Add referer to storage

crproxy.go

@@ -692,14 +692,17 @@ func (c *CRProxy) notFoundResponse(rw http.ResponseWriter, r *http.Request) {
 	http.NotFound(rw, r)
 }
 
-func (c *CRProxy) redirect(rw http.ResponseWriter, r *http.Request, blobPath string) error {
+func (c *CRProxy) redirect(rw http.ResponseWriter, r *http.Request, blobPath string, info *PathInfo) error {
 	options := map[string]interface{}{
 		"method": r.Method,
 	}
 	linkExpires := c.linkExpires
 	if linkExpires > 0 {
 		options["expiry"] = time.Now().Add(linkExpires)
 	}
+	if info != nil {
+		options["referer"] = fmt.Sprintf("%s/%s", info.Host, info.Image)
+	}
 	u, err := c.storageDriver.URLFor(r.Context(), blobPath, options)
 	if err != nil {
 		return err

crproxy_blob.go

@@ -68,7 +68,7 @@ func (c *CRProxy) cacheBlobResponse(rw http.ResponseWriter, r *http.Request, inf
 			}
 		}
 
-		err = c.redirect(rw, r, blobPath)
+		err = c.redirect(rw, r, blobPath, info)
 		if err == nil {
 			return
 		}
@@ -120,7 +120,7 @@ func (c *CRProxy) cacheBlobResponse(rw http.ResponseWriter, r *http.Request, inf
 			}
 		}
 
-		err = c.redirect(rw, r, blobPath)
+		err = c.redirect(rw, r, blobPath, info)
 		if err != nil {
 			if c.logger != nil {
 				c.logger.Println("failed to redirect", blobPath, err)

storage/driver/obs/obs.go

@@ -748,11 +748,23 @@ func (d *driver) URLFor(ctx context.Context, path string, options map[string]int
 			expiresIn = time.Until(et).Seconds()
 		}
 	}
+
+	var q map[string]string
+	referer, ok := options["referer"]
+	if ok {
+		refererString, ok := referer.(string)
+		if ok {
+			q = map[string]string{
+				"referer": refererString,
+			}
+		}
+	}
 	output, err := d.Client.CreateSignedUrl(&obs.CreateSignedUrlInput{
-		Bucket:  d.Bucket,
-		Key:     d.OBSPath(path),
-		Method:  obs.HttpMethodType(methodString),
-		Expires: int(expiresIn),
+		Bucket:      d.Bucket,
+		Key:         d.OBSPath(path),
+		Method:      obs.HttpMethodType(methodString),
+		Expires:     int(expiresIn),
+		QueryParams: q,
 	})
 	if err != nil {
 		return "", err

storage/driver/oss/oss.go

@@ -17,6 +17,7 @@ import (
 	"io"
 	"io/ioutil"
 	"net/http"
+	"net/url"
 	"reflect"
 	"strconv"
 	"strings"
@@ -502,7 +503,19 @@ func (d *driver) URLFor(ctx context.Context, path string, options map[string]int
 			expiresTime = et
 		}
 	}
-	signedURL := d.Bucket.SignedURLWithMethod(methodString, d.ossPath(path), expiresTime, nil, nil)
+
+	var q url.Values
+	referer, ok := options["referer"]
+	if ok {
+		refererString, ok := referer.(string)
+		if ok {
+			q = url.Values{
+				"referer": []string{refererString},
+			}
+		}
+	}
+
+	signedURL := d.Bucket.SignedURLWithMethod(methodString, d.ossPath(path), expiresTime, q, nil)
 	return signedURL, nil
 }