如何保护Django媒体网址？

Question

在我的代码中，我知道如何保护我的endpoint url。我可以这样简单地做

class ApprovalViewSet(mixins.RetrieveModelMixin,
                      mixins.UpdateModelMixin,
                      mixins.ListModelMixin,
                      GenericViewSet):
    permission_classes = (IsAdminUser,)
    queryset = User.objects.all()
    serializer_class = ApprovalSerializer

问题：但是，我的任务艰巨，因为它是敏感文件，因此每次都需要更改/media网址。我的文件存储在AWS S3中

问题：1.如何在Django中保护/media网址2.我的解决方法是不断更改url。我该怎么办？

Answer 1

@@ markwalker_非常感谢您的评论。这是我的答案。这里的res变量草率，因为它可能是None并引发错误。我稍后会在此问题上添加我的异常定义

将private放入settings.pyAWS_DEFAULT_ACL ='私有'

import logging
import boto3
from botocore.exceptions import ClientError

logger = logging.getLogger('django')

def create_presigned_url(bucket_name, object_name, expiration=3600):
    """Generate a presigned URL to share an S3 object

    :param bucket_name: string
    :param object_name: string
    :param expiration: Time in seconds for the presigned URL to remain valid
    :return: Presigned URL as string. If error, returns None.
    """

    # Generate a presigned URL for the S3 object
    s3_client = boto3.client('s3')
    try:
        response = s3_client.generate_presigned_url('get_object',
                                                    Params={'Bucket': bucket_name,
                                                            'Key': object_name},
                                                    ExpiresIn=expiration)
    except ClientError as e:
        logging.error(e)
        return None

    # The response contains the presigned URL
    return response

然后我必须override方法to_representation

class AWSImageField(serializers.ImageField):
    def to_representation(self, value):
        if not value:
            return None

        # `media/` is `MEDIA_URL`, but it is being used with `public-config`. I don't want to mess up the common use case
        url = create_presigned_url(settings.AWS_STORAGE_BUCKET_NAME, 'media/' + value.name)
        if url is not None:
            res = requests.get(url)

        return res.url

参考：https://docs.aws.amazon.com/AmazonS3/latest/dev/acl-overview.html#canned-acl

Setting up media file access on AWS S3

https://boto3.amazonaws.com/v1/documentation/api/latest/guide/s3-presigned-urls.html