1 ossUpload = function (file, fun, funParameter) {
 2     //第一此请求后台服务器获取认证请求
 3     $.ajax({
 4         url: "/UEditor/GetSecurityToken",
 5         type: "post",
 6         success: function (data) {
 7             var access = JSON.parse(data);
 8             console.log(access);
 9             let host = access.Host;
10             var myDate = new Date().format("yyyyMMddhhmmss");
11             var policyBase64 = Base64.encode(JSON.stringify(myDate))
12             var name = Base64.encode(JSON.stringify(myDate))
13             var name = Crypto.HMAC(Crypto.SHA1, policyBase64, name);
14             var g_object_name = access.Object_name + "/" + name+"."+file.type.split('/')[1]
15             var request = new FormData();
16             request.append('id', "file_0");
17             request.append("OSSAccessKeyId", access.AccessKeyId); //Bucket 拥有者的Access Key Id。
18             request.append("policy", access.Policy); //policy规定了请求的表单域的合法性
19             request.append("Signature", access.Signature); //根据Access Key Secret和policy计算的签名信息，OSS验证该签名信息从而验证该Post请求的合法性
20             request.append('x-oss-security-token', access.SecurityToken);
21             //---以上都是阿里的认证策略 
22             request.append("key", g_object_name); //文件名字，可设置路径
23             request.append("success_action_status", '200'); // 让服务端返回200,不然，默认会返回204
24             request.append('file', file); //需要上传的文件 file  
25             console.log(request);
26             //正式上传请求
27             $.ajax({
28                 url: host, //上传阿里地址
29                 data: request,
30                 processData: false, //默认true，设置为 false，不需要进行序列化处理
31                 cache: false, //设置为false将不会从浏览器缓存中加载请求信息
32                 async: false, //发送同步请求
33                 contentType: false, //避免服务器不能正常解析文件---------具体的可以查下这些参数的含义
34                 dataType: 'xml', //不涉及跨域  写json即可
35                 type: 'post',
36                 success: fun(funParameter, host, g_object_name),
37                 error: function (returndata) {
38                     console.log(arguments)
39                     alert("上传图片出错", false);
40                 }
41             });
42         }
43     })
44 }
45 //格式化时间
46 Date.prototype.format = function (fmt) {
47     var o = {
48         "M+": this.getMonth() + 1,                 //月份 
49         "d+": this.getDate(),                    //日 
50         "h+": this.getHours(),                   //小时 
51         "m+": this.getMinutes(),                 //分 
52         "s+": this.getSeconds(),                 //秒 
53         "q+": Math.floor((this.getMonth() + 3) / 3), //季度 
54         "S": this.getMilliseconds()             //毫秒 
55     };
56     if (/(y+)/.test(fmt)) {
57         fmt = fmt.replace(RegExp.$1, (this.getFullYear() + "").substr(4 - RegExp.$1.length));
58     }
59     for (var k in o) {
60         if (new RegExp("(" + k + ")").test(fmt)) {
61             fmt = fmt.replace(RegExp.$1, (RegExp.$1.length == 1) ? (o[k]) : (("00" + o[k]).substr(("" + o[k]).length)));
62         }
63     }
64     return fmt;
65 }

 1  public class AliyunAcsStsConfig
 2     {
 3         /// <summary>
 4         /// 地区
 5         /// </summary>
 6         public string REGIONID { get; set; }
 7         /// <summary>
 8         /// 访问阿里云的地址
 9         /// </summary>
10         public string ENDPOINT { get; set; }
11         /// <summary>
12         /// 配置的ram
13         /// </summary>
14         public string RoleArn { get; set; }
15         /// <summary>
16         /// 会话的名称可自定义
17         /// </summary>
18         public string RoleSessionName { get; set; }
19         /// <summary>
20         /// 该权限用户的密码
21         /// </summary>
22         public string AccessKeySecret { get; set; }
23         /// <summary>
24         /// 该权限的用户ID
25         /// </summary>
26         public string AccessKeyId { get; set; }
27         /// <summary>
28         /// 上传路径
29         /// https://Bucket名称.oss-cn-beijing.aliyuncs.com
30         /// </summary>
31         public string upload { get; set; }
32         /// <summary>
33         /// 文件存储路径
34         /// ***/****/
35         /// </summary>
36         public string path { get; set; }
37     }     

private readonly UEditorService _ueditorService;
        private readonly AliyunAcsStsConfig stsConfig;
        public UEditorController(UEditorService ueditorService, IOptions<AliyunAcsStsConfig> stsConfig)
        {
            this._ueditorService = ueditorService;
            this.stsConfig = stsConfig.Value;
        }

 string REGIONID = stsConfig.REGIONID;
            string ENDPOINT = stsConfig.ENDPOINT;
            // 构建一个 Aliyun Client, 用于发起请求
            // 构建Aliyun Client时需要设置AccessKeyId和AccessKeySevcret
            DefaultProfile.AddEndpoint(REGIONID, REGIONID, "Sts", ENDPOINT);
            IClientProfile profile = DefaultProfile.GetProfile(REGIONID, stsConfig.AccessKeyId, stsConfig.AccessKeySecret);
            DefaultAcsClient client = new DefaultAcsClient(profile);
            // 构造AssumeRole请求
            AssumeRoleRequest request = new AssumeRoleRequest();
            request.AcceptFormat = FormatType.JSON;
            // 指定角色Arn
            request.RoleArn = stsConfig.RoleArn;
            request.RoleSessionName = stsConfig.RoleSessionName;
            // 可以设置Token有效期，可选参数，默认3600秒；
            // request.DurationSeconds = 3600;
            // 可以设置Token的附加Policy，可以在获取Token时，通过额外设置一个Policy进一步减小Token的权限；
            // request.Policy="<policy-content>"
            String dt = DateTime.Now.AddMinutes(5).ToString("yyyy-MM-ddTHH:mm:ss.000Z");
            object[,] ob = { { "content-length-range", 0, 1048576000 } };
            AssumeRoleResponse response = client.GetAcsResponse(request);
            ImgUploadAccess access = new ImgUploadAccess();
            access.AccessKeyId = response.Credentials.AccessKeyId;
            access.AccessKeySecret = response.Credentials.AccessKeySecret;
            access.SecurityToken = response.Credentials.SecurityToken;
            string str = JsonConvert.SerializeObject(new Policy
            {
                expiration=dt,
                conditions=ob
            });
            byte[] b = Encoding.Default.GetBytes(str);
            string base64 = Convert.ToBase64String(b);
            HMACSHA1 hmacsha1 = new HMACSHA1();
            hmacsha1.Key= Encoding.UTF8.GetBytes(access.AccessKeySecret);
            byte[] hashBytes = hmacsha1.ComputeHash(Encoding.UTF8.GetBytes(base64));
            access.Policy = base64;
            access.Signature =Convert.ToBase64String(hashBytes);
            access.Object_name = stsConfig.path+DateTime.Now.ToString("yyyyMM");
            access.Host = stsConfig.imgupload;
            return JsonConvert.SerializeObject(access);

 1   public class ImgUploadAccess
 2     {
 3         public string AccessKeyId { get; set; }
 4         public string AccessKeySecret { get; set; }
 5         public string SecurityToken { get; set; }
 6         public string Host { get; set; }
 7         public string Signature { get; set; }
 8         public string Policy { get; set; }
 9         public string Object_name { get; set; }
10     }
11     public class Policy
12     {
13         public string expiration { get; set; }
14         public object[,] conditions { get; set; }
15     }