Tcl

How to Generate an Azure Service Bus Shared Access Signature (SAS)

See more Azure Service Bus Examples

Demonstrates generating and using an Azure Service Bus Shared Access Signature (SAS).

Note: This example requires Chilkat v9.5.0.65 or greater.

Tcl

load ./chilkat.dll

# Note: Requires Chilkat v9.5.0.65 or greater.

# This requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

# -------------------------------------------------------------------
# Create a Shared Access Signature (SAS) token for Azure Service Bus.
# -------------------------------------------------------------------

set authSas [new_CkAuthAzureSAS]

CkAuthAzureSAS_put_AccessKey $authSas "AzureServiceBus_PrimaryKey"

# The SAS token for Service Bus will look like this:
# (The order of params will be different.  The order does not matter.)
# sig=<signature-string>&se=<expiry>&skn=<keyName>&sr=<URL-encoded-resourceURI>

# Specify the format of the string to sign.
CkAuthAzureSAS_put_StringToSign $authSas "resourceURI,expiry"

# Create an expiry to 30 days in the future.
set dtExpiry [new_CkDateTime]

CkDateTime_SetFromCurrentSystemTime $dtExpiry
CkDateTime_AddDays $dtExpiry 30
CkAuthAzureSAS_SetTokenParam $authSas "expiry" "se" [CkDateTime_getAsUnixTimeStr $dtExpiry 1]

# Set the skn (keyname)
# This example uses the key "RootManageSharedAccessKey".  This give full access.
# In a typical scenario, you would create a new Azure key (for the service bus)
# in the Azure portal, such that the key has limited permissions.  This would
# allow you to give the SAS token to others for specific access for some period of time.
CkAuthAzureSAS_SetTokenParam $authSas "keyName" "skn" "RootManageSharedAccessKey"

# Set the URL-encoded-resourceURI
set sbResourceUri [new_CkStringBuilder]

CkStringBuilder_Append $sbResourceUri "https://<yournamespace>.servicebus.windows.net/"
CkStringBuilder_Encode $sbResourceUri "url" "utf-8"
CkAuthAzureSAS_SetTokenParam $authSas "resourceURI" "sr" [CkStringBuilder_getAsString $sbResourceUri]

# Generate the SAS token.
set sasToken [CkAuthAzureSAS_generateToken $authSas]
if {[CkAuthAzureSAS_get_LastMethodSuccess $authSas] != 1} then {
    puts [CkAuthAzureSAS_lastErrorText $authSas]
    delete_CkAuthAzureSAS $authSas
    delete_CkDateTime $dtExpiry
    delete_CkStringBuilder $sbResourceUri
    exit
}

puts "SAS token: $sasToken"

# Save the SAS token to a file.
# We can then use this pre-generated token for future Service Bus operations.
set fac [new_CkFileAccess]

CkFileAccess_WriteEntireTextFile $fac "qa_data/tokens/serviceBusSas.txt" $sasToken "utf-8" 0

delete_CkAuthAzureSAS $authSas
delete_CkDateTime $dtExpiry
delete_CkStringBuilder $sbResourceUri
delete_CkFileAccess $fac