how to construct header for (REST API) azure storage SAS (shared accesss signature)

Question

I am debugging a client application calling REST API embedded with AZURE storage SAS-shared access signature to access azure storage resource. However, it is not getting through. The azure threw out an error stating that the mandatory header is missing, and abort the operation.

The REST API is fairly simple, although it is embedded with the SAS token generated by the azure storage account. The client application uses the REST API to write data into an azure blob.

is there anywhere I can find a good example showing how to generate the header for the REST API (SAS)? I need to find out the exact layout of the header (such as the type of information that needs to be embedded in the header.

Also, do I need to register my client application with the Azure AD?

I didn't think my client application needs to be registered with the AZURE since that is why we have client-side SAS. But, I could be wrong. Therefore, any input will be appreciated.

Thanks in advance.

Answer 1

If you use sas token to call Azure blob rest api, the request URL should be like

https://myaccount.blob.core.windows.net/<cantianer>/<blob>?<sastoken>

For example

$accountName=""
$accountKey=""
$containerName="output"
$blobName="test.txt"


$context= New-AzStorageContext -StorageAccountName $accountName -StorageAccountKey $accountKey
$sas = New-AzStorageAccountSASToken -Service Blob -ResourceType Service,Container,Object -Permission "rwdlacx" -Context $context

$body = "Hello"

$headers=@{"x-ms-blob-type"="BlockBlob"; "Content-Type"="text/plain"}

$url="https://$accountName.blob.core.windows.net/$containerName/$blobName$sas"

 Invoke-WebRequest -Uri $url -Method Put -Headers $headers -Body $body -UseBasicParsing