Azure UserDelegation 密钥异常

Question

我正在尝试为我的 Azure 存储 Blob 生成 UserDelegationKey，但出现异常：

无法为 XML 源类型类 org.codehaus.stax2.io.Stax2ByteArraySource（无法识别的类型）实例化 Stax 读取器

当我在 BlobContainerAsyncClient 上调用 getUserDelegationKey 时发生此异常

我的 azure-storage-blob 库的版本是 12.12.0 下面是代码片段

 private void uploadNextWeekReportToAzure() {
    BlobServiceAsyncClient blobServiceAsyncClient = blobServiceClientBuilder
        .credential(new DefaultAzureCredentialBuilder().build())
        .buildAsyncClient();
    BlobContainerAsyncClient blobContainerAsyncClient = blobServiceAsyncClient.getBlobContainerAsyncClient("container name");
    BlobAsyncClient blobAsyncClient = blobContainerAsyncClient.getBlobAsyncClient("blob name");
    OffsetDateTime keyStart = OffsetDateTime.now();
    OffsetDateTime keyExpiry = OffsetDateTime.now().plusDays(7);
    blobServiceAsyncClient.getUserDelegationKey(keyStart,keyExpiry)
    .doOnError(throwable -> log.error("Exception occurred:{}",throwable.getMessage()))
    .doOnSuccess(userDelegationKey -> {
      log.info("UserDelegationKey:{}",userDelegationKey.getValue());
      String saSToken = generateSaSToken(blobAsyncClient, userDelegationKey);
      log.info("SAS TOKEN:{}",saSToken);
    })
    .subscribe();
  }

private String generateSaSToken(BlobAsyncClient blobAsyncClient,
                                  UserDelegationKey userDelegationKey) {
    BlobContainerSasPermission blobContainerSasPermission = new BlobContainerSasPermission()
        .setReadPermission(true);
    BlobServiceSasSignatureValues builder = new BlobServiceSasSignatureValues(
        OffsetDateTime.now().plusDays(1), blobContainerSasPermission)
        .setProtocol(SasProtocol.HTTPS_ONLY);
    return String
        .format("https://%s.blob.core.windows.net/%s/%s?%s", blobAsyncClient.getAccountName(),
            blobAsyncClient.getContainerName(),
            blobAsyncClient.getBlobName(),
            blobAsyncClient.generateUserDelegationSas(builder, userDelegationKey));
  }

