Microsoft azure tabletosign authentication

I had the opportunity to write some code and try it out. Basically when creating a CanonicalizedResource string for table resources, you don't need to include query string parameters other than the comp

querystring parameter . Basically, this is what you will need to follow from the documentation ( http://msdn.microsoft.com/library/azure/dd179428.aspx ):

2009-09-19 Common Lite and Table Format

This format supports Shared Key and Shared Key Lite for all versions of the Table service and Shared Key Lite for the 2009-09-19 version of the Blob and Queue services and 2014-02-14 of the File service. This format is identical to that used in previous versions of the storage service. Construct a CanonicalizedResource string in this format like this:

• Starting with an empty line (""), add a forward slash (/) followed by the name of the account that owns the access resource.
• Add resource encoded URI path. If the request URI refers to a resource component, add the appropriate request string. The query string must include a question mark and a comp parameter (e.g.? Comp = metadata). Other parameters should not be included in the query string.

Once you've done that, your code should work fine. Here is some sample code I wrote:

    static void QueryTable()
    {
        var requestMethod = "GET";
        var storageServiceVersion = "2014-02-14";
        var date = DateTime.UtcNow.ToString("R");
        var canonicalizedResource = string.Format("/{0}/{1}", StorageAccount, TableName);
        var stringToSign = string.Format("{0}\n\n\n{1}\n{2}", requestMethod, date, canonicalizedResource);
        var authorizationHeader = GetAuthorizationHeader(stringToSign);
        using (var httpClient = new HttpClient())
        {
            httpClient.BaseAddress = new Uri(TableEndpoint);
            httpClient.DefaultRequestHeaders.Clear();
            httpClient.DefaultRequestHeaders.Add("x-ms-date", date);
            httpClient.DefaultRequestHeaders.Add("x-ms-version", storageServiceVersion);
            httpClient.DefaultRequestHeaders.Add("Authorization", authorizationHeader);

            var result = httpClient.GetAsync(TableName + "?NextPartitionKey=1!48!VXwzMzg0MDAzOWYzMjQ0ZDgxOWZjZmM5M2EyMzNkM2IxOA--&NextRowKey=1!0!");
            result.Wait();
        }
    }

    static string GetAuthorizationHeader(string canonicalizedString)
    {
        var signature = string.Empty;
        using (var hash = new HMACSHA256(Convert.FromBase64String(StorageAccountKey)))
        {
            var data = Encoding.UTF8.GetBytes(canonicalizedString);
            signature = Convert.ToBase64String(hash.ComputeHash(data));
        }

        return string.Format(CultureInfo.InvariantCulture, "{0} {1}:{2}", "SharedKey", StorageAccount, signature);
    }

      

        
        
        
      

    

Based on the documentation here: http://msdn.microsoft.com/library/azure/dd179428.aspx (2009-09-19 Public Key Format Section # 4), you need to convert all query parameters to lowercase . So your canonicalized resource string should be:

GET\n\n\nFri, 05 Sep 2014 03:57:11 GMT\n/mystorageaccount/mytablename\nnextpartitionkey:1!20!UmFjZSBNZW1iZXJfNA--\nnextrowkey:1!12!TmFtZV85ODE- 

      

        
        
        
      

    

Try it. This should take care of the problem. Business>