Azure UserDelegation 密钥异常答案

【问题标题】：Azure UserDelegation Key ExceptionAzure UserDelegation 密钥异常
【发布时间】：2021-09-29 19:07:47
【问题描述】：

我正在尝试为我的 Azure 存储 Blob 生成 UserDelegationKey，但出现异常：

无法为 XML 源类型类 org.codehaus.stax2.io.Stax2ByteArraySource（无法识别的类型）实例化 Stax 阅读器

当我在 BlobContainerAsyncClient 上调用 getUserDelegationKey 时发生此异常

我的 azure-storage-blob 库的版本是 12.12.0 下面是代码sn-p

 private void uploadNextWeekReportToAzure() {
    BlobServiceAsyncClient blobServiceAsyncClient = blobServiceClientBuilder
        .credential(new DefaultAzureCredentialBuilder().build())
        .buildAsyncClient();
    BlobContainerAsyncClient blobContainerAsyncClient = blobServiceAsyncClient.getBlobContainerAsyncClient("container name");
    BlobAsyncClient blobAsyncClient = blobContainerAsyncClient.getBlobAsyncClient("blob name");
    OffsetDateTime keyStart = OffsetDateTime.now();
    OffsetDateTime keyExpiry = OffsetDateTime.now().plusDays(7);
    blobServiceAsyncClient.getUserDelegationKey(keyStart,keyExpiry)
    .doOnError(throwable -> log.error("Exception occurred:{}",throwable.getMessage()))
    .doOnSuccess(userDelegationKey -> {
      log.info("UserDelegationKey:{}",userDelegationKey.getValue());
      String saSToken = generateSaSToken(blobAsyncClient, userDelegationKey);
      log.info("SAS TOKEN:{}",saSToken);
    })
    .subscribe();
  }

private String generateSaSToken(BlobAsyncClient blobAsyncClient,
                                  UserDelegationKey userDelegationKey) {
    BlobContainerSasPermission blobContainerSasPermission = new BlobContainerSasPermission()
        .setReadPermission(true);
    BlobServiceSasSignatureValues builder = new BlobServiceSasSignatureValues(
        OffsetDateTime.now().plusDays(1), blobContainerSasPermission)
        .setProtocol(SasProtocol.HTTPS_ONLY);
    return String
        .format("https://%s.blob.core.windows.net/%s/%s?%s", blobAsyncClient.getAccountName(),
            blobAsyncClient.getContainerName(),
            blobAsyncClient.getBlobName(),
            blobAsyncClient.generateUserDelegationSas(builder, userDelegationKey));
  }

