DataFlex

How to Generate an Azure Storage Account Shared Access Signature (SAS)

See more Azure Cloud Storage Examples

Shows how to generate a Shared Access Signature (SAS) for an Azure Storage Account.

Note: This example requires Chilkat v9.5.0.65 or greater.

DataFlex

Use ChilkatAx-win32.pkg

Procedure Test
    Handle hoAuthSas
    Boolean iSuccess
    Handle hoDt
    String sSasToken
    Handle hoFac
    String sTemp1
    Boolean bTemp1

    // Note: Requires Chilkat v9.5.0.65 or greater.

    // This requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    // --------------------------------------------------------------------------
    // Create a Shared Access Signature (SAS) token for an Azure Storage Account.
    // --------------------------------------------------------------------------

    // See https://docs.microsoft.com/en-us/rest/api/storageservices/fileservices/constructing-an-account-sas 
    // for details regarding the Azure Storage Account SAS fields.

    Get Create (RefClass(cComChilkatAuthAzureSAS)) To hoAuthSas
    If (Not(IsComObjectCreated(hoAuthSas))) Begin
        Send CreateComObject of hoAuthSas
    End
    Set ComAccessKey Of hoAuthSas To "AZURE_ACCESS_KEY"

    // Specify the format of the string to sign.
    // Each comma character in the following string represents a LF ("\n") character.
    // The names specified in the StringToSign are replaced with the values specified
    // in the subsequent calls to SetTokenParam and SetNonTokenParam,.

    // Note: The trailing comma in the StringToSign is intentional and important. This indicates that the 
    // string to sign will end with a "\n".

    // Also note: The names in the StringToSign are case sensitive.  The names
    // specified in the 1st argument in the calls to SetNonTokenParam and SetTokenParam should
    // match a name listed in StringToSign. 
    Set ComStringToSign Of hoAuthSas To "accountname,signedpermissions,signedservice,signedresourcetype,signedstart,signedexpiry,signedIP,signedProtocol,signedversion,"

    //  The account name is "chilkat".  Use your own account name instead of "chilkat".
    //  Also use your own container name instead of "mycontainer".
    Get ComSetNonTokenParam Of hoAuthSas "accountname" "chilkat" To iSuccess

    Get ComSetTokenParam Of hoAuthSas "signedpermissions" "sp" "rwdlacup" To iSuccess
    Get ComSetTokenParam Of hoAuthSas "signedservice" "ss" "bfqt" To iSuccess
    Get ComSetTokenParam Of hoAuthSas "signedresourcetype" "srt" "sco" To iSuccess

    Get Create (RefClass(cComCkDateTime)) To hoDt
    If (Not(IsComObjectCreated(hoDt))) Begin
        Send CreateComObject of hoDt
    End
    Get ComSetFromCurrentSystemTime Of hoDt To iSuccess
    Get ComGetAsIso8601 Of hoDt "YYYY-MM-DDThh:mmTZD" False To sTemp1
    Get ComSetTokenParam Of hoAuthSas "signedstart" "st" sTemp1 To iSuccess

    // This SAS token will be valid for 30 days.
    Get ComAddDays Of hoDt 30 To iSuccess
    Get ComGetAsIso8601 Of hoDt "YYYY-MM-DDThh:mmTZD" False To sTemp1
    Get ComSetTokenParam Of hoAuthSas "signedexpiry" "se" sTemp1 To iSuccess

    Get ComSetTokenParam Of hoAuthSas "signedProtocol" "spr" "https" To iSuccess

    //  Specifiy values and query param names for each field.
    //  If a field is not specified, then an empty string will be used for its value.
    Get ComSetTokenParam Of hoAuthSas "signedversion" "sv" "2015-04-05" To iSuccess

    // Note that we did not call SetTokenParam for "signedIP".  For any omitted fields
    // the value will default to the empty string.

    // Generate the SAS token.
    Get ComGenerateToken Of hoAuthSas To sSasToken
    Get ComLastMethodSuccess Of hoAuthSas To bTemp1
    If (bTemp1 <> True) Begin
        Get ComLastErrorText Of hoAuthSas To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    Showln "SAS token: " sSasToken

    // Save the SAS token to a file.
    // We can then use this pre-generated token for future Azure Storage Account operations.
    Get Create (RefClass(cComCkFileAccess)) To hoFac
    If (Not(IsComObjectCreated(hoFac))) Begin
        Send CreateComObject of hoFac
    End
    Get ComWriteEntireTextFile Of hoFac "qa_data/tokens/azureStorageAccountSas.txt" sSasToken "utf-8" False To iSuccess


End_Procedure