sha256', $string_to_sign, $signing_key);

    $url = 'https://' . $hostname . $encoded_uri . '?' . $query_string . '&X-Amz-Signature=' . $signature;

    $ch = curl_init($url);
    curl_setopt($ch, CURLOPT_HEADER, false);
    curl_setopt($ch, CURLOPT_CUSTOMREQUEST, "GET");
    curl_setopt($ch, CURLOPT_HTTPHEADER);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, false);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
    curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
    curl_exec($ch);
    return $httpcode = curl_getinfo($ch);
}

above code give response like this,

SignatureDoesNotMatchThe request signature we calculated does not match the signature you provided. Check your key and signing method.AKIAJKLJAHRPH4X4FSMQAWS4-HMAC-SHA256 20190919T053115Z 20190919/ap-south-1/s3/aws4_request


Solution

  • 100% work the below code..

    S3_delete('201909251745545.jpg','imagesbook/post_blog/'); //call function
    
    function S3_delete($filename,$path)
    { 
        $file_name = $filename; 
        $file_delete_path = $path;
    
        $aws_access_key_id = 'your-accress-key';
        $aws_secret_access_key = 'your-secret-access-key';
        $bucket_name = 'your-bucket-name';
        $aws_region = 'your-region'; // Enter your aws region Ex. us-east-1
        $host_name = $bucket_name . '.s3.amazonaws.com';
        $content_acl = 'public-read';
        $content_type = ''; 
        $content='';
        $content_title = $file_delete_path.$file_name;
        $aws_service_name = 's3';
    
        $timestamp = gmdate('Ymd\THis\Z');
        $date = gmdate('Ymd');
    
        $request_headers = array();
        $request_headers['Content-Type'] = $content_type;
        $request_headers['Date'] = $timestamp;
        $request_headers['Host'] = $host_name;
        $request_headers['x-amz-acl'] = $content_acl;
        $request_headers['x-amz-content-sha256'] = hash('sha256',"");
        ksort($request_headers);
    
        $canonical_headers = [];
        foreach($request_headers as $key => $value)
        {
            $canonical_headers[] = strtolower($key) . ":" . $value;
        }
        $canonical_headers = implode("\n", $canonical_headers);
    
    
        $signed_headers = [];
        foreach($request_headers as $key => $value)
        {
            $signed_headers[] = strtolower($key);
        }
        $signed_headers = implode(";", $signed_headers);
    
        $canonical_request = [];
        $canonical_request[] = "DELETE";
        $canonical_request[] = "/" . $content_title;
        $canonical_request[] = "";
        $canonical_request[] = $canonical_headers;
        $canonical_request[] = "";
        $canonical_request[] = $signed_headers;
        $canonical_request[] = hash('sha256', $content);
        $canonical_request = implode("\n", $canonical_request);
        $hashed_canonical_request = hash('sha256', $canonical_request);
    
        $scope = [];
        $scope[] = $date;
        $scope[] = $aws_region;
        $scope[] = $aws_service_name;
        $scope[] = "aws4_request";
    
        $string_to_sign = [];
        $string_to_sign[] = "AWS4-HMAC-SHA256"; 
        $string_to_sign[] = $timestamp; 
        $string_to_sign[] = implode('/', $scope);
        $string_to_sign[] = $hashed_canonical_request;
        $string_to_sign = implode("\n", $string_to_sign);
    
        $kSecret = 'AWS4' . $aws_secret_access_key;
        $kDate = hash_hmac('sha256', $date, $kSecret, true);
        $kRegion = hash_hmac('sha256', $aws_region, $kDate, true);
        $kService = hash_hmac('sha256', $aws_service_name, $kRegion, true);
        $kSigning = hash_hmac('sha256', 'aws4_request', $kService, true);
    
        $signature = hash_hmac('sha256', $string_to_sign, $kSigning);
    
        $authorization = [
            'Credential=' . $aws_access_key_id . '/' . implode('/', $scope),
            'SignedHeaders=' . $signed_headers,
            'Signature=' . $signature
        ];
        $authorization = 'AWS4-HMAC-SHA256' . ' ' . implode( ',', $authorization);
    
        $curl_headers = [ 'Authorization: ' . $authorization ];
        foreach($request_headers as $key => $value) 
        {
         $curl_headers[] = $key . ": " . $value;
        }
    
        $url = 'https://' . $host_name . '/' . $content_title;
        $ch = curl_init($url);
        curl_setopt($ch, CURLOPT_HEADER, false);
        curl_setopt($ch, CURLOPT_HTTPHEADER, $curl_headers);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, false);
        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
        curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
        curl_setopt($ch, CURLOPT_CUSTOMREQUEST, "DELETE");
        return curl_exec($ch); // return response data 1
        //$httpcode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
        //curl_close($ch);
        //return $httpcode;
    }