(Objective-C) How to Generate an Azure Service Bus Shared Access Signature (SAS)

Demonstrates generating and using an Azure Service Bus Shared Access Signature (SAS).

Note: This example requires Chilkat v9.5.0.65 or greater.

Chilkat Objective-C Library Downloads MAC OS X (Cocoa) Libs iOS Libs

#import <CkoAuthAzureSAS.h>
#import <CkoDateTime.h>
#import <CkoStringBuilder.h>
#import <NSString.h>
#import <CkoFileAccess.h>

// Note: Requires Chilkat v9.5.0.65 or greater.

// This requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// -------------------------------------------------------------------
// Create a Shared Access Signature (SAS) token for Azure Service Bus.
// -------------------------------------------------------------------

CkoAuthAzureSAS *authSas = [[CkoAuthAzureSAS alloc] init];
authSas.AccessKey = @"AzureServiceBus_PrimaryKey";

// The SAS token for Service Bus will look like this:
// (The order of params will be different.  The order does not matter.)
// sig=<signature-string>&se=<expiry>&skn=<keyName>&sr=<URL-encoded-resourceURI>

// Specify the format of the string to sign.
authSas.StringToSign = @"resourceURI,expiry";

// Create an expiry to 30 days in the future.
CkoDateTime *dtExpiry = [[CkoDateTime alloc] init];
[dtExpiry SetFromCurrentSystemTime];
[dtExpiry AddDays: [NSNumber numberWithInt: 30]];
[authSas SetTokenParam: @"expiry" authParamName: @"se" value: [dtExpiry GetAsUnixTimeStr: YES]];

// Set the skn (keyname)
// This example uses the key "RootManageSharedAccessKey".  This give full access.
// In a typical scenario, you would create a new Azure key (for the service bus)
// in the Azure portal, such that the key has limited permissions.  This would
// allow you to give the SAS token to others for specific access for some period of time.
[authSas SetTokenParam: @"keyName" authParamName: @"skn" value: @"RootManageSharedAccessKey"];

// Set the URL-encoded-resourceURI
CkoStringBuilder *sbResourceUri = [[CkoStringBuilder alloc] init];
[sbResourceUri Append: @"https://<yournamespace>.servicebus.windows.net/"];
[sbResourceUri Encode: @"url" charset: @"utf-8"];
[authSas SetTokenParam: @"resourceURI" authParamName: @"sr" value: [sbResourceUri GetAsString]];

// Generate the SAS token.
NSString *sasToken = [authSas GenerateToken];
if (authSas.LastMethodSuccess != YES) {
    NSLog(@"%@",authSas.LastErrorText);
    return;
}

NSLog(@"%@%@",@"SAS token: ",sasToken);

// Save the SAS token to a file.
// We can then use this pre-generated token for future Service Bus operations.
CkoFileAccess *fac = [[CkoFileAccess alloc] init];
[fac WriteEntireTextFile: @"qa_data/tokens/serviceBusSas.txt" fileData: sasToken charset: @"utf-8" includePreamble: NO];