Post a reply

Username

Subject

Message body

Font colour:

Font size:

[quote="Filip.Jirsak"]Would it be possible to add support for authorization using SharedKey to the S3 protocol? This is the simplest authorization method supported by Azure Blob Storage.

Authorization is done using AccountName and AccountKey/AccessKey, and the entire authorization process consists only of sending the following header:
[code]Authorization: SharedKey <AccountName>:<Signature>[/code]
Header [m]x-ms-date[/m] or [m]Date[/m] is mandatory.

Signature is computed with this algorithm:
https://learn.microsoft.com/en-us/rest/api/storageservices/authorize-with-shared-key#constructing-the-signature-string

Sample request for [b]AccountName=bflmpsvz[/b]:
[code]GET /bucket?restype=container&comp=list&delimiter=%2F&maxresults=1000 HTTP/1.1
Accept: application/xml
Accept-Charset: UTF-8
x-ms-date: Wed, 12 Mar 2025 08:43:41 GMT
Authorization: SharedKey bflmpsvz:aGNra3JkdG4=
Host: bflmpsvz.blob.core.windows.net[/code]
Full documentation: https://learn.microsoft.com/en-us/rest/api/storageservices/authorize-with-shared-key[/quote]

Options

Disable BBCode in this post

Notify me when a reply is posted (registered users only)

Add an Attachment

If you do not want to add an Attachment to your Post, please leave the Fields blank.

Filename

(maximum 10 MB; please compress large files; only common media, archive, text and programming file formats are allowed)

File Comment

Options

Private file (available to author and site moderators only)

Topic review

martin

Re: Amazon S3 – authorization with SharedKey (used by Azure Blobstorage)

2025-03-13

Thanks for your detailed request.

I have added it to the tracker:
Issue 2354 – Authorization with Azure Blobstorage SharedKey
You can vote for it there.

Filip.Jirsak

Amazon S3 – authorization with SharedKey (used by Azure Blobstorage)

2025-03-12 10:22

Would it be possible to add support for authorization using SharedKey to the S3 protocol? This is the simplest authorization method supported by Azure Blob Storage.

Authorization is done using AccountName and AccountKey/AccessKey, and the entire authorization process consists only of sending the following header:

Authorization: SharedKey <AccountName>:<Signature>

Header x-ms-date or Date is mandatory.

Signature is computed with this algorithm:
https://learn.microsoft.com/en-us/rest/api/storageservices/authorize-with-shared-key#constructing-the-signature-string

Sample request for AccountName=bflmpsvz:

GET /bucket?restype=container&comp=list&delimiter=%2F&maxresults=1000 HTTP/1.1

Accept: application/xml

Accept-Charset: UTF-8

x-ms-date: Wed, 12 Mar 2025 08:43:41 GMT

Authorization: SharedKey bflmpsvz:aGNra3JkdG4=

Host: bflmpsvz.blob.core.windows.net

Full documentation: https://learn.microsoft.com/en-us/rest/api/storageservices/authorize-with-shared-key

Post a reply

Topic review

Re: Amazon S3 – authorization with SharedKey (used by Azure Blobstorage)

Amazon S3 – authorization with SharedKey (used by Azure Blobstorage)

Documentation

Support

Associations

Follow Us