How to access an Azure Blob that starts with a '/'? - azure

I have a blob that is (according to Azure) at a URL of: https://surveillanceprodblob.blob.core.windows.net/rpi-events//BAs1nRTx/00001f240_2020-05-12_10-12-06.png
The problem here is that the blob starts with "/BAs1nRTx".
Is it possible to access this object from a browser? I have tried
Removing the second slash so the url is: https://surveillanceprodblob.blob.core.windows.net/rpi-events/BAs1nRTx/00001f240_2020-05-12_10-12-06.png
Replacing the slash with %2F so the url is: https://surveillanceprodblob.blob.core.windows.net/rpi-events/%2FBAs1nRTx/00001f240_2020-05-12_10-12-06.png
Adding another slash so the url is: https://surveillanceprodblob.blob.core.windows.net/rpi-events///BAs1nRTx/00001f240_2020-05-12_10-12-06.png
None of these worked for me.
Is it possible to access this blob from a browser?
EDIT:
Here is what the portal shows

I have a file at /a/b/c/10dec.csv location same as yours.
When I tried to download https://[STORAGE_ACCOUNT].blob.core.windows.net/test-archive-container//a/b/c/10dec.csv it failed.
But, when I tried to download using https://[STORAGE_ACCOUNT].blob.core.windows.net/test-archive-container//a/b/c/10dec.csv?[BLOB SAS TOKEN] it works.
So, I think directly using BLOB URL you cannot download from the Browser, you always need to authenticate. That's why you will need to provide SAS TOKEN.
Please Generate SAS as shown below:
And use that URL in Browser, it will work.
Please let me know if you need more information.

Related

How to access the blob storage file using link created by a logic app workflow. create SAS URL by path URL not working

I am not able to use the generated link from this action to access the file I have uploaded to the blob storage.
I am able to only access the URL generated from the UI only. When I match the two URLs I can notice that the one generated from the logic app is missing half of the part.
After reproducing issue from my side got expected as results.
By removing Web Url from the body of send email action i got the blob storage file using SAS link .
Web url does not include total path for the file. Hence use shared access signature which will include url of the file and signature also
Created logicapp workflow as shown below
In Get blob content action blob is taken as shown in below
In Create SAS URI by path action blob path should be List of files path .
In send an email action i have taken only Shared access signature and then i get complete URL to mail and i can download file from using that link as shown in below outlook images.

DocuSign error "The redirect URI is not registered properly with DocuSign" with proper & valid redirect uri registered in application

We have docusign integrated in our platform & all of a sudden we are getting error from DocuSign
"The redirect URI is not registered properly with DocuSign".
We have proper & valid redirect uri configured in the application.
Please Note that exsisting setup is working fine, for newer apps or newer accounts, it is throwing the above-mentioned error Here is the screenshot of the same .
The redirect uri is valid as it's working for other app.
Has something changed at DocuSign end recently?
Update:
As asked, Please find the redirect uri screenshots below (I've masked the host url),
DocuSign Redirect URI configuration - Please note that both URI are same with difference in host url.
Complete Oauth request url
Redirect window
Make sure to compare the URL you see in the browser to the one in the IK. Make sure it's the same IK, in the same env (production vs. developer env is different!). Even a tiny difference between the two URLs will fail this. You need to URL decode the redirecUri from the main URL and then use that by copy/pasting it into the apps and keys page.
Then wait about 1-2 minutes before trying again.
Edit: confirmed that the URLs DO NOT MATCH, and that is the issue. The URLs must match 100% for this to work
Redirect URIs are specific to each integration key (application) and do not get copied over if you make a new integration key. Based on your description it sounds like you have created a new integration key. I would recommend visiting the Apps and Keys page on your DocuSign Admin settings and adding the redirect URI to the new integration key. Here is a support centre article which outlines this including the steps for how to add a new redirect URI
Nothing in this area has changed on DocuSign AFAIK.
Check that the redirect URI specified in your initial OAuth redirect is the exact same as the URI you set in the Integration Key's settings page.
The redirectURI cannot include any dynamic data including query parameters, etc.
You can use the settings tool's Apps and Keys page to delete and then re-add the RedirectURI. Check carefully that it doesn't include any trailing spaces, etc.
After you've made a change via the Apps and Keys pages, wait 5 minutes before attempting to use the Integration Key.
Ensure that you're using the right Apps and Keys page. If your app has passed go-live then:
For the production systems, use the apps and keys page from docusign.net
For the developer (demo) system, use the apps and keys page from demo.docusign.net

How to reach jpeg files in stored in Google Cloud Storage?

