Generate Signed URL for Azure Blob Storage using Java SDK

Question

I am trying to create signed URLs for a file in Azure Blob using Java SDK. Here is the snippet that is used -

String container = "test";
String path = "hello/world.json";
long expiry = 2000;
SharedKeyCredentials creds = new SharedKeyCredentials(accountName, accountKey);

BlobSASPermission blobSASPermission = new BlobSASPermission().withRead(true).withCreate(true).withWrite(true);

AccountSASSignatureValues signatureValues = new AccountSASSignatureValues()
        .withResourceTypes(new AccountSASResourceType().withService(true).withContainer(true).withObject(true).toString())
        .withServices(new AccountSASService().withBlob(true).toString())
        .withPermissions(blobSASPermission.toString())
        .withProtocol(SASProtocol.HTTPS_ONLY)
        .withStartTime(OffsetDateTime.now())
        .withExpiryTime(OffsetDateTime.now().plusSeconds(expiry));


URL blobURL = new BlobURLParts()
        .withScheme("https://")
        .withHost(accountName + ".blob.core.windows.net")
        .withContainerName(container)
        .withBlobName(path)
        .withSasQueryParameters(signatureValues.generateSASQueryParameters(creds))
        .toURL();

When I send out a GET/PUT/POST curl request on the blobURL I get the following error

<?xml version="1.0" encoding="utf-8"?><Error><Code>AuthenticationFailed</Code><Message>Server failed to authenticate the request. Make sure the value of Authorization header is formed correctly including the signature.
RequestId:c8192b20-c01e-0056-23ca-5e06e8000000
Time:2019-08-30T00:30:03.2903571Z</Message><AuthenticationErrorDetail>Signature did not match. String to sign used was playmentdiag
rcw
b
sco
2019-08-30T00:27:42Z
2019-08-30T01:01:02Z

https
2018-03-28
</AuthenticationErrorDetail></Error>

What am I doing wrong? I tried to upload files with the same credentials and it worked perfectly fine. Java SDK- com.microsoft.azure:azure-storage-blob:10.1.0

Can you share the SAS token? Just obfuscate the sig portion of the SAS token. — Gaurav Mantri
– Gaurav Mantri, Commented Aug 30, 2019 at 2:03
You mean this - ?sv=2018-03-28&ss=b&srt=sco&spr=https&st=2019-08-30T00%3A27%3A42Z&se=2019-08-30T01%3A01%3A02Z&sp=rcw&sig=XXX — Deepak Puthraya
– Deepak Puthraya, Commented Aug 30, 2019 at 3:46
Yep, that’s it. Can you tell me what version of SDK you’re using? — Gaurav Mantri
– Gaurav Mantri, Commented Aug 30, 2019 at 3:55
It is already mentioned in the post. Mentioning it again - com.microsoft.azure:azure-storage-blob:10.1.0 — Deepak Puthraya
– Deepak Puthraya, Commented Aug 30, 2019 at 6:26

Stanley Gong · Accepted Answer · 2019-09-03 01:42:55Z

2

+50

Seems there is something conflicts with blob SAS permission create and write, disable either of them , your code works well on my side with the similar env as you:

BlobSASPermission blobSASPermission = new BlobSASPermission().withRead(true).withCreate(false).withWrite(true);

or

BlobSASPermission blobSASPermission = new BlobSASPermission().withRead(true).withCreate(true).withWrite(false);

Btw, this is the only doc I can find: https://learn.microsoft.com/en-us/rest/api/storageservices/create-account-sas#constructing-the-account-sas-uri , as you can see under "SignedPermission" section indicated that the create permission can not overwrite existing blobs or files , but write permission is used for writing to existing objs , I think this is the conflict here .

edited Sep 3, 2019 at 1:42

answered Sep 2, 2019 at 8:04

Stanley Gong

12.2k1 gold badge12 silver badges20 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Deepak Puthraya Over a year ago

Is this documented somewhere? Please update the answer if you know a source. I need to wait for 6 hours to reward the bounty. Thanks for the answer.

Collectives™ on Stack Overflow

Generate Signed URL for Azure Blob Storage using Java SDK

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related