Authentication Failed in REST api call to PUT Blob in Azure Storage [REST][Azure Blob]

Question

I am trying to make a PUT request to create an Azure Blob but it gives Auth Failed. I think I am making some mistakes in formulating Resource string or Headers.

Here's the code

const CryptoJS = require("crypto-js");
const request = require("request");
require("dotenv").config();
var parser = require("xml2json");

const account = process.env.ACCOUNT_NAME || "";
const key = process.env.ACCOUNT_KEY || "";
var containerName = "demo";

var strTime = new Date().toUTCString();

string_params = {
  'verb': 'PUT',
  'Content-Encoding': '',
  'Content-Language': '',
  'Content-Length': 11,
  'Content-MD5': '',
  'Content-Type': 'text/plain; charset=UTF-8',
  'Date': '',
  'If-Modified-Since': '',
  'If-Match': '',
  'If-None-Match': '',
  'If-Unmodified-Since': '',
  'Range': '',
  'CanonicalizedHeaders': 'x-ms-date:' + strTime + '\nx-ms-version:' + '2018-03-28\n',
  'CanonicalizedResource': `/${account}/${containerName}/hello`
}


   var strToSign =
  string_params["verb"] +
  "\n" +
  string_params["Content-Encoding"] +
  "\n" +
  string_params["Content-Language"] +
  "\n" +
  string_params["Content-Length"] +
  "\n" +
  string_params["Content-MD5"] +
  "\n" +
  string_params["Content-Type"] +
  "\n" +
  string_params["Date"] +
  "\n" +
  string_params["If-Modified-Since"] +
  "\n" +
  string_params["If-Match"] +
  "\n" +
  string_params["If-None-Match"] +
  "\n" +
  string_params["If-Unmodified-Since"] +
  "\n" +
  string_params["Range"] +
  "\n" +
  string_params["CanonicalizedHeaders"] +
  string_params["CanonicalizedResource"];

var secret = CryptoJS.enc.Base64.parse(key);
var hash = CryptoJS.HmacSHA256(strToSign, secret);
var hashInBase64 = CryptoJS.enc.Base64.stringify(hash);
var auth = `SharedKey ${account}:` + hashInBase64;

const options = {
  url: `https://${account}.blob.core.windows.net/${containerName}/hello`,
  headers: {
    Authorization: auth,
    "x-ms-date": strTime,
    "x-ms-version": "2018-03-28",
    "x-ms-blob-type": "BlockBlob",
    "Content-Length": "11",
    "Content-Type": "text/plain; charset=UTF-8",
  },
  body: "hello world",
};

function callback(error, response, body) {
  console.log(response.statusCode);
  console.log(response.statusMessage);
  console.log(response.headers);
}

request.put(options, callback);

While running the above code the message which I am getting is:

403
Server failed to authenticate the request. Make sure the value of Authorization header is formed correctly including the signature.

The reference links for the same can be found here: https://docs.microsoft.com/en-us/rest/api/storageservices/put-blob https://docs.microsoft.com/en-us/rest/api/storageservices/authorize-with-shared-key

Akshay Vashishtha Akshay Vashishtha · Accepted Answer · 2021-03-03T09:21:40

There is an issue with the string formation you need to add another field in the canonical header that is x-ms-blob-type your CanonicalizedHeaders should look like this:

'x-ms-blob-type:BlockBlob\nx-ms-date:' + strTime + '\nx-ms-version:' + '2017-04-17\n',

Authentication Failed in REST api call to PUT Blob in Azure Storage [REST][Azure Blob]

1 Answers