主页 / coding / 问题 / 79138587
Accepted
Tom Hosker
Asked: 2024-10-30 02:58:11 +0800 CST

尝试使用 ContainerClient 类时遇到顽固的 ClientAuthenticationError

  • 772

我正在尝试通过之前团队设计的管道在Azure中运行一些集成测试，但运气不佳。具体来说，管道不断遇到ClientAuthenticationError.

这是崩溃前运行的Python代码的最小工作示例：

SAS_TOKEN = os.environ["SAS_TOKEN"]

credential = AzureSasCredential(SAS_TOKEN)
account_name = "ACCOUNT_NAME"
account_url = f"https://{account_name}.blob.core.windows.net"
container_name = "CONTAINER_NAME"

blob_service_client = BlobServiceClient(account_url, credential=credential)
container = blob_service_client.get_container_client(container_name)
parquet_names = container.list_blob_names(name_starts_with="PATTERN")
list_of_parquet = list(parquet_names)

这是上述代码产生的回溯：

File "/home/vsts/work/1/s/./tests/run_tests.py", line 24, in access_datalake_locally
  list_of_parquet = list(parquet_names)
File "/opt/hostedtoolcache/Python/3.10.15/x64/lib/python3.10/site-packages/azure/core/paging.py", line 123, in __next__
  return next(self._page_iterator)
File "/opt/hostedtoolcache/Python/3.10.15/x64/lib/python3.10/site-packages/azure/core/paging.py", line 75, in __next__
  self._response = self._get_next(self.continuation_token)
File "/opt/hostedtoolcache/Python/3.10.15/x64/lib/python3.10/site-packages/azure/storage/blob/_list_blobs_helper.py", line 175, in _get_next_cb
  process_storage_error(error)
File "/opt/hostedtoolcache/Python/3.10.15/x64/lib/python3.10/site-packages/azure/storage/blob/_shared/response_handlers.py", line 186, in process_storage_error
  exec("raise error from None")   # pylint: disable=exec-used # nosec
File "<string>", line 1, in <module>
azure.core.exceptions.ClientAuthenticationError: Server failed to authenticate the request. Make sure the value of Authorization header is formed correctly including the signature.

我想到了一些可能出现问题的地方：

  1. 该parquet_names对象确实不喜欢被强制转换为list。
  2. 我在构造该对象的方式上做了一些愚蠢的事情credential。（我尝试过blob_service_client = BlobServiceClient(account_url, credential=SAS_TOKEN。遇到了完全相同的错误。）
  3. 环境变量SAS_TOKEN错误。

如果您能就如何解决这种情况提出任何建议，我将不胜感激。

1 个回答

  1. Best Answer

    azure.core.exceptions.ClientAuthenticationError：服务器无法验证请求。请确保 Authorization 标头的值格式正确，包括签名。

    上述错误是由于 SAS 令牌的生成方式或传递到 Azure Blob 存储服务的方式造成的。

    sas您可以从门户生成令牌。

    门户网站：

    存储帐户->共享访问签名->检查必填字段->生成SAS令牌。

    在此处输入图片描述

    我正在使用 Windows，因此我使用以下命令来存储sas来自门户的令牌。

    我同意 Gaurav Mantri 的评论，sas令牌的格式应该是这样的。

     $env:SAS_TOKEN="?sv=2022-11-02&ss=bfqt&srt=sco&sp=rwdlacupiytfx&se=2024-10-30T12:50:48Z&st=2024-10-30T04:50:48Z&spr=https&sig=redacted"

    代码和输出：

    import os
from azure.core.credentials import AzureSasCredential
from azure.storage.blob import BlobServiceClient

SAS_TOKEN = os.environ.get("SAS_TOKEN")
print(f"SAS_TOKEN: {SAS_TOKEN}")

account_name = "venkat326123" 
account_url = f"https://{account_name}.blob.core.windows.net"
credential = AzureSasCredential(SAS_TOKEN)

try:
    blob_service_client = BlobServiceClient(account_url, credential=credential)
    container_name = "venkat" 
    container = blob_service_client.get_container_client(container_name)
    parquet_names = container.list_blob_names(name_starts_with="Pattern")  
    list_of_parquet = list(parquet_names) 
    print(list_of_parquet)

except Exception as e:
    print(f"An error occurred: {e}")

    输出：

    SAS_TOKEN: ?sv=2022-11-02&ss=bfqt&srt=sco&sp=rwdlacupiytfx&se=2024-10-30T12:50:48Z&st=2024-10-30T04:50:48Z&spr=https&sig=redacted
['Pattern/data.parquet', 'Pattern/flights-1m.parquet', 'Pattern/mtcars.parquet']

    在此处输入图片描述

    • 1

相关问题