Tcl

Configure Azure SAS Authentication for REST

Demonstrates Rest.SetAuthAzureSas, which associates an AuthAzureSAS provider so requests are authorized with an Azure Shared Access Signature token.

Background. A SAS token grants time-limited, permission-scoped access to Azure Storage resources without exposing the account key on the wire. Use SAS authorization when a query-token approach is preferred over Shared Key headers.

Chilkat Tcl Downloads

Download Chilkat for Tcl

Tcl


load ./chilkat.dll

set success 0

set rest [new_CkRest]

set bTls 1
set bAutoReconnect 1
set success [CkRest_Connect $rest "example.com" 443 $bTls $bAutoReconnect]
if {$success == 0} then {
    puts [CkRest_lastErrorText $rest]
    delete_CkRest $rest
    exit
}

#  Configure Azure Shared Access Signature (SAS) authentication.  Provide the account access key
#  and the SAS token query parameters; Chilkat adds the SAS token to each request.
set azSas [new_CkAuthAzureSAS]

#  Normally you would not hard-code secrets in source.  You should instead obtain them from an
#  interactive prompt, environment variable, or a secrets vault.
CkAuthAzureSAS_put_AccessKey $azSas "BASE64_ACCOUNT_ACCESS_KEY"

#  Associate the provider with the REST object.
set success [CkRest_SetAuthAzureSas $rest $azSas]
if {$success == 0} then {
    puts [CkRest_lastErrorText $rest]
    delete_CkRest $rest
    delete_CkAuthAzureSAS $azSas
    exit
}

set responseText [CkRest_fullRequestNoBody $rest "GET" "/mycontainer/myblob.txt"]
if {[CkRest_get_LastMethodSuccess $rest] == 0} then {
    puts [CkRest_lastErrorText $rest]
    delete_CkRest $rest
    delete_CkAuthAzureSAS $azSas
    exit
}

puts "$responseText"

delete_CkRest $rest
delete_CkAuthAzureSAS $azSas