It is not safe to write Alibaba Cloud's accessId and accessKey directly on the page with javascript. You can use the background to store these sensitive information. Official website has related SDK, so you can choose your own commonly used SDK.

I use Java

Process: First, visit your backstage to get relevant vouchers and send them to your OSS. If you want to call the callback function, you need to open the callback function in the background.

Write your callback function in the background, and return the callback function voucher information to the front end. The front end can access OSS with the callback function voucher to get the callback function information.