Error: Server failed to authenticate the request. Make sure the value of Authorization header is formed correctly including the signature

I’m doing tests using MSI to access / manipulate a storage account. I’m getting a token using the following code:

        static string GetUserOAuthToken(string tenantId, string applicationId, string clientSecret)
        {
            const string ResourceId = "https://storage.azure.com/";
            const string AuthInstance = "https://login.microsoftonline.com/{0}/";

            string authority = string.Format(CultureInfo.InvariantCulture, AuthInstance, tenantId);
            AuthenticationContext authContext = new AuthenticationContext(authority);

            var clientCred = new ClientCredential(applicationId, clientSecret);
            AuthenticationResult result = authContext.AcquireTokenAsync(
                                                ResourceId,
                                                clientCred
                                                ).Result;
            return result.AccessToken;
        }

with the token, I’m trying to upload a blob, but getting the following error:

“Server failed to authenticate the request. Make sure the value of Authorization header is formed correctly including the signature”

PS: I don’t have Application Insights, so it’s not related with #416

An here’s the code to access the blob:

TokenCredential tokenCredential = new TokenCredential(token);
StorageCredentials storageCredentials = new StorageCredentials(tokenCredential);
CloudStorageAccount cloudStorageAccount = new CloudStorageAccount(storageCredentials, "SECRET", "core.windows.net", useHttps: true);

CloudBlobClient blobClient = cloudStorageAccount.CreateCloudBlobClient();
blobClient.AuthenticationScheme = AuthenticationScheme.Token;

CloudBlobContainer blobContainer = blobClient.GetContainerReference("test");

var blob = blobContainer.GetBlockBlobReference("asdasdasdasd.txt");
blob.UploadTextAsync("oi").Wait();

Using the version 9.3.3 of WindowsAzure.Storage lib

[seanmcc-msft]

Here’s an example of using an Oauth token:

        static string GetUserOAuthToken()
        {
            var activeDirectoryAuthEndpoint = "https://login.windows.net";
            var activeDirectoryTenantId = "activeDirectoryTenantId";
            var activeDirectoryApplicationId = "activeDirectoryApplicationId ";
            var activeDirectoryApplicationSecret = "activeDirectoryApplicationSecret";

            var authority = String.Format(activeDirectoryAuthEndpoint + "/" + activeDirectoryTenantId);

            var credential = new ClientCredential(activeDirectoryApplicationId, activeDirectoryApplicationSecret);

            var context = new AuthenticationContext(authority);
            var result = context.AcquireTokenAsync("https://storage.azure.com", credential).Result;

            return result.AccessToken;
        }
        static void Main()
        {
            var accessToken = GetUserOAuthToken();
            var tokenCredential = new TokenCredential(accessToken);
            var storageCredentials = new StorageCredentials(tokenCredential);
            var storageAccount = new CloudStorageAccount(storageCredentials, "accountName", string.Empty, useHttps: true);
            var cloudBlobClient = storageAccount.CreateCloudBlobClient();
            var cloudBlobContainer = cloudBlobClient.GetContainerReference("mycontainer");
            cloudBlobContainer.CreateIfNotExists();
        }

[ddobric]

In my case, I have restarted the docker desktop (host). If figured out that this happen when the machine goes to sleep.