CkPython

Configure Azure SAS Authentication for REST

Demonstrates Rest.SetAuthAzureSas, which associates an AuthAzureSAS provider so requests are authorized with an Azure Shared Access Signature token.

Background. A SAS token grants time-limited, permission-scoped access to Azure Storage resources without exposing the account key on the wire. Use SAS authorization when a query-token approach is preferred over Shared Key headers.

Chilkat CkPython Downloads

Download Chilkat for CkPython

CkPython

import sys
import chilkat

success = False

rest = chilkat.CkRest()
bTls = True
bAutoReconnect = True
success = rest.Connect("example.com",443,bTls,bAutoReconnect)
if (success == False):
    print(rest.lastErrorText())
    sys.exit()

#  Configure Azure Shared Access Signature (SAS) authentication.  Provide the account access key
#  and the SAS token query parameters; Chilkat adds the SAS token to each request.
azSas = chilkat.CkAuthAzureSAS()
#  Normally you would not hard-code secrets in source.  You should instead obtain them from an
#  interactive prompt, environment variable, or a secrets vault.
azSas.put_AccessKey("BASE64_ACCOUNT_ACCESS_KEY")

#  Associate the provider with the REST object.
success = rest.SetAuthAzureSas(azSas)
if (success == False):
    print(rest.lastErrorText())
    sys.exit()

responseText = rest.fullRequestNoBody("GET","/mycontainer/myblob.txt")
if (rest.get_LastMethodSuccess() == False):
    print(rest.lastErrorText())
    sys.exit()

print(responseText)