I deployed the web application. It is successful but my image files doesn't appear on web page.
I receive No such file or directory: 'gs://imajo/media/predict_resim.jpg' error.
Here is the code I typed. I typed it on google cloud. how can I solve this in an easy python way?
htp7='gs://imajo/media/planner_resim.jpg'
image7 = Image.open('htp7')
and this is the deployed app. (It is About anaylisis page)
https://easy-inventory-planner.ew.r.appspot.com/
You tried to access Google Storage file using Google Storage Protocol link which is private and you need authentication to get that file.
Python Google Storage Client
In order to get file on Google Storage with that link you can use Python Google Storage Client, more info and examples on how to authenticate and download file can be found here:
https://cloud.google.com/storage/docs/reference/libraries#cloud-console
Making File Public
Other option is to make your file public, that way you will get publicly accessible link (http) to your file, and then your solution will work.
Find your file in Google Cloud Storage Browser (https://console.cloud.google.com/storage/browse)
Click on three dots on the far right side of your file
Choose edit permissions
Add entry with Public, allUsers and Read
Once you Save, you will have Copy URL in the Public access column on file listing.
This link is publicly available.
Paste https link to your program and it will work. This link is https:// instead of gs:// which is only accessible through client. It looks something like this: https://storage.googleapis.com/imajo/media/predict_resim.jpg

Azure CDN URL Rewrite Rule with Token authentication and Blob storage SAS

I'm attempting to setup our CDN without weakening our security. So we're using the premium CDN from Azure using Token authentication, which seems to work, we're able to generate an encrypted token which the CDN is able to decrypt.
However, after authentication we want the CDN to rewrite the URL to contain a SAS signature for our blob storage. We've generated a working SAS signature, but we're having trouble setting up the URL rewrite rule.
We query the CDN with a URL with the following format:
endpoint.azureedge.net/blob path?encrypted token
As far as I've understood we'll need to rewrite the URL using the rules to apply the SAS signature for the blob-like so:
endpoint.azureedge.net/blob path?SAS signature
This is probably extremely simple however I'm a bit out of my comfort zone and the CDN rules seem like a black box where I have no idea what's wrong, I just get a 403 error back.
Hope someone can help.
(edit added screenshot of current rule)
Have you seen the documentation on setting this up: https://learn.microsoft.com/en-us/azure/cdn/cdn-sas-storage-support#option-2-hidden-cdn-security-token-using-rewrite-rule
Here is the rule they have:
I think you just need to play around a little with your regex rule. Azure CDN uses Perl compatible regular expressions: http://pcre.org/ . You can test using this tool: https://regex101.com/ .
I did find a forum post related to struggles with the expression and they look to have found a solution: https://social.msdn.microsoft.com/Forums/azure/en-US/0c26c276-163c-428c-a53d-eac998291755/verizon-cdn-premium-sas-blob-storage-rewrite?forum=azurecdn
destination should be: $1?sv=
don't forget $1, which represents the first value in source
document: https://learn.microsoft.com/en-us/azure/cdn/cdn-rules-engine-reference-features#url-rewrite

prevent unathorized users to access public blob in WA

I have created a "public Blob" container. Our application can add files to this container. The problem is everyone can see the files (PDF files) if they know the url and browe to them.
What can we do to prevent unauthorized users to see these files? Thanks
If you want to prevent unauthorized access you will need to change the container back to private. That way, only people with a valid account/key combination or people with a valid SAS can access the blobs.
The SAS can be used in different ways: by using it in the SDK (if you want your client applications to use it) or by appending it to the URL of the blob.
Check out Maarten's blog post about SAS to get started: Storing user uploads in Windows Azure blob storage
Access Control for Azure Blobs:
http://convective.wordpress.com/2010/01/20/access-control-for-azure-blobs/

Resources