如何使用 Postman 将文件上传到 Azure Blob Storage？

Question

我正在尝试将 base64 字符串作为图像文件上传到 Azure Blob 存储。使用 https://docs.microsoft.com/en-us/rest/api/storageservices/put-blob 文档尝试创建 blob。

Request Syntax:  
PUT https://myaccount.blob.core.windows.net/mycontainer/myblockblob HTTP/1.1  
  
Request Headers:  
x-ms-version: 2015-02-21  
x-ms-date: <date>  
Content-Type: text/plain; charset=UTF-8  
x-ms-blob-content-disposition: attachment; filename="fname.ext"  
x-ms-blob-type: BlockBlob  
x-ms-meta-m1: v1  
x-ms-meta-m2: v2  
Authorization: SharedKey myaccount:YhuFJjN4fAR8/AmBrqBz7MG2uFinQ4rkh4dscbj598g=  
Content-Length: 11  
  
Request Body:  
hello world

我收到如下回复，

<?xml 
version="1.0" encoding="utf-8"?>
<Error>
    <Code>AuthenticationFailed</Code>
    <Message>Server failed to authenticate the request. Make sure the value of Authorization header is formed correctly including the signature.
RequestId:a5d32623-f01e-0040-4275-c1880d000000
Time:2020-11-23T08:45:49.6994297Z</Message>
    <AuthenticationErrorDetail>The MAC signature found in the HTTP request 'YhuFJjN4fAR8/AmBrqBz7MG2uFinQ4rkh4dscbj598g=' is not the same as any computed signature. Server used following string to sign: 'PUT


11

text/plain; charset=UTF-8

x-ms-blob-content-disposition:attachment; filename="demo.txt"
x-ms-blob-type:BlockBlob
x-ms-date:Mon, 23 Nov 2020 13:08:11 GMT
x-ms-encryption-key:YhuFJjN4fAR8/AmBrqBz7MG2uFinQ4rkh4dscbj598g=
x-ms-meta-m1:v1
x-ms-meta-m2:v2
x-ms-version:2015-02-21
/<myaccount>/<mycontainer>/<myblob>'.</AuthenticationErrorDetail>
</Error>

如何解决这个问题？

Answer 1

@sathishKumar

如果你仔细看这篇文章Authorize with Shared Key

语法如下：

Authorization="[SharedKey|SharedKeyLite] <AccountName>:<Signature>"

传递的是签名而不是帐户密钥。

Signature是一个Hash-based Message Authentication Code (HMAC)，由请求构建并使用SHA256算法计算，然后使用Base64编码进行编码。

上述文档中有详细的构造步骤。

此外，还遇到了 post，其中讨论了一个 PowerShell 脚本，该脚本通过 Powershell 创建一个签名字符串，可能对您有用。

C# 实现：

internal static AuthenticationHeaderValue GetAuthorizationHeader(
    string storageAccountName, string storageAccountKey, DateTime now,
    HttpRequestMessage httpRequestMessage, string ifMatch = "", string md5 = "")
{
    // This is the raw representation of the message signature.
    HttpMethod method = httpRequestMessage.Method;
    String MessageSignature = String.Format("{0}\n\n\n{1}\n{5}\n\n\n\n{2}\n\n\n\n{3}{4}",
                method.ToString(),
                (method == HttpMethod.Get || method == HttpMethod.Head) ? String.Empty
                  : httpRequestMessage.Content.Headers.ContentLength.ToString(),
                ifMatch,
                GetCanonicalizedHeaders(httpRequestMessage),
                GetCanonicalizedResource(httpRequestMessage.RequestUri, storageAccountName),
                md5);

    // Now turn it into a byte array.
    byte[] SignatureBytes = Encoding.UTF8.GetBytes(MessageSignature);

    // Create the HMACSHA256 version of the storage key.
    HMACSHA256 SHA256 = new HMACSHA256(Convert.FromBase64String(storageAccountKey));

    // Compute the hash of the SignatureBytes and convert it to a base64 string.
    string signature = Convert.ToBase64String(SHA256.ComputeHash(SignatureBytes));

    // This is the actual header that will be added to the list of request headers.
    AuthenticationHeaderValue authHV = new AuthenticationHeaderValue("SharedKey",
        storageAccountName + ":" + signature);
    return authHV;
}

Answer 2

上传 blob 的一种简单方法是使用 sas token.

导航至azure portal -> 你的存储账户 -> 共享访问签名，然后select截图中的以下选项 -> 然后点击Generate SAS and connection string按钮。截图如下：

然后复制 SAS token，并将其附加到 url。那么新的 url 看起来像这样： https://myaccount.blob.core.windows.net/mycontainer/myblockblob?sv=2019-12-12&ss=b&srt=coxxxxx

接下来，在邮递员中，粘贴新的url。在 Headers 中，您可以删除 Authorization 字段。

测试结果如下：

如何使用 Postman 将文件上传到 Azure Blob Storage？

How to upload files into Azure Blob Storage with Postman?

blob

azure

postman

azure-blob-storage