使用Azure上载到Azure Blob存储时身份验证失败。存储Blob v12.9.0

Question

我在尝试将文件上载到blob存储时遇到此错误。在本地主机上运行和在Azure函数中运行时都会出现错误。

我的连接字符串如下所示：DefaultEndpoint sProtocol=https； AcCountName=xxx； AcCountKey=xxx； Endpoint Suffix=core.windows.net

身份验证信息的格式不正确。检查授权标头的值。时间：2021 10月14日15:56:26.7659660Z状态：400（身份验证信息的格式不正确。请检查授权标头的值。）错误代码：InvalidAuthenticationInfo

但这在过去曾经有效，但最近它开始为我创建的新存储帐户抛出此错误。我的代码如下所示

    public AzureStorageService(IOptions<AzureStorageSettings> options)
    {
        _connectionString = options.Value.ConnectionString;
        _containerName = options.Value.ImageContainer;
        _sasCredential = new StorageSharedKeyCredential(options.Value.AccountName, options.Value.Key);
        _blobServiceClient = new BlobServiceClient(new BlobServiceClient(_connectionString).Uri, _sasCredential);
        _containerClient = _blobServiceClient.GetBlobContainerClient(_containerName);
    }
    public async Task<string> UploadFileAsync(IFormFile file, string location, bool publicAccess = true)
    {
        try
        {
            
            await _containerClient.CreateIfNotExistsAsync(publicAccess
                ? PublicAccessType.Blob
            : PublicAccessType.None);

            var blobClient = _containerClient.GetBlobClient(location);
            
            await using var fileStream = file.OpenReadStream();

            // throws Exception here
            await blobClient.UploadAsync(fileStream, true);

            return blobClient.Uri.ToString();
        }
        catch (Exception e)
        {
            Console.WriteLine(e);
            throw;
        }
    }
    // To be able to do this, I have to create the container client via the blobService client which was created along with the SharedStorageKeyCredential
    public Uri GetSasContainerUri()
    {
        if (_containerClient.CanGenerateSasUri)
        {
            // Create a SAS token that's valid for one hour.
            var sasBuilder = new BlobSasBuilder()
            {
                BlobContainerName = _containerClient.Name,
                Resource = "c"
            };

            sasBuilder.ExpiresOn = DateTimeOffset.UtcNow.AddHours(1);
            sasBuilder.SetPermissions(BlobContainerSasPermissions.Write);

            var sasUri = _containerClient.GenerateSasUri(sasBuilder);
            Console.WriteLine("SAS URI for blob container is: {0}", sasUri);
            Console.WriteLine();

            return sasUri;
        }
        else
        {
            Console.WriteLine(@"BlobContainerClient must be authorized with Shared Key 
                      credentials to create a service SAS.");
            return null;
        }
    }

Answer 1

请更改以下代码行：

_blobServiceClient = new BlobServiceClient(new BlobServiceClient(_connectionString).Uri, _sasCredential);

到

_blobServiceClient = new BlobServiceClient(_connectionString);

考虑到您的连接字符串具有所有必要的信息，您实际上不需要做所有您正在做的事情，您将使用BlobServiceClient（string）构造函数，该构造函数期望并接受连接字符串。

您还可以删除以下代码行：

_sasCredential = new StorageSharedKeyCredential(options.Value.AccountName, options.Value.Key);

如果在其他地方没有使用，则可以从您的配置设置中删除AccountName和Key。