Blob SAS Token

sas.cs

public static string GetBlobReadonlySasToken(CloudStorageAccount account)
{
    var now = DateTimeOffset.Now;

    // to address emulator running on http
    var nonHttps = account.BlobEndpoint.ToString().StartsWith("http:");

    var sas = account.GetSharedAccessSignature(new SharedAccessAccountPolicy
    {
        Services = SharedAccessAccountServices.Blob,
        Permissions = SharedAccessAccountPermissions.List | SharedAccessAccountPermissions.Read,
        ResourceTypes = SharedAccessAccountResourceTypes.Container | SharedAccessAccountResourceTypes.Object | SharedAccessAccountResourceTypes.Service,
        Protocols = nonHttps ? SharedAccessProtocol.HttpsOrHttp : SharedAccessProtocol.HttpsOnly,
        SharedAccessStartTime = now.AddMinutes(-15),
        SharedAccessExpiryTime = now.AddMinutes(30),
    });

    return account.BlobEndpoint + sas;
}