Azure / Azure/azure-rest-api-specs
storage table 2020-08-04 ACL operation doesn't support AAD Auth
- Dominant language
- TypeSpec
- Stars
- 3.1k
- Forks
- 5.9k
- Avg merge
- 2d 22h
- Merged PRs (30d)
- 444
Description
Azure has announced that [storage table supports AAD Auth](https://docs.microsoft.com/en-us/azure/storage/tables/authorize-access-azure-active-directory). It does for CRUD on table resource, while it doesn't for the CRUD on the ACL of the table. The portal still uses the shared key authorization for ACL.
```
💢 curl -H 'User-Agent: Go/go1.17.6 (amd64-linux) go-autorest/v14.2.1 tombuildsstuff/giovanni/v0.17.0 storage/2020-08-04' -H "$token" -H 'Accept: application/json; charset=utf-8' -H 'X-Ms-Version: 2020-08-04' -X GET "https://acctestacc60jhk.table.core.windows.net/Tables('acctestst220125151027937115')"
{"odata.metadata":"https://acctestacc60jhk.table.core.windows.net/$metadata#Tables/@Element","TableName":"acctestst220125151027937115"}%
azure/storage/table_aad via 💠 default
💤 curl -H 'User-Agent: Go/go1.17.6 (amd64-linux) go-autorest/v14.2.1 tombuildsstuff/giovanni/v0.17.0 storage/2020-08-04' -H "$token" -H 'Accept: application/json; charset=utf-8' -H 'X-Ms-Version: 2020-08-04' -X GET "https://acctestacc60jhk.table.core.windows.net/acctestst220125151027937115?comp=acl"
{"odata.error":{"code":"MediaTypeNotSupported","message":{"lang":"en-US","value":"None of the provided media types are supported\nRequestId:a3e7d729-e002-005c-0cbe-11265e000000\nTime:2022-01-25T07:35:32.4082275Z"}}}%
```
Contributor guide
Research direction
Start with the Azure Storage Table ACL operation for API version 2020-08-04 and compare its authentication behavior with the table CRUD request shown in the issue. Use the linked Azure authorization documentation to determine the expected ACL request and verify that ACL operations accept AAD authentication rather than requiring shared-key authorization.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- azure
- Domain
- api, authentication, cloud
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100