(Tcl) How to Generate an Azure Service Bus Shared Access Signature (SAS)

Demonstrates generating and using an Azure Service Bus Shared Access Signature (SAS).

Note: This example requires Chilkat v9.5.0.65 or greater.

Chilkat Tcl Extension Downloads Chilkat Tcl Extension Downloads

load ./chilkat.dll

# Note: Requires Chilkat v9.5.0.65 or greater.

# This requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

# -------------------------------------------------------------------
# Create a Shared Access Signature (SAS) token for Azure Service Bus.
# -------------------------------------------------------------------

set authSas [new_CkAuthAzureSAS]

CkAuthAzureSAS_put_AccessKey $authSas "AzureServiceBus_PrimaryKey"

# The SAS token for Service Bus will look like this:
# (The order of params will be different.  The order does not matter.)
# sig=<signature-string>&se=<expiry>&skn=<keyName>&sr=<URL-encoded-resourceURI>

# Specify the format of the string to sign.
CkAuthAzureSAS_put_StringToSign $authSas "resourceURI,expiry"

# Create an expiry to 30 days in the future.
set dtExpiry [new_CkDateTime]

CkDateTime_SetFromCurrentSystemTime $dtExpiry
CkDateTime_AddDays $dtExpiry 30
CkAuthAzureSAS_SetTokenParam $authSas "expiry" "se" [CkDateTime_getAsUnixTimeStr $dtExpiry 1]

# Set the skn (keyname)
# This example uses the key "RootManageSharedAccessKey".  This give full access.
# In a typical scenario, you would create a new Azure key (for the service bus)
# in the Azure portal, such that the key has limited permissions.  This would
# allow you to give the SAS token to others for specific access for some period of time.
CkAuthAzureSAS_SetTokenParam $authSas "keyName" "skn" "RootManageSharedAccessKey"

# Set the URL-encoded-resourceURI
set sbResourceUri [new_CkStringBuilder]

CkStringBuilder_Append $sbResourceUri "https://<yournamespace>.servicebus.windows.net/"
CkStringBuilder_Encode $sbResourceUri "url" "utf-8"
CkAuthAzureSAS_SetTokenParam $authSas "resourceURI" "sr" [CkStringBuilder_getAsString $sbResourceUri]

# Generate the SAS token.
set sasToken [CkAuthAzureSAS_generateToken $authSas]
if {[CkAuthAzureSAS_get_LastMethodSuccess $authSas] != 1} then {
    puts [CkAuthAzureSAS_lastErrorText $authSas]
    delete_CkAuthAzureSAS $authSas
    delete_CkDateTime $dtExpiry
    delete_CkStringBuilder $sbResourceUri
    exit
}

puts "SAS token: $sasToken"

# Save the SAS token to a file.
# We can then use this pre-generated token for future Service Bus operations.
set fac [new_CkFileAccess]

CkFileAccess_WriteEntireTextFile $fac "qa_data/tokens/serviceBusSas.txt" $sasToken "utf-8" 0

delete_CkAuthAzureSAS $authSas
delete_CkDateTime $dtExpiry
delete_CkStringBuilder $sbResourceUri
delete_CkFileAccess $fac