If you used a stored access policy while creating a Blob SAS, the SAS would incorrectly be a container SAS #2981

MRayermannMSFT · 2020-05-14T21:07:33Z

Create a policy with all permissions
Create a SAS for a specific blob using the above policy
a. The result is https://REDACTED.blob.core.windows.net/bar2/bla.txt?sv=2019-02-02&si=bar2-1720577EA61&sr=c&sig=REDACTED
b. Note the “sr=c”, which doesn’t seem correct
Try to download the blob by pasting the URL into a browser

Result:

AuthenticationFailed Server failed to authenticate the request. Make sure the value of Authorization header is formed correctly including the signature. RequestId:8e2cb818-e01e-000d-31d4-272027000000 Time:2020-05-11T20:41:31.2257543Z Signature did not match. String to sign used was...

MRayermannMSFT added this to the 1.13.1 milestone May 14, 2020

MRayermannMSFT added the ✅ merged A fix for this issue has been merged label May 14, 2020

MRayermannMSFT added this to Committed in Storage Explorer via automation May 14, 2020

MRayermannMSFT closed this as completed May 14, 2020

Storage Explorer automation moved this from Committed to Done May 14, 2020

MRayermannMSFT mentioned this issue May 18, 2020

Resource type of SAS generated with access policy should be "blob" instead of "container" #2961

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

If you used a stored access policy while creating a Blob SAS, the SAS would incorrectly be a container SAS #2981

If you used a stored access policy while creating a Blob SAS, the SAS would incorrectly be a container SAS #2981

MRayermannMSFT commented May 14, 2020

If you used a stored access policy while creating a Blob SAS, the SAS would incorrectly be a container SAS #2981

If you used a stored access policy while creating a Blob SAS, the SAS would incorrectly be a container SAS #2981

Comments

MRayermannMSFT commented May 14, 2020