Lua Requires Chilkat v9.5.0.65+

How to Generate an Azure Storage Account Shared Access Signature (SAS)

See more Azure Cloud Storage Examples

Shows how to generate a Shared Access Signature (SAS) for an Azure Storage Account. Lua

local chilkat = require("chilkat")

-- This requires the Chilkat API to have been previously unlocked.
-- See Global Unlock Sample for sample code.

-- --------------------------------------------------------------------------
-- Create a Shared Access Signature (SAS) token for an Azure Storage Account.
-- --------------------------------------------------------------------------

-- See https://docs.microsoft.com/en-us/rest/api/storageservices/fileservices/constructing-an-account-sas
-- for details regarding the Azure Storage Account SAS fields.

local authSas = chilkat.AuthAzureSAS.new()
authSas.access_key = "AZURE_ACCESS_KEY"

-- Specify the format of the string to sign.
-- Each comma character in the following string represents a LF ("\n") character.
-- The names specified in the StringToSign are replaced with the values specified
-- in the subsequent calls to SetTokenParam and SetNonTokenParam,.

-- Note: The trailing comma in the StringToSign is intentional and important. This indicates that the
-- string to sign will end with a "\n".

-- Also note: The names in the StringToSign are case sensitive.  The names
-- specified in the 1st argument in the calls to SetNonTokenParam and SetTokenParam should
-- match a name listed in StringToSign.
authSas.string_to_sign = "accountname,signedpermissions,signedservice,signedresourcetype,signedstart,signedexpiry,signedIP,signedProtocol,signedversion,"

--  The account name is "chilkat".  Use your own account name instead of "chilkat".
--  Also use your own container name instead of "mycontainer".
authSas:set_non_token_param("accountname", "chilkat")

authSas:set_token_param("signedpermissions", "sp", "rwdlacup")
authSas:set_token_param("signedservice", "ss", "bfqt")
authSas:set_token_param("signedresourcetype", "srt", "sco")

local dt = chilkat.DateTime.new()
dt:set_from_current_system_time()
authSas:set_token_param("signedstart", "st", dt:get_as_iso8601("YYYY-MM-DDThh:mmTZD", false))

-- This SAS token will be valid for 30 days.
dt:add_days(30)
authSas:set_token_param("signedexpiry", "se", dt:get_as_iso8601("YYYY-MM-DDThh:mmTZD", false))

authSas:set_token_param("signedProtocol", "spr", "https")

--  Specifiy values and query param names for each field.
--  If a field is not specified, then an empty string will be used for its value.
authSas:set_token_param("signedversion", "sv", "2015-04-05")

-- Note that we did not call SetTokenParam for "signedIP".  For any omitted fields
-- the value will default to the empty string.

-- Generate the SAS token.
local sasToken = authSas:generate_token()
if not authSas.last_method_success then
    print(authSas.last_error_text)
    return
end

print("SAS token: " .. sasToken)

-- Save the SAS token to a file.
-- We can then use this pre-generated token for future Azure Storage Account operations.
local fac = chilkat.FileAccess.new()
fac:write_entire_text_file("qa_data/tokens/azureStorageAccountSas.txt", sasToken, "utf-8", false)