如何通过C＃获取Azure列表存储？

Question

我需要订阅ID和身份验证令牌中的Azure存储列表。 我正在按照参考进行代码-`

https://msdn.microsoft.com/zh-cn/library/azure/ee460787.aspx?f=255&MSPPError=-2147217396

但是我无法获取该数据，因此，我仅获得代码401 Unauthorized access

我已经按照下面的方法在c＃中尝试了代码-

获取授权令牌-

private static string GetAuthorizationToken()
        {
            ClientCredential cc = new ClientCredential(ClientId, ServicePrincipalPassword);
            var context = new AuthenticationContext("https://login.windows.net/" + AzureTenantId);
            var result = context.AcquireTokenAsync("https://management.azure.com/", cc);
            if (result == null)
            {
                throw new InvalidOperationException("Failed to obtain the JWT token");
            }

            return result.Result.AccessToken;
        }

接着

AuthToken = GetAuthorizationToken();
                TokenCredentials = new TokenCredentials(AuthToken);

                HttpWebRequest request = (HttpWebRequest)HttpWebRequest.Create("https://management.core.windows.net/<My Subscription ID>/services/storageservices");
                request.Headers.Add(HttpRequestHeader.Authorization, "Bearer " + AuthToken);
                request.ContentType = "application/json";
                request.Method = "GET";
                //request.Headers["Authorization"] =  "Bearer " + AuthToken; // Also tried this 
                request.Headers["x-ms-version"] =  "2016-05-31";//

                //https://management.core.windows.net/<subscription-id>/services/storageservices
                //header - "x-ms-version"

                HttpWebResponse response = null;
                try
                {
                    response = (HttpWebResponse)request.GetResponse();                    
                }
                catch (WebException ex)
                {
                    //ex.Message;
                }

请提出从订阅ID和身份验证令牌获取存储帐户列表的任何解决方案。 如果您还有其他更好的解决方案，那么请获取存储列表，然后再提出建议。

Answer 1

我使用以下功能创建类似的请求：

private static async Task<HttpWebRequest> createHttpRequestWithToken(Uri uri)
{
    HttpWebRequest newRequest = (HttpWebRequest)HttpWebRequest.Create(uri);
    string clientId = ConfigurationManager.AppSettings["ClientId"]);
    string clientSecret = ConfigurationManager.AppSettings["ClientSecret"]);
    ClientCredential creds = new ClientCredential(clientId, clientSecret);
    AuthenticationContext authContext = new AuthenticationContext(string.Format("https://login.microsoftonline.com/{0}/", ConfigurationManager.AppSettings["OrganizationId"]));
    AuthenticationResult authResult = await authContext.AcquireTokenAsync("https://management.core.windows.net/", creds);
    newRequest.Headers.Add(HttpRequestHeader.Authorization, "Bearer " + authResult.AccessToken);     
    return newRequest;
}

并创建如下请求：

HttpWebRequest request = createHttpRequestWithToken(uri).Result;

此外，需要授予Windows Azure Service Management API访问资源的权限。 这可以在AD Service Principal中的Configure选项卡中完成。

Answer 2

要列出预订下所有可用的存储帐户 ，您可以尝试使用：

GET /subscriptions/{subscriptionId}/providers/Microsoft.Storage/storageAccounts?api-version=2016-01-01

以下示例代码对我而言效果很好，请参考它。

string tenantId = "xxxx";
string clientId = "xxxx";
string clientSecret = "xxxx";
string subscriptionid = "xxxx";

string authContextURL = "https://login.windows.net/" + tenantId;
var authenticationContext = new AuthenticationContext(authContextURL);
var credential = new ClientCredential(clientId, clientSecret);
var result = await authenticationContext.AcquireTokenAsync(resource: "https://management.azure.com/", clientCredential: credential);

if (result == null)
{
    throw new InvalidOperationException("Failed to obtain the JWT token");
}

string token = result.AccessToken;
HttpWebRequest request = (HttpWebRequest)HttpWebRequest.Create(string.Format("https://management.azure.com/subscriptions/{0}/providers/Microsoft.Storage/storageAccounts?api-version=2016-01-01", subscriptionid));

request.Method = "GET";
request.Headers["Authorization"] =  "Bearer " + token; 


HttpWebResponse response = null;
try
{
    response = (HttpWebResponse)request.GetResponse();
}
catch (WebException ex)
{
    //ex.Message;
}

提琴手的回应看起来像这样。

此外，请确保是否将应用程序分配给角色 ，如果未将应用程序分配给角色，则会出现403错误。