MS Azure shared key by Azure REST API

we are trying to access the blobs from azure blob storage without using the Azure SDK,

we are trying to access through the shared key by Azure REST API, for that we need to generate the Authorization header, but when I try to create a signature from the Access key I am getting the following error

"Server failed to authenticate the request. Make sure the value of Authorization header is formed correctly including the signature."

"The MAC signature found in the HTTP request 'key hash' is not the same as any computed signature. Server used following string to sign: 'GET'"

string signWithAccountKey(string stringToSign, string accountKey)

{

var hmacsha = new System.Security.Cryptography.HMACSHA256();

hmacsha.Key = Convert.FromBase64String(accountKey);

var signature = hmacsha.ComputeHash(Encoding.UTF8.GetBytes(stringToSign));

return Convert.ToBase64String(signature);

}

need help to generate proper authorization header, we have followed the documentation

https://docs.microsoft.com/en-us/rest/api/storageservices/authorize-with-shared-key

https://docs.microsoft.com/en-gb/rest/api/storageservices/authorization-for-the-azure-storage-services?redirectedfrom=MSDN

Regards

Hi Supreeth,

I used below authorization to access the Azure storage (BLOBS, TABLES)

public static string getAuthToken(HttpWebRequest request, string storageAccount, string accessKey, string resource)
{
try
{
string sAuthTokn = "";
string stringToSign = request.Headers["x-ms-date"] + "\n";
stringToSign += "/" + storageAccount + "/" + resource;
HMACSHA256 hasher = new HMACSHA256(Convert.FromBase64String(accessKey));
sAuthTokn = "SharedKeyLite " + storageAccount + ":" + Convert.ToBase64String(hasher.ComputeHash(Encoding.UTF8.GetBytes(stringToSign)));
return sAuthTokn;
}
catch (Exception ex)
{
throw ex;
}
}

1 Reply

Know the answer? Post it — somebody with the same question will find it here.

Ravishankar N7y ago
Hi Supreeth,

I used below authorization to access the Azure storage (BLOBS, TABLES)
public static string getAuthToken(HttpWebRequest request, string storageAccount, string accessKey, string resource)
        {
            try
            {
                string sAuthTokn = "";

                string stringToSign = request.Headers["x-ms-date"] + "\n";

                stringToSign += "/" + storageAccount + "/" + resource;

                HMACSHA256 hasher = new HMACSHA256(Convert.FromBase64String(accessKey));

                sAuthTokn = "SharedKeyLite " + storageAccount + ":" + Convert.ToBase64String(hasher.ComputeHash(Encoding.UTF8.GetBytes(stringToSign)));

                return sAuthTokn;
            }
            catch (Exception ex)
            {

                throw ex;
            }
        }