Post a reply

Options
Add an Attachment

If you do not want to add an Attachment to your Post, please leave the Fields blank.

(maximum 10 MB; please compress large files; only common media, archive, text and programming file formats are allowed)

Options

Topic review

Filip.Jirsak

Amazon S3 – authorization with SharedKey (used by Azure Blobstorage)

Would it be possible to add support for authorization using SharedKey to the S3 protocol? This is the simplest authorization method supported by Azure Blob Storage.

Authorization is done using AccountName and AccountKey/AccessKey, and the entire authorization process consists only of sending the following header:
Authorization: SharedKey <AccountName>:<Signature>

Header x-ms-date or Date is mandatory.

Signature is computed with this algorithm:
https://learn.microsoft.com/en-us/rest/api/storageservices/authorize-with-shared-key#constructing-the-signature-string

Sample request for AccountName=bflmpsvz:
GET /bucket?restype=container&comp=list&delimiter=%2F&maxresults=1000 HTTP/1.1

Accept: application/xml
Accept-Charset: UTF-8
x-ms-date: Wed, 12 Mar 2025 08:43:41 GMT
Authorization: SharedKey bflmpsvz:aGNra3JkdG4=
Host: bflmpsvz.blob.core.windows.net

Full documentation: https://learn.microsoft.com/en-us/rest/api/storageservices/authorize-with-shared-key