Accessing blobs in private container without Shared Access Secret key

Question

Is there any way to access blobs in private blob container without Shared Access Secret key ? i mean any User / Role based security or domain level security i.e only our domain should be able to access blobs in private container etc.
Actually i don't want to append SAS key after each blob url to access it, i want my container to be private and also i want to access each blob in that container without SAS key
any way currently available or planned in future release ?

Answer 1

Hi Yazeem,
> That main page loads sucessfully but the js, css, xml files which this page accesses are unable to load because SAS key is not appended to their URL automatically.
If the main page is served by a http handler and the js, css, xml files are linked using relative address, these files will also be served by the http handler too. For example, if the http handler serves a page in address
http://xxx.cloudapp.net/blobproxy/index.html and the page links to a script file using tag
<script src="myscript.js"></script>, actually the browser will use address
http://xxx.cloudapp.net/blobproxy/myscript.js to access the script file. So the solution is to create a http handler to serve all requests to address
http://xxx.cloudapp.netb/blobproxy/*.
For test purpose, I made this sample. Please add a class file BlobProxy.cs to your web role project:
using System;
using System.Web;
using Microsoft.WindowsAzure.StorageClient;
using Microsoft.WindowsAzure;
namespace WebApplication2
public class BlobProxy : IHttpHandler
// Please replace this with your blob container name.
const string blobContainerName = "files";
public bool IsReusable
get { return false; }
public void ProcessRequest(HttpContext context)
// Get the file name.
string fileName = context.Request.Path.Replace("/blobproxy/", string.Empty);
// Get the blob from blob storage.
var storageAccount = CloudStorageAccount.DevelopmentStorageAccount;
var blobStorage = storageAccount.CreateCloudBlobClient();
string blobAddress = blobContainerName + "/" + fileName;
CloudBlob blob = blobStorage.GetBlobReference(blobAddress);
// Read blob content to response.
context.Response.Clear();
try
blob.FetchAttributes();
context.Response.ContentType = blob.Properties.ContentType;
blob.DownloadToStream(context.Response.OutputStream);
catch (Exception ex)
context.Response.Write(ex.ToString());
context.Response.End();
Then please add this http handler to web.config file:
<configuration>
<system.webServer>
<handlers>
<add name="BlobProxy" verb="*" path="/blobproxy/*" type="WebApplication2.BlobProxy"/>
</handlers>
</system.webServer>
</configuration>
Before running the project, please replace blobContainerName with your own blob container that contains both html and related files. Then start debugging the Azure service project and then you can use the following address to access the page:
http://127.0.0.1:[port number]/blobproxy/[page name]
I above sample does not work for you, please let me know.
Thanks.
Wengchao Zeng
Please mark the replies as answers if they help or unmark if not.
If you have any feedback about my replies, please contact
[email protected].
Microsoft One Code Framework