完整的异常跟踪：

CallbackNotImplemented：java.lang.IllegalArgumentException：无法为 XML 源类型类 org.codehaus.stax2.io.Stax2ByteArraySource 实例化 Stax 阅读器（无法识别的类型）原因：java.lang.IllegalArgumentException：无法为 XML 源类型类 org.codehaus.stax2.io.Stax2ByteArraySource 实例化 Stax 阅读器（无法识别的类型）在 io.strati.libs.forklift.com.ctc.wstx.stax.WstxInputFactory.createSR(WstxInputFactory.java:770) 在 io.strati.libs.forklift.com.ctc.wstx.stax.WstxInputFactory.createXMLStreamReader(WstxInputFactory.java:345) 在 com.fasterxml.jackson.dataformat.xml.XmlFactory._createParser(XmlFactory.java:631) 在 com.fasterxml.jackson.dataformat.xml.XmlFactory._createParser(XmlFactory.java:29) 在 com.fasterxml.jackson.core.JsonFactory.createParser(JsonFactory.java:1124) 在 com.fasterxml.jackson.databind.ObjectMapper.readValue(ObjectMapper.java:3643) 在 com.azure.core.util.serializer.JacksonAdapter.deserialize(JacksonAdapter.java:281) 在 com.azure.core.implementation.serializer.HttpResponseBodyDecoder.deserializeBody(HttpResponseBodyDecoder.java:169) 在 com.azure.core.implementation.serializer.HttpResponseBodyDecoder.lambda$decodeByteArray$1(HttpResponseBodyDecoder.java:105) 在 reactor.core.publisher.MonoFlatMap$FlatMapMain.onNext(MonoFlatMap.java:125) 在 reactor.core.publisher.Operators$ScalarSubscription.request(Operators.java:2397) 在 reactor.core.publisher.MonoFlatMap$FlatMapMain.onSubscribe(MonoFlatMap.java:110) 在 reactor.core.publisher.MonoJust.subscribe(MonoJust.java:54) 在 reactor.core.publisher.MonoDefer.subscribe(MonoDefer.java:52) 在 reactor.core.publisher.InternalMonoOperator.subscribe（InternalMonoOperator.java:64）在 reactor.core.publisher.MonoDefer.subscribe(MonoDefer.java:52) 在 reactor.core.publisher.MonoCacheTime.subscribeOrReturn(MonoCacheTime.java:143) 在 reactor.core.publisher.InternalMonoOperator.subscribe（InternalMonoOperator.java:57）在 reactor.core.publisher.MonoFlatMap$FlatMapMain.onNext(MonoFlatMap.java:157) 在 reactor.core.publisher.FluxContextWrite$ContextWriteSubscriber.onNext(FluxContextWrite.java:107) 在 reactor.core.publisher.FluxDoOnEach$DoOnEachSubscriber.onNext(FluxDoOnEach.java:173) 在 reactor.core.publisher.Operators$MonoSubscriber.complete(Operators.java:1815) 在 reactor.core.publisher.MonoFlatMap$FlatMapMain.onNext(MonoFlatMap.java:151) 在 reactor.core.publisher.FluxMap$MapSubscriber.onNext(FluxMap.java:120) 在 reactor.core.publisher.FluxOnErrorResume$ResumeSubscriber.onNext(FluxOnErrorResume.java:79) 在 reactor.core.publisher.Operators$MonoSubscriber.complete(Operators.java:1815) 在 reactor.core.publisher.MonoFlatMap$FlatMapMain.onNext(MonoFlatMap.java:151) 在 reactor.core.publisher.FluxDelaySubscription$DelaySubscriptionMainSubscriber.onNext(FluxDelaySubscription.java:188) 在 reactor.core.publisher.SerializedSubscriber.onNext（SerializedSubscriber.java:99）在 reactor.core.publisher.SerializedSubscriber.onNext（SerializedSubscriber.java:99）在 reactor.core.publisher.FluxTimeout$TimeoutMainSubscriber.onNext(FluxTimeout.java:179) 在 reactor.core.publisher.Operators$MonoSubscriber.complete(Operators.java:1815) 在 reactor.core.publisher.MonoFlatMap$FlatMapMain.onNext(MonoFlatMap.java:151) 在 reactor.core.publisher.MonoIgnoreThen$ThenIgnoreMain.complete(MonoIgnoreThen.java:284) 在 reactor.core.publisher.MonoIgnoreThen$ThenIgnoreMain.onNext(MonoIgnoreThen.java:187) 在 reactor.core.publisher.FluxMapFuseable$MapFuseableSubscriber.onNext(FluxMapFuseable.java:127) 在 reactor.core.publisher.FluxMapFuseable$MapFuseableSubscriber.onNext(FluxMapFuseable.java:127) 在 reactor.core.publisher.Operators$MonoSubscriber.complete(Operators.java:1815) 在 reactor.core.publisher.MonoFlatMap$FlatMapMain.onNext(MonoFlatMap.java:151) 在 reactor.core.publisher.SerializedSubscriber.onNext（SerializedSubscriber.java:99）在 reactor.core.publisher.FluxRetryWhen$RetryWhenMainSubscriber.onNext(FluxRetryWhen.java:173) 在 reactor.core.publisher.FluxOnErrorResume$ResumeSubscriber.onNext(FluxOnErrorResume.java:79) 在 reactor.core.publisher.Operators$MonoInnerProducerBase.complete(Operators.java:2663) 在 reactor.core.publisher.MonoSingle$SingleSubscriber.onComplete(MonoSingle.java:180) 在 reactor.core.publisher.MonoFlatMapMany$FlatMapManyInner.onComplete(MonoFlatMapMany.java:260) 在 reactor.core.publisher.FluxMapFuseable$MapFuseableSubscriber.onComplete(FluxMapFuseable.java:150) 在 reactor.core.publisher.FluxMapFuseable$MapFuseableSubscriber.onComplete(FluxMapFuseable.java:150) 在 reactor.core.publisher.Operators$MonoSubscriber.complete(Operators.java:1816) 在 reactor.core.publisher.MonoCollect$CollectSubscriber.onComplete(MonoCollect.java:159) 在 reactor.core.publisher.FluxDoFinally$DoFinallySubscriber.onComplete(FluxDoFinally.java:145) 在 reactor.core.publisher.FluxHandle$HandleSubscriber.onComplete(FluxHandle.java:212) 在 reactor.core.publisher.FluxMap$MapConditionalSubscriber.onComplete(FluxMap.java:269) 在 reactor.netty.channel.FluxReceive.onInboundComplete(FluxReceive.java:401) 在 reactor.netty.channel.ChannelOperations.onInboundComplete(ChannelOperations.java:416) 在 reactor.netty.channel.ChannelOperations.terminate（ChannelOperations.java:470）在 reactor.netty.http.client.HttpClientOperations.onInboundNext(HttpClientOperations.java:685) 在 reactor.netty.channel.ChannelOperationsHandler.channelRead(ChannelOperationsHandler.java:94)

【问题讨论】：

仅供参考，我已经将 AZURE_TENANT_ID、AZURE_CLIENT_ID、AZURE_CLIENT_SECRET 设置为环境变量
更新：我通过删除杰克逊依赖冲突解决了这个问题。

标签： azure azure-blob-storage azure-storage-account

【解决方案1】：

尝试使用此代码生成用户委托密钥和 SAS

String endpoint = String.format(Locale.ROOT, "https://%s.blob.core.windows.net", "accountName");,
blobServiceClient = new BlobServiceClientBuilder().endpoint(endpoint).credential(new DefaultAzureCredentialBuilder().build()).buildClient();
keyStart = OffsetDateTime.now();
keyExpiry = OffsetDateTime.now().plusDays(7);
userDelegationKey = blobServiceClient.getUserDelegationKey(keyStart, keyExpiry);
BlobContainerSasPermission blobContainerSas = new BlobContainerSasPermission();
blobContainerSas.setReadPermission(true);
BlobServiceSasSignatureValues blobServiceSasSignatureValues = new BlobServiceSasSignatureValues(keyExpiry,blobContainerSas);
BlobContainerClient blobContainerClient=blobServiceClient.getBlobContainerClient("containerName");
if (!blobContainerClient.exists())
    blobContainerClient.create();
String sas = blobContainerClient.generateUserDelegationSas(blobServiceSasSignatureValues, userDelegationKey);

更多信息请参考link

你也可以勾选这个方法来生成密钥

获取用户委托密钥操作获取可用于签署用户委托 SAS（共享访问签名）的密钥。用户委派 SAS 使用 Azure Active Directory (Azure AD) 凭据授予对 Blob 服务中资源的访问权限。

更多信息请参考link

【讨论】：