Azure ServiceBus Invalid Signature

Question

I create a SAS TOKEN generated using the shared-access-signature npm module. When I try to connect to servicebus using the Azure SDK then I get the following error.

com.microsoft.azure.servicebus.primitives.ServiceBusException: 
Error{condition=com.microsoft:auth-failed, description='InvalidSignature:
The token has an invalid signature.', info=null}

My SAS token looks like this

SharedAccessSignature sr=https%3A%2F%2Fmy-servicebus-dev.servicebus.windows.net%2F&sig=somesig%2idonotdisclose0e1g%3D&se=1541700607.155&skn=RootManageSharedAccessKey

How should the SAS TOKEN be use ? Should it be the whole string or just the part except SharedAccessSignature ?

Please help. I am running out of clues.

Answer 1

How should the SAS TOKEN be use ? Should it be the whole string or just the part except SharedAccessSignature ?

Based on my test,the answer is yes. You need to pass the parameter as a whole string, including SharedAccessSignature sr=.

I generate sas token with the npm lib you provided.

var sas = require('shared-access-signature');

var url = 'https://******.servicebus.windows.net/BasicQueue';
var sharedAccessKeyName = 'RootManageSharedAccessKey';
var sharedAccessKey = '***';
var currentDate = new Date();
var expiry = currentDate.getTime() / 1000 + 3600; // We require expiry time in seconds since epoch.

var sas = require('shared-access-signature');
var signature = sas.generateServiceBusSignature(url, sharedAccessKeyName, sharedAccessKey, expiry);
console.log(signature);

Then use it in the below Java code：

import com.microsoft.azure.servicebus.Message;
import com.microsoft.azure.servicebus.QueueClient;
import com.microsoft.azure.servicebus.ReceiveMode;
import com.microsoft.azure.servicebus.primitives.ConnectionStringBuilder;
import com.microsoft.azure.servicebus.primitives.ServiceBusException;
public class SendMessages {
    private static String entityPath = "BasicQueue";

    private static String namespaceName = "***";

    private static String sharedAccessSingature = "SharedAccessSignature sr=https%3A%2F%2F***.servicebus.windows.net%2FBasicQueue&sig=ewu7ZwgPgDVSHBZiYB7paBp94KuMtby%2BiwK0fDJ5GLM%3D&se=1541735153.139&skn=RootManageSharedAccessKey";


    public static void main(String[] args) throws ServiceBusException, InterruptedException {

        QueueClient sendClient = new QueueClient(new ConnectionStringBuilder(namespaceName, entityPath, sharedAccessSingature), ReceiveMode.PEEKLOCK);

        String test = "test for 111";

        Message message = new Message(test);

        sendClient.sendAsync(message).thenRunAsync(() -> {
            System.out.printf("\n\tMessage acknowledged: Id = %s", message.getMessageId());
        });

        System.out.println("send success");
    }
}