List blobs or download file from Azure blob storage.

download-azure-blob-file.sh

#!/bin/bash

# Download the file in an Azure storage container.

echo "usage: ${0##*/} <user-name> <user-key> <container-name> <blob-name>"

storage_account="$1"
access_key="$2"
container_name="$3"
blob_name="$4"

blob_store_url="blob.core.windows.net"
authorization="SharedKey"

request_method="GET"
request_date=$(TZ=GMT date "+%a, %d %h %Y %H:%M:%S %Z")
storage_service_version="2014-02-14"

# HTTP Request headers
x_ms_date_h="x-ms-date:$request_date"
x_ms_version_h="x-ms-version:$storage_service_version"

# Build the signature string
canonicalized_headers="${x_ms_date_h}\n${x_ms_version_h}"
canonicalized_resource="/${storage_account}/${container_name}/${blob_name}"

string_to_sign="${request_method}\n\n\n\n\n\n\n\n\n\n\n\n${canonicalized_headers}\n${canonicalized_resource}"

# Decode the Base64 encoded access key, convert to Hex.
decoded_hex_key="$(echo -n $access_key | base64 -d -w0 | xxd -p -c256)"

# Create the HMAC signature for the Authorization header
signature=$(printf "$string_to_sign" | openssl dgst -sha256 -mac HMAC -macopt \
"hexkey:$decoded_hex_key" -binary | base64 -w0)

authorization_header="Authorization: $authorization $storage_account:$signature"

curl -o $blob_name \
	-H "$x_ms_date_h" \
	-H "$x_ms_version_h" \
	-H "$authorization_header" \
	"https://${storage_account}.${blob_store_url}/${container_name}/${blob_name}"

list-azure-blobs.sh

#!/bin/bash

# List the blobs in an Azure storage container.

echo "usage: ${0##*/} <user-name> <user-key> <container-name>"

storage_account="$1"
access_key="$2"
container_name="$3"

blob_store_url="blob.core.windows.net"
authorization="SharedKey"

request_method="GET"
request_date=$(TZ=GMT date "+%a, %d %h %Y %H:%M:%S GMT")
storage_service_version="2014-02-14"

# HTTP Request headers
x_ms_date_h="x-ms-date:$request_date"
x_ms_version_h="x-ms-version:$storage_service_version"

# Build the signature string
canonicalized_headers="${x_ms_date_h}\n${x_ms_version_h}"
canonicalized_resource="/${storage_account}/${container_name}"

string_to_sign="${request_method}\n\n\n\n\n\n\n\n\n\n\n\n${canonicalized_headers}\n${canonicalized_resource}\ncomp:list\nrestype:container"

# Decode the Base64 encoded access key, convert to Hex.
decoded_hex_key="$(echo -n $access_key | base64 -d -w0 | xxd -p -c256)"

# Create the HMAC signature for the Authorization header
signature=$(printf "$string_to_sign" | openssl dgst -sha256 -mac HMAC -macopt \
"hexkey:$decoded_hex_key" -binary | base64 -w0)

authorization_header="Authorization: $authorization $storage_account:$signature"

curl \
	-H "$x_ms_date_h" \
	-H "$x_ms_version_h" \
	-H "$authorization_header" \
	"https://${storage_account}.${blob_store_url}/${container_name}?restype=container&comp=list"