File 如何创建azure文件存储SAS url(没有azure库)?

File 如何创建azure文件存储SAS url(没有azure库)?,file,azure,geturl,File,Azure,Geturl,我的主要目标是为文件创建一个SAS url(没有azure库)。 我尝试用blob创建azure存储SAS,一切正常。当我尝试在文件中执行相同操作时,我遇到了一个错误。这是我的代码: string azAccName = "AccountName"; string resource = "/upgfile/prt.png"; string endPoint = "https://" + azAccName + ".file.core.windows.net"; string uri = endP

我的主要目标是为文件创建一个SAS url(没有azure库)。 我尝试用blob创建azure存储SAS,一切正常。当我尝试在文件中执行相同操作时,我遇到了一个错误。这是我的代码:

string azAccName = "AccountName";
string resource = "/upgfile/prt.png";
string endPoint = "https://" + azAccName + ".file.core.windows.net";
string uri = endPoint + resource;
string _now = DateTime.UtcNow.ToString("s") + "Z";    
string _noww = DateTime.UtcNow.AddHours(3).AddMinutes(5).ToString("s") + "Z";
string StorageKey = "xxx";

string signedpermissions = "r";
string signedstart = _now;//"2017-02-14"; //yyyy-mm--dd
string signedexpiry = _noww;// "2017-02-14";
string canonicalizedresource = "/file/" + azAccName + resource; //"/blob/myaccount/music/intro.mp3"
string signedidentifier = ""; //YWJjZGVmZw==
string signedIP = "";
string signedProtocol = "https";
string signedversion = "2015-02-21";
string rscc = "";  //Cache-Control
string rscd = "file; attachment";  //Content-Disposition               
string rsce = "";  //Content-Encoding
string rscl = "";  //Content-Language
string rsct = "binary";  //Content-Type      binary


string StringToSign = signedpermissions + "\n" +
               signedstart + "\n" +
               signedexpiry + "\n" +
               canonicalizedresource + "\n" +
               signedidentifier + "\n" +
               signedversion + "\n" +
               rscc + "\n" +
               rscd + "\n" +
               rsce + "\n" +
               rscl + "\n" +
               rsct;

HMACSHA256 hmac = new HMACSHA256(Convert.FromBase64String(StorageKey));
string signature = Convert.ToBase64String(hmac.ComputeHash(Encoding.UTF8.GetBytes(StringToSign)));

string link = String.Format("{0}?sv={1}&st={2}&se={3}&sr={4}&sp={5}&rscd={8}&rsct={9}&spr={6}&sig={7}",
                                        uri,
                                        signedversion,
                                        signedstart,
                                        signedexpiry,
                                        "c",   //b for blob
                                        signedpermissions,
                                        "https",
                                        signature.Replace("/", "%2"),
                                        rscd,///////////////
                                        rsct); 
我得到了这个错误

<Error>
<Code>AuthenticationFailed</Code>
<Message>
Server failed to authenticate the request. Make sure the value of Authorization header is formed correctly including the signature. RequestId:92eda75a-001a-0072-501d-1bb6fd000000 Time:2017-08-22T08:03:58.6115733Z
</Message>
<AuthenticationErrorDetail>Signature fields not well formed.</AuthenticationErrorDetail>
</Error>
我有几乎相同的blob(小差异)代码,它工作正常。
有什么建议吗?

我认为问题在于您的
stringToSign
中缺少参数。必须包括指定的所有参数:

如果未使用参数(例如,案例中的
signedIP
),则必须指定空行

基于此,您的
StringToSign
应该是:

string StringToSign = signedpermissions + "\n" +
               signedstart + "\n" +
               signedexpiry + "\n" +
               canonicalizedresource + "\n" +
               signedidentifier + "\n" +
               "\n" + //For signed IP
               "\n" + //For signed Protocol
               signedversion + "\n" +
               rscc + "\n" +
               rscd + "\n" +
               rsce + "\n" +
               rscl + "\n" +
               rsct;
此外,
链接中的
sr
(签名资源类型)应该是
f
(用于文件),而不是您正在使用的
c

string StringToSign = signedpermissions + "\n" +
               signedstart + "\n" +
               signedexpiry + "\n" +
               canonicalizedresource + "\n" +
               signedidentifier + "\n" +
               "\n" + //For signed IP
               "\n" + //For signed Protocol
               signedversion + "\n" +
               rscc + "\n" +
               rscd + "\n" +
               rsce + "\n" +
               rscl + "\n" +
               rsct;