从 Azure 私有存储容器中获取 Blob答案

【问题标题】：Get Blob Out of Azure Private Storage Container从 Azure 私有存储容器中获取 Blob
【发布时间】：2020-09-05 17:05:42
【问题描述】：

我正在尝试从 Azure 中的私有存储容器获取 Blob 流。我从几个地方在互联网上得到了一些帮助来提出这个功能：

/// <summary>
/// Get a blob out of storage.
/// HEAVILY Based on Code from:
/// https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-customer-provided-key
/// </summary>
/// <param name="iSA">Name of storage account</param>
/// <param name="iSA_Key">Key for the storage account</param>
/// <param name="iContainerName">Name of the container</param>
/// <param name="iBlobName">Name of Blob to Get</param>
/// <returns>
/// A stream of the Blob
/// </returns>
public Stream getBlob(
    String iSA, String iSA_Key, String iContainerName,
    String iBlobName)
{
    Uri accountUri = new Uri("https://" + iSA + ".blob.core.windows.net");

    // https://stackoverflow.com/questions/16072709/converting-string-to-byte-array-in-c-sharp
    byte[] key = Encoding.ASCII.GetBytes(iSA_Key);

    // Specify the customer-provided key on the options for the client.
    BlobClientOptions options = new BlobClientOptions()
    {
        CustomerProvidedKey = new CustomerProvidedKey(key)
    };

    // Create a client object for the Blob service, including options.
    BlobServiceClient serviceClient = new BlobServiceClient(accountUri,
        new DefaultAzureCredential(), options);

    // Create a client object for the container.
    // The container client retains the credential and client options.
    BlobContainerClient containerClient = serviceClient.GetBlobContainerClient(iContainerName);

    // Create a new block blob client object.
    // The blob client retains the credential and client options.
    BlobClient blobClient = containerClient.GetBlobClient(iBlobName);

    Azure.Response<BlobDownloadInfo> myAR = blobClient.Download();

    BlobDownloadInfo BDI = myAR.Value;
    return BDI.Content;
}

不幸的是，当我调用 blobClient.Download() 时出现以下错误：
Azure.RequestFailedException: 'This request is not authorized to perform this operation using this permission...'

有什么简单的方法可以解决吗？

AFAIK：我将正确的参数传递给函数...

【问题讨论】：

我引用的微软文章似乎是关于加密密钥的。也许与存储密钥无关......

标签： c# azure

【解决方案1】：

不确定我是否正确掌握了所有 MIME 内容；但是，正如我在评论中所述，Microsoft 示例是关于如何提供客户加密密钥。不是关于如何提供存储密钥的。我环顾四周并在 IDE 中播放，并能够创建一个 StorageSharedKeyCredential，我可以通过对原始 Microsoft 示例稍作修改将其传递给 BlobServiceClient 构造函数：

/// <summary>
/// Get a blob out of storage.
/// HEAVILY Based on Code from:
/// https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-customer-provided-key
/// </summary>
/// <param name="iSA">Name of storage account</param>
/// <param name="iSA_Key">Key for the storage account</param>
/// <param name="iContainerName">Name of the container</param>
/// <param name="iBlobName">Name of Blob to Get</param>
/// <returns>
/// A stream of the Blob
/// </returns>
public Stream getBlob(
    String iSA, String iSA_Key, String iContainerName,
    String iBlobName)
{
    Uri accountUri = new Uri("https://" + iSA + ".blob.core.windows.net");

    // Create a client object for the Blob service
    // https://docs.microsoft.com/en-us/dotnet/api/azure.storage.storagesharedkeycredential?view=azure-dotnet
    StorageSharedKeyCredential SSKC = new StorageSharedKeyCredential(iSA, iSA_Key);
    BlobServiceClient serviceClient = new BlobServiceClient(accountUri, SSKC);

    // Create a client object for the container.
    // The container client retains the credential and client options.
    BlobContainerClient containerClient = serviceClient.GetBlobContainerClient(iContainerName);

    // Create a new block blob client object.
    // The blob client retains the credential and client options.
    BlobClient blobClient = containerClient.GetBlobClient(iBlobName);

    Azure.Response<BlobDownloadInfo> myAR = blobClient.Download();

    BlobDownloadInfo BDI = myAR.Value;
    return BDI.Content;
}

我现在至少可以从存储帐户返回一个可用的文件流。

【讨论】：