CODEWITHSUNDEEP
pythonazureapitokensignature
GaJsu
GaJsu

Reputation: 113

Create Shared Access Signature in Python - Azure Api Rest Management

sorry for my english.

I'm interacting with the Azure admin rest API and I want to programmatically create a SAS token. In Azure documentation is explained for C # (I attach the code below) but I need to implement it in Python (I'm new) and I can't get the data encoding and signing process correctly, even though I've searched a lot of information and tested in some different ways. Could someone help me to "translate" this code?. Thank you very much.

c#

using System;   
using System.Text;   
using System.Globalization;   
using System.Security.Cryptography;   
  
public class Program   
{   
    public static void Main()   
    {   
        var id = "account-name";   
        var key = "account-key";   
        var expiry = DateTime.UtcNow.AddDays(10);   
        using (var encoder = new HMACSHA512(Encoding.UTF8.GetBytes(key)))   
        {   
            var dataToSign = id + "\n" + expiry.ToString("O", CultureInfo.InvariantCulture);   
            var hash = encoder.ComputeHash(Encoding.UTF8.GetBytes(dataToSign));   
            var signature = Convert.ToBase64String(hash);   
            var encodedToken = string.Format("SharedAccessSignature uid={0}&ex={1:o}&sn={2}", id, expiry, signature);   
            Console.WriteLine(encodedToken);   
        }   
    }   
}

Upvotes: 0

Views: 421

Answers (2)

han shih
han shih

Reputation: 429

Based on @GaJsu 's solution

Following is my solution:

import base64
import hmac
import hashlib
from datetime import datetime
from dateutil.relativedelta import relativedelta


identifier = 'the "Identifier" value in "management API" tab'
end_date = datetime.now() + relativedelta(months=+6)
expiry = f'{end_date.isoformat()}0Z'
key_azure = 'the key in "management API" tab, primary/secondary key'
string_to_sign = f'{identifier}\n{expiry}'
signature = (
    base64.b64encode(
        hmac.new(
            bytearray(key_azure, "utf-8"), 
            bytearray(string_to_sign,"utf-8") , 
            hashlib.sha512).digest()
    )
).decode("utf-8")
auth_sas = f"SharedAccessSignature uid={identifier}&ex={expiry}&sn={signature}"

Upvotes: 1

GaJsu
GaJsu

Reputation: 113

Finally I can create the SAS token. Here is the code for the signature:

string_to_sign = '{}{}{}'.format(id_azure,'\n',expiry)

signature = (base64.b64encode(hmac.new(bytearray(key_azure, "utf-8") , bytearray(string_to_sign,"utf-8") , hashlib.sha512).digest())).decode("utf-8").replace("\n", "")

Upvotes: 0

Related Questions