Azure 服务总线发送消息 - 无效的授权令牌签名

Question

我有以下 powershell 代码来向 Azure 服务总线队列发送消息。

param
(
    [Parameter(Mandatory = $true)][string] $ResourceGroupName,
    [Parameter(Mandatory = $true)][string] $NamespaceName,
    [Parameter(Mandatory = $true)][string] $QueueName,
    [Parameter(Mandatory = $false)][string] $PolicyName = 'SASPolicy'
)      
$test_msg = [PSCustomObject] @{ "test" = "This is a test message" } | ConvertTo-Json -Compress
$authorizationId = (Get-AzServiceBusAuthorizationRule -ResourceGroupName $ResourceGroupName -NamespaceName $NamespaceName -QueueName $QueueName).Id
$token = (New-AzServiceBusAuthorizationRuleSASToken -AuthorizationRuleId $authorizationId  -KeyType PrimaryKey -ExpiryTime Get-Date.AddHours(1.0)).SharedAccessSignature 

$auth_headers = @{ "Authorization" = "SharedAccessSignature $token"; "Content-Type" = "application/json" }
$uri = "https://$NamespaceName.servicebus.windows.net/$QueueName/messages"
$http_statuscode = Invoke-WebRequest -Uri $uri -Headers $auth_headers -Method Post -Body $test_msg
Write-Host "Message sent successfully: $http_statuscode.StatusCode"

我在调用网络请求时收到以下错误

响应状态码不表示成功：401（SubCode=40103： |无效的授权令牌签名）。

Answer 1

我在我的环境中尝试并得到以下结果：

最初，当我尝试使用您的代码时，我遇到了同样的错误：

当您在授权标头中传递错误的 SAS 令牌时，会出现上述错误。

您可以按照此 MS-DOCS 并使用以下 PowerShell 代码将消息发送到 Azure 服务总线队列。

代码：

$QueueName='yourqueuename'
$NamespaceName='Yournamespacename'
$Access_Policy_Name="your-access policyname"
$Access_Policy_Key="your-access-policy key"

$test_msg = [PSCustomObject] @{ "test" = "This is a test message" } | ConvertTo-Json -Compress 

$uri = "https://$NamespaceName.servicebus.windows.net/$QueueName"   
$Expires=([DateTimeOffset]::Now.ToUnixTimeSeconds())+300
$SignatureString=[System.Web.HttpUtility]::UrlEncode($URI)+ "`n" + [string]$Expires
$HMAC = New-Object System.Security.Cryptography.HMACSHA256
$HMAC.key = [Text.Encoding]::ASCII.GetBytes($Access_Policy_Key)
$Signature = $HMAC.ComputeHash([Text.Encoding]::ASCII.GetBytes($SignatureString))
$Signature = [Convert]::ToBase64String($Signature)
$SASToken = "SharedAccessSignature sr=" + [System.Web.HttpUtility]::UrlEncode($URI) + "&sig=" + [System.Web.HttpUtility]::UrlEncode($Signature) + "&se=" + $Expires + "&skn=" + $Access_Policy_Name


$auth_headers = @{ "Authorization" = "$SASToken"; "Content-Type" = "application/json ";}
$uri = "https://$NamespaceName.servicebus.windows.net/$QueueName/messages"
$http_statuscode = Invoke-WebRequest -Uri $uri -Headers $auth_headers -Method Post -Body $test_msg
Write-Host "Message sent successfully"

输出：

Message sent successfully

传送门：

参考：

使用共享访问签名的 Azure 服务总线访问控制 - Azure 服务总线 |微软学习