c# - 如何将 Azure 托管标识与 Azure.Storage.Blobs.BlobServiceClient 结合使用？

Question

在 v11 SDK for .NET我能够使用托管身份 token 来访问 Azure blob:

var token = await new AzureServiceTokenProvider().GetAccessTokenAsync("https://storage.azure.com/");
var tokenCredential = new TokenCredential(token);
var storageCredentials = new StorageCredentials(tokenCredential);
var blob = new CloudBlobContainer(new Uri("https://some_storage.blob.core.windows.net/some_container"), storageCredentials);

现在我想切换到v12 SDK并且无法理解如何对 BlobServiceClient 执行相同的操作。

Answer 1

我有一个样本:https://github.com/juunas11/managedidentity-filesharing/blob/8410ed3f3d4061de7d40531c025bf6e474489135/Joonasw.ManagedIdentityFileSharingDemo/Services/AzureBlobStorageService.cs#L80

以下是它如何与 Azure.Identity 一起使用:

client = new BlobServiceClient(
    new Uri($"https://{_options.AccountName}.blob.core.windows.net"),
    new ManagedIdentityCredential());

如果您需要在本地运行 Azure 存储帐户，则可以使用自定义 TokenCredential，如下所示:https://github.com/juunas11/Joonasw.ManagedIdentityDemos/blob/3501ee6fff416db7349807e588532da5c3dd24b1/Joonasw.ManagedIdentityDemos/Services/DemoService.cs#L45 .

自定义 token 凭据:https://github.com/juunas11/Joonasw.ManagedIdentityDemos/blob/master/Joonasw.ManagedIdentityDemos/Services/ManagedIdentityStorageTokenCredential.cs .

针对存储模拟器的使用:

client = new BlobServiceClient("UseDevelopmentStorage=true");