完整的异常跟踪：

CallbackNotImplemented：java.lang.IllegalArgumentException：无法为 XML 源类型类 org.codehaus.stax2.io.Stax2ByteArraySource（无法识别的类型）实例化 Stax 读取器位于 io.strati.libs.forklift.com.ctc.wstx.stax.WstxInputFactory.createSR(WstxInputFactory.java:770) 的 org.codehaus.stax2.io.Stax2ByteArraySource（无法识别的类型），位于 io.strati.libs.forklift.com .ctc.wstx.stax.WstxInputFactory.createXMLStreamReader(WstxInputFactory.java:345) 在 com.fasterxml.jackson.dataformat.xml.XmlFactory._createParser(XmlFactory.java:631) 在 com.fasterxml.jackson.dataformat.xml.XmlFactory ._createParser(XmlFactory.java:29) 在 com.fasterxml.jackson.core.JsonFactory.createParser(JsonFactory.java:1124) 在 com.fasterxml.jackson.databind.ObjectMapper.readValue(ObjectMapper.java:3643) 在 com。 azure.core.util.serializer.JacksonAdapter.deserialize(JacksonAdapter.java:281) 在 com.azure.core.implemen tation.serializer.HttpResponseBodyDecoder.deserializeBody(HttpResponseBodyDecoder.java:169) 在 com.azure.core.implementation.serializer.HttpResponseBodyDecoder.lambda$decodeByteArray$1(HttpResponseBodyDecoder.java:105) 在 reactor.core.publisher.NextMonoFlatonMapMainMapMainMap (MonoFlatMap.java:125) at reactor.core.publisher.Operators$ScalarSubscription.request(Operators.java:2397) at reactor.core.publisher.MonoFlatMap$FlatMapMain.onSubscribe(MonoFlatMap.java:110) at reactor.core。 Publisher.MonoJust.subscribe(MonoJust.java:54) at reactor.core.publisher.MonoDefer.subscribe(MonoDefer.java:52) at reactor.core.publisher.InternalMonoOperator.subscribe(InternalMonoOperator.java:64) at reactor.core .publisher.MonoDefer.subscribe(MonoDefer.java:52) at reactor.core.publisher.MonoCacheTime.subscribeOrReturn(MonoCacheTime.java:143) at reactor.core.publisher.InternalMonoOperator.subscribe(InternalMonoOperator.java:57) at reactor。 core.publisher.MonoFlatMap$FlatMapMain.onNext(MonoFlatMap.java:157) 在 rea ctor.core.publisher.FluxContextWrite$ContextWriteSubscriber.onNext(FluxContextWrite.java:107) at reactor.core.publisher.FluxDoOnEach$DoOnEachSubscriber.onNext(FluxDoOnEach.java:173) at reactor.core.publisher.Operators$MonoSubscriber.complete( Operators.java:1815) at reactor.core.publisher.MonoFlatMap$FlatMapMain.onNext(MonoFlatMap.java:151) at reactor.core.publisher.FluxMap$MapSubscriber.onNext(FluxMap.java:120) at reactor.core.publisher .FluxOnErrorResume$ResumeSubscriber.onNext(FluxOnErrorResume.java:79) at reactor.core.publisher.Operators$MonoSubscriber.complete(Operators.java:1815) at reactor.core.publisher.MonoFlatMap$FlatMapMain.onNext(MonoFlatMap.java:151) ) at reactor.core.publisher.FluxDelaySubscription$DelaySubscriptionMainSubscriber.onNext(FluxDelaySubscription.java:188) at reactor.core.publisher.SerializedSubscriber.onNext(SerializedSubscriber.java:99) at reactor.core.publisher.SerializedSubscriber.onNext(SerializedSubscriber. java:99) 在 reactor.core.publisher.FluxTimeout$Timeo utMainSubscriber.onNext(FluxTimeout.java:179) at reactor.core.publisher.Operators$MonoSubscriber.complete(Operators.java:1815) at reactor.core.publisher.MonoFlatMap$FlatMapMain.onNext(MonoFlatMap.java:151) at reactor .core.publisher.MonoIgnoreThen$ThenIgnoreMain.complete(MonoIgnoreThen.java:284) at reactor.core.publisher.MonoIgnoreThen$ThenIgnoreMain.onNext(MonoIgnoreThen.java:187) at reactor.core.publisher.FluxMapFuseableNextFuseable$MapFluxMapFuseableNextFuseable .java:127) at reactor.core.publisher.FluxMapFuseable$MapFuseableSubscriber.onNext(FluxMapFuseable.java:127) at reactor.core.publisher.Operators$MonoSubscriber.complete(Operators.java:1815) at reactor.core.publisher。 MonoFlatMap$FlatMapMain.onNext(MonoFlatMap.java:151) at reactor.core.publisher.SerializedSubscriber.onNext(SerializedSubscriber.java:99) at reactor.core.publisher.FluxRetryWhen$RetryWhenMainSubscriber.onNext(FluxRetryWhen.java:173) at reactor .core.publisher.FluxOnErrorResume$ResumeSubscriber.onNext(FluxOnErrorResu me.java:79) at reactor.core.publisher.Operators$MonoInnerProducerBase.complete(Operators.java:2663) at reactor.core.publisher.MonoSingle$SingleSubscriber.onComplete(MonoSingle.java:180) at reactor.core.publisher ... ) at reactor.core.publisher.Operators$MonoSubscriber.complete(Operators.java:1816) at reactor.core.publisher.MonoCollect$CollectSubscriber.onComplete(MonoCollect.java:159) at reactor.core.publisher.FluxDoFinally$DoFinallySubscriber。 onComplete(FluxDoFinally.java:145) at reactor.core.publisher.FluxHandle$HandleSubscriber.onComplete(FluxHandle.java:212) at reactor.core.publisher.FluxMap$MapConditionalSubscriber.onComplete(FluxMap.java:269) at reactor.netty .channel.FluxReceive.onInboundComplete(FluxReceive.java:401) 在 reactor.netty.channel.ChannelOperations.onInboundComplete(ChannelOperations.java:416) at reactor.netty.channel.ChannelOperations.terminate(ChannelOperations.java:470) at reactor.netty.http.client.HttpClientOperations.onInboundNext(HttpClientOperations.java) :685) 在 reactor.netty.channel.ChannelOperationsHandler.channelRead(ChannelOperationsHandler.java:94)

Answer 1

尝试使用此代码生成用户委托密钥和 SAS

String endpoint = String.format(Locale.ROOT, "https://%s.blob.core.windows.net", "accountName");,
blobServiceClient = new BlobServiceClientBuilder().endpoint(endpoint).credential(new DefaultAzureCredentialBuilder().build()).buildClient();
keyStart = OffsetDateTime.now();
keyExpiry = OffsetDateTime.now().plusDays(7);
userDelegationKey = blobServiceClient.getUserDelegationKey(keyStart, keyExpiry);
BlobContainerSasPermission blobContainerSas = new BlobContainerSasPermission();
blobContainerSas.setReadPermission(true);
BlobServiceSasSignatureValues blobServiceSasSignatureValues = new BlobServiceSasSignatureValues(keyExpiry,blobContainerSas);
BlobContainerClient blobContainerClient=blobServiceClient.getBlobContainerClient("containerName");
if (!blobContainerClient.exists())
    blobContainerClient.create();
String sas = blobContainerClient.generateUserDelegationSas(blobServiceSasSignatureValues, userDelegationKey);

有关更多信息，请参阅此链接

您也可以检查此方法以生成密钥

获取用户委托密钥操作获取可用于签署用户委托 SAS（共享访问签名）的密钥。 用户委派 SAS 使用 Azure Active Directory (Azure AD) 凭据授予对 Blob 服务中资源的访问权限。

有关更多信息，请参阅此链接