Amazon S3 – authorization with SharedKey (used by Azure Blobstorage)
Would it be possible to add support for authorization using SharedKey to the S3 protocol? This is the simplest authorization method supported by Azure Blob Storage.
Authorization is done using AccountName and AccountKey/AccessKey, and the entire authorization process consists only of sending the following header:
Header
Signature is computed with this algorithm:
https://learn.microsoft.com/en-us/rest/api/storageservices/authorize-with-shared-key#constructing-the-signature-string
Sample request for AccountName=bflmpsvz:
Full documentation: https://learn.microsoft.com/en-us/rest/api/storageservices/authorize-with-shared-key
Authorization is done using AccountName and AccountKey/AccessKey, and the entire authorization process consists only of sending the following header:
Authorization: SharedKey <AccountName>:<Signature>
x-ms-date
or Date
is mandatory.
Signature is computed with this algorithm:
https://learn.microsoft.com/en-us/rest/api/storageservices/authorize-with-shared-key#constructing-the-signature-string
Sample request for AccountName=bflmpsvz:
GET /bucket?restype=container&comp=list&delimiter=%2F&maxresults=1000 HTTP/1.1 Accept: application/xml Accept-Charset: UTF-8 x-ms-date: Wed, 12 Mar 2025 08:43:41 GMT Authorization: SharedKey bflmpsvz:aGNra3JkdG4= Host: bflmpsvz.blob.core.windows.net