Azure / Azure/azure-rest-api-specs

storage table 2020-08-04 ACL operation doesn't support AAD Auth

Open
#17,485 6 comments 0 reactions 0 assignees View on GitHub
Service Attention Storage
Dominant language
TypeSpec
Stars
3.1k
Forks
5.9k
Avg merge
2d 22h
Merged PRs (30d)
444

Description

Azure has announced that [storage table supports AAD Auth](https://docs.microsoft.com/en-us/azure/storage/tables/authorize-access-azure-active-directory). It does for CRUD on table resource, while it doesn't for the CRUD on the ACL of the table. The portal still uses the shared key authorization for ACL.

```
💢 curl -H 'User-Agent: Go/go1.17.6 (amd64-linux) go-autorest/v14.2.1 tombuildsstuff/giovanni/v0.17.0 storage/2020-08-04' -H "$token" -H 'Accept: application/json; charset=utf-8' -H 'X-Ms-Version: 2020-08-04' -X GET "https://acctestacc60jhk.table.core.windows.net/Tables('acctestst220125151027937115')"
{"odata.metadata":"https://acctestacc60jhk.table.core.windows.net/$metadata#Tables/@Element","TableName":"acctestst220125151027937115"}%

azure/storage/table_aad via 💠 default
💤 curl -H 'User-Agent: Go/go1.17.6 (amd64-linux) go-autorest/v14.2.1 tombuildsstuff/giovanni/v0.17.0 storage/2020-08-04' -H "$token" -H 'Accept: application/json; charset=utf-8' -H 'X-Ms-Version: 2020-08-04' -X GET "https://acctestacc60jhk.table.core.windows.net/acctestst220125151027937115?comp=acl"
{"odata.error":{"code":"MediaTypeNotSupported","message":{"lang":"en-US","value":"None of the provided media types are supported\nRequestId:a3e7d729-e002-005c-0cbe-11265e000000\nTime:2022-01-25T07:35:32.4082275Z"}}}%
```

Contributor guide

Open the contributing guide

Research direction

Start with the Azure Storage Table ACL operation for API version 2020-08-04 and compare its authentication behavior with the table CRUD request shown in the issue. Use the linked Azure authorization documentation to determine the expected ACL request and verify that ACL operations accept AAD authentication rather than requiring shared-key authorization.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure
Domain
api, authentication, cloud
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.