React中如何更新AWS Chime Messaging API请求头替换过期临时凭证？

首先明确你之前的问题所在：你在complete事件中修改请求头，这个事件是请求完成后才触发的，此时请求已经发送完毕，修改请求头根本不会影响当前请求，这就是为什么设置无效。

下面提供两种可靠的解决方案，优先推荐第一种，让SDK自动管理凭证生命周期：

方案一：自定义可自动刷新的凭证类 #

利用AWS SDK的AWS.Credentials基类，实现一个支持自动刷新的凭证对象，SDK会在凭证过期前自动调用刷新逻辑，无需手动干预请求头。

const AWS = require('aws-sdk');
const ChimeMessaging = require("aws-sdk/clients/chimesdkmessaging");

// 自定义可刷新凭证类
class AutoRefreshCredentials extends AWS.Credentials {
  constructor() {
    super();
    // 初始化凭证参数
    this.accessKeyId = '';
    this.secretAccessKey = '';
    this.sessionToken = '';
    this.expireTime = new Date(0);
  }

  // 实现刷新逻辑
  async refresh(callback) {
    try {
      // 替换成你的凭证刷新接口/逻辑，获取最新临时凭证
      const freshCreds = await yourCredentialRefreshFunction();
      
      // 更新凭证信息
      this.accessKeyId = freshCreds.AccessKeyId;
      this.secretAccessKey = freshCreds.SecretAccessKey;
      this.sessionToken = freshCreds.SessionToken;
      // 设置过期时间，SDK会自动在过期前触发刷新
      this.expireTime = new Date(freshCreds.Expiration);
      
      callback(null);
    } catch (err) {
      callback(err);
    }
  }
}

// 创建带自动刷新凭证的Chime客户端
function getChimeClient() {
  const autoCreds = new AutoRefreshCredentials();
  return new ChimeMessaging({
    credentials: autoCreds,
    region: '你的AWS区域' // 例如us-east-1
  });
}

async function sendChannelMessage(
  channelArn,
  messageContent,
  persistence,
  type,
  member,
  options = null
) {
  const chimeBearerArn = createMemberArn(member.userId);
  const chimeClient = getChimeClient();

  const params = {
    ChimeBearer: chimeBearerArn,
    ChannelArn: channelArn,
    Content: messageContent,
    Persistence: persistence,
    Type: type,
  };

  // SDK会自动处理凭证刷新，直接调用即可
  const response = await chimeClient.sendChannelMessage(params).promise();
  
  const sentMessage = {
    response: response,
    CreatedTimestamp: new Date(),
    Sender: { Arn: createMemberArn(member.userId), Name: member.username },
  };
  return sentMessage;
}

方案二：每次请求前手动更新客户端凭证 #

如果不想自定义凭证类，也可以在每次创建客户端时传入最新的凭证，确保每次请求都用有效凭证：

const ChimeMessaging = require("aws-sdk/clients/chimesdkmessaging");

async function chimeMessagingClient() {
  // 每次创建客户端前先刷新凭证
  const latestCreds = await yourCredentialRefreshFunction();
  return new ChimeMessaging({
    credentials: {
      accessKeyId: latestCreds.AccessKeyId,
      secretAccessKey: latestCreds.SecretAccessKey,
      sessionToken: latestCreds.SessionToken
    },
    region: '你的AWS区域'
  });
}

async function sendChannelMessage(
  channelArn,
  messageContent,
  persistence,
  type,
  member,
  options = null
) {
  const chimeBearerArn = createMemberArn(member.userId);
  // 获取带最新凭证的客户端
  const chimeClient = await chimeMessagingClient();

  const params = {
    ChimeBearer: chimeBearerArn,
    ChannelArn: channelArn,
    Content: messageContent,
    Persistence: persistence,
    Type: type,
  };

  const response = await chimeClient.sendChannelMessage(params).promise();
  
  const sentMessage = {
    response: response,
    CreatedTimestamp: new Date(),
    Sender: { Arn: createMemberArn(member.userId), Name: member.username },
  };
  return sentMessage;
}

补充：如果非要手动修改请求头（不推荐） #

若你坚持要手动设置请求头，需要在请求构建阶段（发送前）修改，而不是complete事件：

const request = chimeClient.sendChannelMessage(params);
// 在build事件中修改请求头，此时请求还未发送
request.on('build', function() {
  request.httpRequest.headers['x-amz-security-token'] = NEW_TOKEN;
});
const response = await request.promise();

但这种方式需要你自己严格跟踪凭证过期时间，手动触发刷新，可靠性远不如前两种方案。

内容的提问来源于stack exchange，提问作者Sangeet