(DataFlex) Create an Azure Service SAS

Shows how to generate an Azure Service SAS.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

Use ChilkatAx-9.5.0-win32.pkg

Procedure Test
    Handle hoAuthSas
    Boolean iSuccess
    Handle hoDt
    String sSasToken
    Handle hoFac
    String sTemp1
    Boolean bTemp1

    // This requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    // ----------------------------------------------------------------------------------------------
    // Create a Shared Access Signature (SAS) token for an Azure Service (Blob, Queue, Table, or File)
    // -----------------------------------------------------------------------------------------------

    // See https://docs.microsoft.com/en-us/rest/api/storageservices/create-service-sas
    // for details.

    Get Create (RefClass(cComChilkatAuthAzureSAS)) To hoAuthSas
    If (Not(IsComObjectCreated(hoAuthSas))) Begin
        Send CreateComObject of hoAuthSas
    End
    Set ComAccessKey Of hoAuthSas To "AZURE_ACCESS_KEY"

    // Specify the format of the string to sign.
    // Each comma character in the following string represents a LF ("\n") character.
    // The names specified in the StringToSign are replaced with the values specified
    // in the subsequent calls to SetTokenParam and SetNonTokenParam,.

    // Note: The trailing comma in the StringToSign is intentional and important. This indicates that the 
    // string to sign will end with a "\n".

    // Also note: The names in the StringToSign are case sensitive.  The names
    // specified in the 1st argument in the calls to SetNonTokenParam and SetTokenParam should
    // match a name listed in StringToSign. 

    // Version 2018-11-09 and later
    // 
    // Version 2018-11-09 adds support for the signed resource and signed blob snapshot time fields. 
    // These must be included in the string-to-sign. To construct the string-to-sign for Blob service resources, use the following format:
    // 
    // StringToSign = signedpermissions + "\n" +  
    //                signedstart + "\n" +  
    //                signedexpiry + "\n" +  
    //                canonicalizedresource + "\n" +  
    //                signedidentifier + "\n" +  
    //                signedIP + "\n" +  
    //                signedProtocol + "\n" +  
    //                signedversion + "\n" +  
    //                signedResource + "\n"
    //                signedSnapshotTime + "\n" +
    //                rscc + "\n" +  
    //                rscd + "\n" +  
    //                rsce + "\n" +  
    //                rscl + "\n" +  
    //                rsct  
    // 

    Set ComStringToSign Of hoAuthSas To "signedpermissions,signedstart,signedexpiry,canonicalizedresource,signedidentifier,signedIP,signedProtocol,signedversion,signedResource,signedSnapshotTime,rscc,rscd,rsce,rscl,rsct"

    Get ComSetTokenParam Of hoAuthSas "signedpermissions" "sp" "rw" To iSuccess

    Get Create (RefClass(cComCkDateTime)) To hoDt
    If (Not(IsComObjectCreated(hoDt))) Begin
        Send CreateComObject of hoDt
    End
    Get ComSetFromCurrentSystemTime Of hoDt To iSuccess
    Get ComGetAsIso8601 Of hoDt "YYYY-MM-DDThh:mmTZD" False To sTemp1
    Get ComSetTokenParam Of hoAuthSas "signedstart" "st" sTemp1 To iSuccess

    // This SAS token will be valid for 30 days.
    Get ComAddDays Of hoDt 30 To iSuccess
    Get ComGetAsIso8601 Of hoDt "YYYY-MM-DDThh:mmTZD" False To sTemp1
    Get ComSetTokenParam Of hoAuthSas "signedexpiry" "se" sTemp1 To iSuccess

    // The canonicalizedresouce portion of the string is a canonical path to the signed resource. It must include the service name (blob, table, queue or file) for version
    // 2021-08-06 or later, the storage account name, and the resource name, and must be URL-decoded. Names of blobs must include the blobs container. Table names must be
    // lower-case. The following examples show how to construct the canonicalizedresource portion of the string, depending on the type of resource.
    // For example:
    // URL = https://chilkat.blob.core.windows.net/mycontainer/starfish.jpg
    // canonicalizedresource = "/blob/chilkat/mycontainer/starfish.jpg"  
    // IMPORTANT: See https://docs.microsoft.com/en-us/rest/api/storageservices/create-service-sas for all details..
    Get ComSetNonTokenParam Of hoAuthSas "canonicalizedresource" "/blob/chilkat/mycontainer/starfish.jpg" To iSuccess

    Get ComSetTokenParam Of hoAuthSas "signedProtocol" "spr" "https" To iSuccess

    //  Specifiy values and query param names for each field.
    //  If a field is not specified, then an empty string will be used for its value.
    Get ComSetTokenParam Of hoAuthSas "signedversion" "sv" "2018-11-09" To iSuccess

    // Indicate that we are creating a service SAS that is limited to the blob resource.
    // (Specify b if the shared resource is a blob. This grants access to the content and metadata of the blob.
    //  Specify c if the shared resource is a container. This grants access to the content and metadata of any blob in the container, and to the list of blobs in the container. )
    Get ComSetTokenParam Of hoAuthSas "signedResource" "sr" "b" To iSuccess

    // Note that we did not call SetTokenParam for "signedIP", "signedSnapshotTime", "rscc", and others.  For any omitted fields
    // the value will default to the empty string.

    // Generate the SAS token.
    Get ComGenerateToken Of hoAuthSas To sSasToken
    Get ComLastMethodSuccess Of hoAuthSas To bTemp1
    If (bTemp1 <> True) Begin
        Get ComLastErrorText Of hoAuthSas To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    Showln "SAS token: " sSasToken

    // Save the SAS Service token to a file.
    // We can then use this pre-generated token for future Azure Storage Account operations.
    Get Create (RefClass(cComCkFileAccess)) To hoFac
    If (Not(IsComObjectCreated(hoFac))) Begin
        Send CreateComObject of hoFac
    End
    Get ComWriteEntireTextFile Of hoFac "qa_data/tokens/azureStorageServiceSas.txt" sSasToken "utf-8" False To iSuccess


End_Procedure