[BUG] Creating blob client with "Account" SAS token fails on: Signature doesn't match. about azure-sdk-for-java HOT 6 OPEN

@ibrahimrabab could you please take a look?

from azure-sdk-for-java.

Hi @HassanBadir
Thanks for reaching out! Can you please provide the full endpoint URL with the SAS signature redacted? When I tried to reproduce this, it required me to enable permissions on service, container, and blob. Can you confirm that you are able to call download with only permission on the service level?

Also, can you provide a code snippet of how you made this work in Python with the wget? Thanks!

from azure-sdk-for-java.

Hi @HassanBadir. Thank you for opening this issue and giving us the opportunity to assist. To help our team better understand your issue and the details of your scenario please provide a response to the question asked above or the information requested above. This will help us more accurately address your issue.

from azure-sdk-for-java.

Hey @ibrahimrabab,

maybe i was misunderstood..

i create SAS on the Storage level, with permissions to "Object" in order to be able to download blobs.

meaning on storage i go to:

then create this SAS:

and with this i can't create blobClient directly .. i must split the SAS from the blob, and pass them separately as mentioned above:

  val blobClientBuilder = AzureBlobClientBuilder().endpoint(blobUrl).**sasToken(sasToken)**

from azure-sdk-for-java.

Hi @HassanBadir
Apologies on not responding back on this earlier. I tested out the sas token generation as you did above, and the download calls work just fine for me only using .endpoint(). One thing I noticed in your code snippets is that you do not set .containerName() and .blobName() on the client builder. Are you doing that? If not, can you please set the container name and the blob name on the builder and try to make the download call again?

You should do the following:
BlobClientBuilder builder = new BlobClientBuilder()
.endpoint("https://<"accountname">.blob.core.windows.net/?sv=<"sastoken">")
.containerName("<"containerName">")
.blobName("<"blobname">");

And after building the BlobClientBuilder, try making the download calls again. Let us know if it works! If not, we can further investigate.

from azure-sdk-for-java.

Hi @HassanBadir. Thank you for opening this issue and giving us the opportunity to assist. To help our team better understand your issue and the details of your scenario please provide a response to the question asked above or the information requested above. This will help us more accurately address your issue.

from azure-sdk-for-java.